Privacy Policy

CMSGO | Car Rental & Mobility Services

Website: https://cmsgo.com.my/
Effective Date: 15 October 2026
Last Updated: 15 October 2026

1. Introduction

Welcome to CMSGO.

At CMSGO (“CMSGO”, “we”, “us” or “our”), we recognize the importance of privacy, confidentiality and the responsible management of personal information.

We are committed to safeguarding the personal data entrusted to us by our customers, registered users, website visitors, drivers, corporate clients and business partners.

This Privacy Policy describes how we collect, record, use, process, disclose, retain, transfer and protect personal information in connection with our website, online booking platform, vehicle rental services, customer accounts and related business activities.

Our personal data handling practices are intended to comply with applicable Malaysian legislation, including the Personal Data Protection Act 2010 (Act 709), as amended by the Personal Data Protection (Amendment) Act 2024, and relevant regulations and regulatory guidance.

This Privacy Policy applies to personal data processed through our website, booking systems, customer communications and rental operations.

2. Scope of This Privacy Policy

This Privacy Policy applies when you:

Visit or browse the CMSGO website.
Search for available rental vehicles.
Make a daily, weekly, monthly or long-term car rental reservation.
Register for or access a CMSGO customer account.
Submit personal identification or driving documents.
Complete an online payment.
Contact CMSGO through our website, email, WhatsApp or other official channels.
Subscribe to promotional communications.
Participate in corporate rental arrangements.
Otherwise interact with our services.

This Privacy Policy does not replace our Rental Terms and Conditions, which govern the contractual relationship between CMSGO and its rental customers.

3. Categories of Personal Data We Collect

Depending on the services requested, CMSGO may collect and process the following categories of personal data.

3.1 Personal Identification Information

Full legal name.
Date of birth.
Nationality.
National Registration Identity Card (NRIC/MyKad) information.
Passport information.
Driving licence number, class, validity and issuing country.
International Driving Permit (IDP) information, where applicable.
Identification document photographs or scanned copies.

3.2 Contact Information

Email address.
Mobile telephone number.
WhatsApp contact number.
Residential or correspondence address.
Emergency contact details, where reasonably required.

3.3 Booking and Rental Information

Booking reference number.
Selected rental vehicle and vehicle category.
Pick-up and return locations.
Pick-up and return dates and times.
Rental duration.
Additional driver details, where applicable.
Rental charges, deposits and optional services.
Booking modifications, cancellations and extensions.
Vehicle inspection records and rental agreements.
Vehicle return information and rental history.

3.4 Payment and Transaction Information

Payment transaction reference.
Payment method and payment status.
Billing information.
Refund and cancellation records.
Invoices, receipts and financial transaction history.
Limited payment information provided by authorized payment processors.

3.5 Website and Technical Information

Internet Protocol (IP) address.
Device type and operating system.
Browser information.
Website pages visited.
Session and referral information.
Cookie identifiers.
Booking search and website interaction data.
Technical logs and security-related information.

3.6 Customer Communications

We may retain records of communications relating to reservations, enquiries, complaints, customer support, rental disputes and service requests.

These may include communications conducted through email, WhatsApp, website forms or other authorized business channels.

4. Sources of Personal Data

CMSGO may obtain personal data:

Directly from you when you create an account, submit a booking or contact us.
Through documents and information you provide during rental verification.
From authorized representatives making bookings on your behalf.
From corporate customers or business partners arranging rental services.
Through payment processors and booking service providers.
Automatically through website cookies, server logs and related technologies.
From insurers, relevant authorities or other lawful sources where necessary for rental administration, claims, fraud prevention or legal compliance.

Where you provide another person’s information, you should ensure that you are authorized to do so and that the individual has received the relevant privacy information.

5. Purposes of Personal Data Processing

CMSGO collects and processes personal data for legitimate and specified business purposes, including:

5.1 Rental Reservations

To check vehicle availability, process bookings, issue confirmations, administer reservations and arrange vehicle pick-up and return.

5.2 Identity and Driver Verification

To verify customer identity, driving licence validity, driver eligibility and compliance with applicable rental requirements.

