Privacy Policy

This Privacy Policy applies to the information handled when you use our Malaysia eVisa application assistance service and when you visit the informational pages of this website. It covers applicants, people who apply on behalf of others, and anyone whose details are included in an application, such as family members or a host in Malaysia.

Two different parties handle information during an application. We handle it to prepare and submit the application and to communicate with you. The relevant immigration authority handles it independently once the application has been submitted, under its own rules. This policy describes our handling only; it does not describe, and we do not control, how Immigration processes, stores or retains the information it receives.

The information we handle is the information you give us for the purpose of an application. For each person included in a request this typically means identity details (full name as shown in the passport, date of birth, nationality and, where the form asks for them, sex and place of birth), contact details (an email address and a telephone number you can reach while travelling), and, for a Business eVisa, professional details such as your role and the organisation you represent.

Where you apply for someone else, you provide their information on their behalf. You should only do so with their knowledge, and you remain responsible for its accuracy.

A visa application is built around the passport, so we handle the passport number, issue and expiry details and a copy of the biodata page for every applicant. We also handle the travel information the application asks for: intended arrival and departure dates, the purpose of the visit, flight or other transport details, the accommodation address in Malaysia and, where relevant, details of a host or of onward travel.

For the Malaysia Digital Arrival Card service, the arrival information you provide, such as the point of arrival, transport details and accommodation, is handled in the same way and for the equivalent purpose of preparing and submitting the arrival card.

Depending on the visa category, an application is supported by documents: the passport copy and photograph, flight bookings, hotel confirmations, evidence of financial support, a residence permit for applicants living outside their country of nationality, host documents such as an identity card copy, utility bill and invitation letter, business invitations and company or employment letters, and for the entry-visa categories the Visa with Reference letter, the Immigration approval letter and category-specific papers such as admission letters or family certificates.

These documents often contain information about people other than the applicant, for example a host or an employer. We use them only to prepare and submit the application they were provided for.

Application information is collected when you enter it and upload documents through the application service or the Digital Arrival Card service, both of which are reached from the Apply buttons on this website, and when you send us corrections, additional documents or messages through the communication channel used for your application.

The informational pages of this website themselves do not ask you for personal information. They contain no sign-up forms, no account system and no newsletter. The only interactive element is a country search on the Digital Arrival Card page, which runs in your browser and sends nothing to us.

We use the information you provide for a small set of purposes connected to the service you requested.

During preparation, the people who review applications for us see the information and documents you provide in order to check them and prepare the application. Information is used as you provided it; we do not combine it with information from other sources, build profiles or use it for marketing.

Submission transfers the application, including the personal, passport and travel information and the supporting documents it requires, to Immigration. From that point the information is also held by Immigration under its own processes, and a request for additional documents or verification may reach us from Immigration and be passed to you.

The primary recipient of your information is the relevant immigration authority, which receives the application in order to assess it. Immigration decides independently what it reviews, whether it requires further information or verification, and what the outcome is. We cannot see inside that assessment, cannot retrieve information once it has been submitted and do not control Immigration's records, retention or internal systems.

For the Digital Arrival Card, the arrival information is submitted to the arrival-card system for the same reason. In both cases we share only what the submission requires.

Operating an online service involves systems for hosting the website and the application platform, for taking payments and for sending and receiving communications. Where a provider of such a system handles information on our behalf, it does so only to provide that system and is not permitted to use the information for its own purposes.

We do not sell personal information, and we do not share it with anyone for advertising or marketing. Apart from Immigration and the arrival-card system described above, we disclose information only where the law requires it or where it is necessary to protect our legal rights.

Service fees are paid online when you request the service. The payment is handled by the payment system used by the application service, which receives the details needed to take the payment. We receive confirmation of the transaction and the records needed to account for it, such as the amount, the date and a transaction reference, and we keep those records together with the application they relate to.

The informational pages of this website are delivered as static pages. They do not set cookies of their own, do not load analytics, advertising or social-media scripts, and do not run any third-party tracking. The fonts used on the site are served with the site itself rather than requested from an outside service. Your browser may still store ordinary technical data, such as cached pages, in the normal way.

The application service and the Digital Arrival Card service run on separate platforms reached from this site. Any cookies or similar technologies those platforms use are described in the notices shown there.

We use your contact details to communicate about your application: to request corrections or additional documents, to pass on requests received from Immigration, to tell you the outcome and to answer your questions. We do not use them to send marketing. Because an application does not progress while a request to you is outstanding, we may contact you more than once about the same request.

Messages you send us about your application, and our replies, are kept with the application record so that the history of the request is available if it needs to be checked later.

We apply organisational and technical measures that are appropriate to the sensitivity of passport and travel information, and we limit access to the people who need it to prepare applications and respond to you. No method of transmission or storage can be described as completely secure, and we do not make claims about particular standards or certifications. If you believe the security of your information has been compromised, tell us immediately through the channel used for your application.

We keep application information for as long as it is needed to prepare and submit the application, to respond to requests from Immigration, to deal with any question or dispute about the service and to meet record-keeping obligations that apply to us, such as those relating to payments. When information is no longer needed for these purposes it is deleted or made anonymous.

Information submitted to Immigration is retained by Immigration under its own rules, which this policy does not govern.

Applicants use the service from many countries, and every application is submitted to Immigration in Malaysia. Your information therefore necessarily travels from the country in which you provide it to Malaysia as part of submission, and it may be handled in other countries by the systems used to operate the service. Where information is transferred internationally, we handle it in accordance with this policy wherever it is processed.

To the extent provided by the law that applies to you, you may ask us for access to the personal information we hold about you, ask us to correct information that is inaccurate, ask us to delete information we no longer need, or object to a particular use of it. We will respond to such requests within the time the applicable law allows.

Two practical limits apply. Information that has already been submitted to Immigration is held by Immigration and cannot be altered or withdrawn by us; a correction after submission depends on the immigration process. And information that we must keep to meet a legal or record-keeping obligation, such as payment records, cannot be deleted while that obligation lasts.

Children travelling to Malaysia need their own application and their own arrival card, so we handle children's passport and personal details when an adult includes them in a request. That information is provided by the parent or guardian making the application, is used only for the child's application, and is treated with the same care as any other applicant's information. We do not knowingly accept a request made directly by a child.

This website links to the application service and to the Digital Arrival Card service, where application information is entered. It does not link to other external websites. Where a page you reach from this site is operated separately, the privacy notice shown on that page governs the information you enter there, and you should read it before proceeding.

We may revise this policy when the service, the systems used to operate it or the law changes. The current version is the one published on this page. If a change materially affects how information already provided to us is used, we will communicate it to affected applicants through the channel used for their application.

Questions about this policy, and requests to access, correct or delete your information, should be sent through the communication channel used for your application. A dedicated contact point for privacy inquiries will be published here once confirmed.