MALAYSIA AIRLINES BERHAD PRIVACY POLICY
马来西亚国际航空有限公司隐私政策
Last Updated: 13 August 2026
最后更新日期：2026年8月13日
Applicability of Privacy Policy
隐私政策的适用范围
Malaysia Airlines Berhad and its group of companies under Malaysia Aviation Group is committed to the protection of your Personal Data and takes the matter of protecting your privacy as high priority.
马来西亚国际航空有限公司及马来西亚航空集团旗下各公司致力于保护您的个人数据，并高度重视您的隐私保护。
This Privacy Policy explains general terms on how we collect, use and protect the privacy of your Personal Data under various privacy laws to which we are subjected to.
本隐私政策阐述了我们根据适用的各项隐私保护法律收集、使用及保护您个人数据的一般条款。
For the purposes of the EU General Data Protection Regulation (“GDPR”), the data controller is Malaysia Airlines Berhad, with its registered office at Malaysia Airlines Berhad, 1st Floor, Administration Building, South Support Zone, KLIA, 64000 Sepang, Selangor (from now on referred to as (“Malaysia Airlines Berhad”, “we”, or “us”).
就欧盟《通用数据保护条例》（“GDPR”）而言，数据控制者为马来西亚国际航空有限公司，其注册办公地址为：马来西亚国际航空有限公司，行政大楼一楼，南区支援区，吉隆坡国际机场（KLIA），雪兰莪州雪邦市64000（以下简称“马来西亚国际航空有限公司”、“我们”或“我方”）。
If you booked a flight with Malaysia Airlines but one or more flights in your booking are to be operated by other airlines, such other airlines are also a “data controller” for the purposes of GDPR compliance. If you have reserved any non-flight services through Malaysia Airlines, the provider of such services is also a “data controller”. Please access the respective privacy policies of the other airlines or non-flight service providers through their official websites or you may request a copy of their privacy policies from them directly.
如果您预订了马来西亚国际航空的航班，但您预订中的一个或多个航班由其他航空公司承运，则该等其他航空公司就GDPR合规而言同样是“数据控制者”。如果您通过马来西亚国际航空预订了任何非航班服务，则该等服务的提供方同样属于“数据控制者”。请通过其他航空公司或非航班服务提供商的官方网站查阅其各自的隐私政策，或直接向其索取隐私政策副本。
Please read this Privacy Policy to understand how we will collect and use your Personal Data and the rights you have in relation to your Personal Data. This Privacy Policy was last updated on the date above and may vary from time to time so please check it regularly.
请阅读本隐私政策，以了解我们将如何收集和使用您的个人数据，以及您就您的个人数据享有的权利。本隐私政策已于上述日期最后更新，并可能不时变更，请您定期查阅。
By visiting our website and using our products and services, you acknowledge the terms of this Privacy Policy together with our Terms and Conditions and the use and disclosure of your Personal Data as set out in this Privacy Policy.
访问我们的网站并使用我们的产品和服务，即表示您知悉本隐私政策的条款、我们的条款与条件，以及本隐私政策所载对您个人数据的使用和披露。
What is Personal Data?
什么是个人数据？
“Personal Data” means any information relating to an identified or identifiable natural person.
“个人数据”指与已识别或可识别的自然人相关的任何信息。
The types of Personal Data that we collect directly from you or from third parties depend on the circumstances of collection and on the nature of the service requested or transaction undertaken. It may include:
我们直接向您或通过第三方收集的个人数据类型，视收集时的具体情况以及所请求的服务或所进行的交易的性质而定，可能包括：
a)personal information that links back to an individual;
可追溯至特定个人的个人信息；
b)contact information;
联系信息；
c)payment information;
支付信息；
d)travel information;
出行信息；
e)health information;
健康信息；
f)technical information;
技术信息；
g)IP address and GPS location service of mobile device accessing to our website or/and mobile application; and
访问我们网站和/或移动应用程序的移动设备的IP地址及GPS位置信息；以及
h)statistical data.
统计数据。
How do we collect your Personal Data?
我们如何收集您的个人数据？
We may collect and receive Personal Data directly from you or from your authorised representatives (i.e. persons whom you have authorised, persons who have been validly identified as being you or your authorised representative pursuant to our security procedures), from third parties (e.g., travel agent or service providers) or the Personal Data of your relatives or principal where you disclose same on their behalf, including when you:
我们可能直接从您或您的授权代表（即经您授权的人士，或根据我们的安全程序经有效身份核验确认为您本人或您授权代表的人士）处，或从第三方（例如旅行代理商或服务提供商）收集和接收个人数据；如您代表亲属或委托人披露其个人数据，我们也可能收集和接收该等数据。上述情形包括您：
(a) use any of our services, including when you travel with us or use airports where we operate or any facilities within those airports that we operate, such as our lounge facilities;
（a）使用我们的任何服务，包括搭乘我们的航班出行，或使用我们开展业务的机场及该等机场内由我们运营的任何设施，例如我们的贵宾休息室；
(b) use or access our Website or Mobile Apps, particularly when completing the "passenger details" section during the course of a booking, even if you do not complete the booking, including where information is submitted through online check-in or travel verification processes;
（b）使用或访问我们的网站或移动应用程序，尤其是在预订过程中填写“乘客信息”部分，包括最终未完成预订的情形，以及通过网上值机或出行核验流程提交信息的情形；
(c) communicate with us such as by email, telephone, in writing or through our customer services pages or social media platforms; or
（c）通过电子邮件、电话、书面形式，或通过我们的客户服务页面或社交媒体平台与我们沟通；或
(d) register, create or modify an online or in-app account with us, including your Enrich membership.