5.3 Customer Account Management

To create and administer customer accounts, provide account access, maintain booking records and facilitate customer account services.

5.4 Payment Administration

To process rental charges, deposits, refunds, additional fees, invoices and related payment transactions.

5.5 Customer Communication

To respond to enquiries, provide booking updates, issue rental reminders and communicate essential service information.

5.6 Vehicle and Rental Management

To document vehicle handovers, returns, inspections, damage, rental extensions and related operational matters.

5.7 Insurance and Legal Matters

To manage accident reports, insurance claims, vehicle damage, traffic summons, legal requests, disputes and contractual enforcement.

5.8 Fraud Prevention and Security

To identify potentially fraudulent bookings, protect our systems, prevent unauthorized activity and maintain the security of our operations.

5.9 Service Improvement

To analyze booking trends, improve website usability, evaluate customer experience and enhance our services.

5.10 Marketing and Promotions

To communicate promotional offers, seasonal rental campaigns, new services and other marketing information where permitted by applicable law and subject to relevant consent and opt-out requirements.

We will not use personal data for purposes that are incompatible with those disclosed without satisfying applicable legal requirements.

6. Consent and Other Applicable Grounds for Processing

Where required under applicable law, CMSGO will obtain your consent before collecting or processing personal data.

Certain processing activities may also be permitted or required under applicable legal provisions, including those relating to contractual performance, legal obligations, protection of legal rights or other recognized exceptions.

Where processing depends on consent, you may request to withdraw that consent, subject to applicable legal and contractual restrictions.

Withdrawal of consent may affect our ability to provide services requiring the relevant personal information.

7. Mandatory and Optional Information

Certain personal information is necessary for CMSGO to provide car rental services.

This may include your full name, contact details, valid driving licence, applicable identity documents and booking information.

Failure to provide required information may prevent CMSGO from:

Verifying your identity or driving eligibility.
Confirming or completing your reservation.
Providing the requested rental vehicle.
Processing a payment or refund.
Meeting applicable insurance or legal requirements.

Optional information, including marketing preferences, may be provided voluntarily unless otherwise stated.

8. Identification Documents and Driver Verification

CMSGO may require customers to submit identity and driving documents before vehicle collection.

Such documents may include a Malaysian NRIC/MyKad, passport, driving licence or International Driving Permit, depending on the customer’s circumstances and applicable rental requirements.

These documents are used for identity verification, eligibility assessment, rental administration, fraud prevention, insurance-related matters and legal compliance.

CMSGO seeks to limit access to identification documents to authorized personnel and service providers with a legitimate operational need.

Customers should upload documents only through authorized CMSGO channels.

We will not knowingly publish customer identification documents or disclose them for unrelated commercial purposes.

9. Online Payment Processing

CMSGO facilitates online payments through supported third-party payment service providers.

Depending on availability and checkout configuration, payment methods may include Visa, Mastercard, FPX online banking and GrabPay, with payment processing services provided through Stripe or other authorized payment providers.

Payment service providers may independently collect and process payment information in accordance with their own privacy notices, security procedures and applicable legal obligations.

CMSGO may retain transaction references, payment confirmations, billing records, refund information and limited transaction details necessary to administer rental services.

CMSGO does not require customers to provide full payment card credentials through ordinary email or WhatsApp messages.

Customers should use only authorized CMSGO payment pages and payment links.

10. Customer Accounts and Login Security

Customers may register a CMSGO account to access available account features, manage personal information and review eligible booking records.

Account information may include the customer’s name, email address, WhatsApp number and authentication credentials.

Customers are responsible for safeguarding their passwords and avoiding unauthorized disclosure of login information.

If you believe your account has been compromised, please contact CMSGO through our official contact page.

CMSGO may implement reasonable account security measures to protect registered users and prevent unauthorized access.

11. Disclosure of Personal Data

CMSGO may disclose relevant personal data to third parties where reasonably necessary and legally permitted.

Such recipients may include:

Authorized CMSGO employees and operational personnel.
Vehicle delivery and collection personnel.
Payment gateways and financial service providers.
Website hosting, booking software and information technology providers.
Insurance companies, claims administrators and appointed assessors.
Corporate booking partners and authorized intermediaries.
Accountants, auditors, lawyers and professional advisers.
Government agencies, regulators and law enforcement authorities.
The Road Transport Department (JPJ), police or other competent authorities where disclosure is legally required or permitted.
Other service providers necessary to fulfil the disclosed purposes.

Disclosures will be limited, where practicable, to information reasonably required for the relevant purpose.

CMSGO does not sell customer personal data to third-party data brokers.

12. Third-Party Booking and Technology Services

CMSGO may use third-party technology services to operate its website and booking platform.

These may include WordPress, WooCommerce, Tourfic or other booking-related software, payment providers, website hosting services, email delivery providers and customer communication tools.

Personal data may be processed through these services where necessary to deliver website functionality, booking management, customer communication and payment processing.

Each independent third-party service may maintain its own privacy and data processing terms.

CMSGO will take reasonable steps to assess and manage relevant third-party data protection risks.

13. Cookies and Tracking Technologies

CMSGO may use cookies and similar technologies to support website operations and improve user experience.

Cookies may include:

Essential Cookies: Necessary for website functionality, account login, security, booking sessions and checkout processes.

Functional Cookies: Used to remember user preferences and improve website usability.

Analytics Cookies: Used to understand website traffic, visitor activity and service performance.

Advertising Cookies: Used, where implemented and permitted, to measure advertising effectiveness and support relevant marketing activities.

Where applicable law requires consent for non-essential tracking, CMSGO will seek the appropriate consent.

Visitors may adjust browser settings to manage or disable cookies. However, certain website features may not operate correctly when essential cookies are disabled.

14. Marketing Communications

CMSGO may offer promotional information relating to car rental services, discounts, seasonal promotions and other relevant offers.

Marketing communications may be delivered through email or other authorized communication channels where legally permitted.

Where consent is required, CMSGO will seek appropriate consent before sending direct marketing communications.

Customers may withdraw marketing consent or request to stop receiving promotional messages through the unsubscribe mechanism provided or by contacting CMSGO.

Service-related messages, such as booking confirmations, payment reminders and important rental notices, may continue where necessary for rental administration.

15. International Transfers of Personal Data

Some third-party service providers used by CMSGO may operate infrastructure or process information outside Malaysia.

Accordingly, certain personal data may be transferred to or accessed from other jurisdictions where necessary for hosting, payment processing, communications or other legitimate operational purposes.

CMSGO will take reasonable steps to ensure that any international transfer complies with applicable Malaysian personal data protection requirements and is supported by appropriate safeguards or other legally permitted transfer arrangements.

16. Personal Data Security

CMSGO recognizes the importance of protecting customer information, particularly identity documents, driving credentials, account details and booking records.

We seek to implement appropriate technical, administrative and organizational safeguards, which may include:

Access restrictions based on operational responsibilities.
Secure website communication protocols.
Password and account access controls.
Restricted access to uploaded customer documents.
Software maintenance and security updates.
Appropriate payment service provider arrangements.
Security monitoring and incident response procedures.
Confidential handling of customer information.

Although reasonable measures are taken to protect personal data, no electronic system or internet transmission can be guaranteed to be entirely free from security risks.

17. Personal Data Breaches

If CMSGO becomes aware of a personal data security incident, we will assess its nature, scope and potential impact.

Where notification is required under applicable Malaysian data protection law, CMSGO will take appropriate steps to notify the relevant regulator and affected individuals within the applicable legal requirements.

We may also implement containment, investigation, recovery and corrective measures to reduce the risk of further unauthorized access or disclosure.

18. Retention of Personal Data

CMSGO will retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, comply with applicable legal and regulatory requirements, maintain relevant financial and rental records, resolve disputes and protect legitimate contractual rights.

Retention periods may vary depending on the category of data and the applicable legal or operational requirements.

Identity documents, rental records, payment records, communications and insurance-related documents may therefore be subject to different retention periods.

Once personal data is no longer required and no lawful retention obligation applies, CMSGO will take reasonable steps to securely delete, destroy or anonymize it.