（d）在我们这里注册、创建或修改在线或应用内账户，包括您的Enrich会员账户。
We may receive your Personal Data from other entities within our group of companies under Malaysia Aviation Group.
我们可能从马来西亚航空集团旗下的其他实体接收您的个人数据。
We may also collect your Personal Data from publicly available sources through our Website or Mobile Apps and other channels including our ticketing counters and airport operations and third party providers or our subcontractors where you have consented to providing your Personal Data to them or where we subcontract them to assist us in providing services to you (e.g. wheelchair assistance, transfers, special meals).
我们还可能通过我们的网站、移动应用程序及其他渠道（包括票务柜台和机场运营环节）从公开来源收集您的个人数据；在您已同意向第三方提供商或我们的分包商提供个人数据，或我们委托该等主体协助向您提供服务（例如轮椅协助、接送和特殊餐食）的情况下，我们也可能从该等主体处收集您的个人数据。
Where another person makes reservations on your behalf, you undertake and will ensure that you have authorized the disclosure of your Personal Data and are aware of the terms and conditions of this Privacy Policy. Where you are booking on behalf of another person, you represent and warrant that you have the consent of those persons to provide their Personal Data. In addition, where you are booking on behalf of children (those below 18 of age), please ensure that you are over 18 and have appropriate authority.
如他人代表您进行预订，您承诺并确保您已授权披露您的个人数据，并已知悉本隐私政策的条款与条件。如您代表他人预订，您声明并保证已获得该等人士的同意，可以向我们提供其个人数据。此外，如您代表儿童（未满18周岁的人士）预订，请确保您已年满18周岁并获得适当授权。
Where you disclose Personal Data on behalf of another person, you undertake and will ensure that the individual whose Personal Data is supplied to Malaysia Airlines Berhad has authorized the disclosure, is informed of and consents to the terms and conditions of this Privacy Notice. Where the disclosure if in respect of a child’s Personal Data, you should do as only as the parent or legal guardian of that child and enter into relevant contracts on behalf of that child.
如您代表他人披露个人数据，您承诺并确保其个人数据被提供给马来西亚国际航空有限公司的相关个人已授权该披露，并已获知且同意本隐私声明的条款与条件。如披露涉及儿童的个人数据，您仅应以该儿童父母或法定监护人的身份进行披露，并代表该儿童订立相关合同。
What do we use your Personal Data for?
我们将您的个人数据用于哪些目的？
We may use your Personal Data for the following purposes:
我们可能将您的个人数据用于以下目的：
a)to enable us to provide our services and perform our obligations to you;
使我们能够提供服务并履行对您的义务；
b)to facilitate your travel (e.g., making a booking) and freight arrangements;
便利您的出行（例如办理预订）及货运安排；
c)to verify the identity, travel eligibility and travel documentation requirements of passengers, and to facilitate check-in, boarding and other travel-related processes;
核实乘客身份、是否具备出行资格以及是否符合旅行证件要求，并为值机、登机及其他旅行相关流程提供便利；
d)to provide flight alert messages;
提供航班提醒消息；
e)to facilitate internet check-in, including the upload, capture, scanning and verification of travel documents and assessment of travel eligibility requirements through automated or assisted document validation processes;
支持网上值机，包括通过自动化或人工辅助的证件验证流程，上传、采集、扫描及核验旅行证件，并评估乘客是否符合出行资格要求；
f)to process any commercial transaction (e.g. In-flight sales);
处理任何商业交易（例如机上销售）；
g)to maintain your Enrich loyalty account, facilitate your participation in Enrich loyalty programme or third parties’ loyalty programmes which have partnership with us;
维护您的Enrich常旅客账户，便利您参与Enrich常旅客计划或与我们合作的第三方常旅客计划；
h)to enable experience using your Enrich loyalty account or any other loyalty programme under Malaysia Aviation Group;
使您能够使用您的Enrich常旅客账户或马来西亚航空集团旗下的任何其他常旅客计划；
i)to protect the safety and well-being of yourself and/or other customers;
保护您和/或其他客户的安全与福祉；
j)to investigate and respond to claims and inquiries from you;
调查并回应您的索赔和问询；
k)to remind you to complete your booking and/or offer our assistance (in case, for instance, failure to complete due to technical difficulties);
提醒您完成预订和/或提供我们的协助（例如因技术故障而未能完成预订的情形）；
l)to provide in-flight catering and other services that best meet your preferences and needs;
提供最符合您偏好和需求的机上餐饮及其他服务；
m)for financial purposes such as credit or other payment card verification, accounting, billing and audit; and / or
用于财务目的，例如信用卡或其他支付卡核验、会计核算、账单和审计；和/或
n)for business development purposes such as statistical, research and marketing analysis, systems testing, maintenance and development, quality assurance, customer surveys, customer relations to advise on alterations to flights or to help us in any future dealings with you, for example by identifying your requirements and preference;