19. Accuracy of Personal Data

Customers are responsible for providing information that is accurate, complete and up to date.

Where necessary, customers should inform CMSGO of changes to their contact information, identification details or other relevant personal data.

CMSGO may request supporting information to verify corrections and maintain accurate records.

20. Your Personal Data Rights

Subject to applicable Malaysian law and relevant exceptions, individuals may have the right to:

Request access to personal data held by CMSGO.
Request correction of inaccurate or incomplete personal data.
Withdraw consent where applicable.
Request that certain processing activities cease where legally permitted.
Object to or opt out of direct marketing communications.
Request information about the purposes for which their personal data is processed.
Exercise applicable data portability rights, where available under relevant law and implementation requirements.

CMSGO may require reasonable identity verification before responding to requests.

Requests will be handled in accordance with applicable legal requirements, including relevant timelines, exemptions and permitted fees.

Certain personal information may need to be retained despite a request where required by law or necessary for ongoing contractual or legal matters.

21. Automated Processing and Fraud Prevention

CMSGO may use booking software, payment systems and other technology to support automated operational processes.

These may include vehicle availability checks, booking calculations, payment verification, transaction screening and security monitoring.

Where automated processing materially affects individuals and additional rights or disclosures are required by applicable law, CMSGO will address those requirements.

Customers may contact CMSGO to raise concerns about decisions affecting their bookings or accounts.

22. Third-Party Websites

Our website may contain links to external websites, social media platforms, payment providers or other third-party services.

These external websites operate independently and may have their own privacy policies.

CMSGO is not responsible for the privacy practices, security arrangements or content of independently operated third-party websites.

Customers are encouraged to review the relevant third-party privacy notices before submitting personal information.

23. Children’s Personal Data

CMSGO’s car rental services are intended for individuals who satisfy the applicable minimum age and driving eligibility requirements.

We do not knowingly permit children to register as rental drivers or make vehicle rental reservations in breach of applicable eligibility requirements.

Where children’s personal information is collected incidentally or for a legitimate purpose, CMSGO will handle that information in accordance with applicable legal requirements.

24. Corporate and Third-Party Bookings

For corporate rentals or bookings made through authorized representatives, CMSGO may receive personal information relating to designated drivers, employees or other authorized individuals.

Corporate customers and booking representatives should ensure that they are authorized to provide such information and that relevant individuals have received appropriate privacy information.

CMSGO will process such information for rental administration, verification, communication, contractual and other disclosed purposes.

25. Changes to This Privacy Policy

CMSGO reserves the right to review and update this Privacy Policy to reflect changes in our operations, services, technology, legal obligations or data protection practices.

Updated versions will be published on our website with the applicable revision date.

Where legally required, we will provide additional notification or obtain renewed consent for material changes to personal data processing activities.

We encourage customers and website visitors to review this Privacy Policy periodically.

26. Privacy Enquiries, Requests and Complaints

If you have any questions, concerns, complaints or requests concerning the collection, use, disclosure, correction or protection of your personal data, please contact CMSGO.

CMSGO

Location: Johor Bahru, Johor, Malaysia

Official Website: https://cmsgo.com.my/

Contact Page: https://cmsgo.com.my/contact-cmsgo/

Privacy Contact: Please submit your enquiry through our official contact page and indicate that it concerns personal data protection.

We may request information reasonably necessary to verify your identity and process your request.

Where applicable, individuals may also refer unresolved personal data protection concerns to the Personal Data Protection Commissioner of Malaysia.

27. Language and Interpretation

This Privacy Policy is prepared in English.

CMSGO will also make available a Bahasa Malaysia version of the applicable personal data protection notice to meet relevant Malaysian legal requirements.

In the event of any inconsistency between language versions, the applicable legal requirements shall prevail.

28. Contact and Further Information

For general enquiries regarding CMSGO’s services, reservations or this Privacy Policy, please visit:

Contact Us

For information regarding personal data protection legislation in Malaysia, you may refer to the official Personal Data Protection Commissioner website.

CMSGO

Your Privacy. Our Responsibility.