用于业务发展目的，例如统计、研究和营销分析，系统测试、维护与开发，质量保证，客户调查，客户关系维护，以便就航班变更向您提供建议，或通过识别您的需求和偏好协助我们未来与您的任何往来；
o)to customise the content in our website or mobile application according to your needs, preferences and personality;
根据您的需求、偏好和个性定制我们网站或移动应用程序中的内容；
p)to share your Personal Data with our selected partners or/and our group of companies within Malaysia Aviation Group to enable us and/or our partners to personalise the services or products offered to you;
与我们的选定合作伙伴和/或马来西亚航空集团旗下公司共享您的个人数据，以使我们和/或合作伙伴能够个性化向您提供的服务或产品；
q)to comply with any applicable legal, regulatory, immigration, border control, security and travel documentation requirements;
遵守任何适用的法律法规以及与移民、边境管制、安保和旅行证件有关的要求；
r)to communicate and facilitate promotions, offers, product, services and information on products and activities, offers to upgrade or other notifications in relation to your booking;
就促销活动、优惠、产品、服务、产品与活动信息、升舱优惠或与您预订有关的其他通知与您沟通，并为相关安排提供便利；
s)to allow you to participate in our programmes or features via our website or/and mobile application when you opt to do so; and/or
在您选择参与时，允许您通过我们的网站和/或移动应用程序参与我们的计划或功能；和/或
t)to operate our competitions, promotions, programmes and events via our newsletters and other communications offered by Malaysia Airlines, any group of companies under Malaysia Aviation Group or our selected business partners.
通过马来西亚国际航空、马来西亚航空集团旗下任何公司或我们选定的业务合作伙伴提供的新闻通讯及其他通信，开展我们的竞赛、促销活动、计划和活动。
Some of the Personal Data processing above may be an optional service. You may choose not to receive these emails at any time by following the unsubscribe link at the bottom of each such email or email to privacy@malaysiaairlines.com to request for removal of subscription notification. Kindly note we may not be able to optimise your user experience when using our products or services by doing so.
上述部分个人数据处理可能属于可选服务。您可以随时选择不接收此类电子邮件，方法是点击每封此类邮件底部的退订链接，或发送电子邮件至privacy@malaysiaairlines.com请求取消订阅通知。请注意，退订后，我们可能无法在您使用我们的产品或服务时为您提供最佳用户体验。
What are our legal bases for processing your Personal Data?
我们处理您的个人数据的法律依据是什么？
There are a number of different ways that we are lawfully able to process your Personal Data. We have set these out below.
法律允许我们通过多种方式处理您的个人数据，具体如下。
Where using your Personal Data is necessary for us to carry out our obligations under our contract with you
为履行我们与您之间的合同义务而有必要使用您的个人数据时
We are allowed to use your Personal Data when it is necessary to do so for the performance of our contract with you.
为履行我们与您之间的合同而有必要使用您的个人数据时，我们有权使用该等数据。
For example, we need to collect your contact details in order to be able to book your flight or provide you with any additional services you have requested.
例如，我们需要收集您的联系方式，以便为您预订航班或提供您所要求的任何附加服务。
Where processing is necessary for us to carry out our legal obligations
为履行我们的法律义务而有必要处理您的个人数据时
As well as our obligations to you under any contract, we also have other legal obligations that we need to comply with and we are allowed to use your Personal Data when we need to in order to comply with those other legal obligations.
除我们在任何合同项下对您承担的义务外，我们还须遵守其他法律义务，当为遵守该等其他法律义务所需要时，我们有权使用您的个人数据。
For example, we are required to transfer certain Personal Data to government authorities for anti-terrorism purposes.
例如，出于反恐目的，我们需要将某些个人数据传输给政府当局。
Where using your data is in our legitimate interests
在使用您的数据符合我们的合法利益时
We are allowed to use your Personal Data where it is in our interests to do so, and those interests aren't outweighed by any potential prejudice to you. We believe that our use of your Personal Data is within a number of our legitimate interests, including but not limited to:
在使用您的个人数据符合我们的利益，且该等利益不会因可能对您造成的不利影响而失去正当性时，我们有权使用您的个人数据。我们认为，我们对您个人数据的使用符合多项合法利益，包括但不限于：
•To enable us to provide our services to our customers;
使我们能够向客户提供服务；
•To help us satisfy our legal obligations (for example, in relation to anti-terrorism);
帮助我们履行法律义务（例如与反恐相关的义务）；
•To help us understand our customers better and provide better, more relevant services to them; and
帮助我们更好地了解客户，并为其提供更优质、更切合其需求的服务；以及
•To help us keep our systems and physical premises secure and prevent unauthorized access or cyberattacks.
帮助我们维护系统和实体场所的安全，防止未经授权的访问或网络攻击。
We don't think that any of the activities set out in this Privacy Policy will prejudice you in any way. However, you do have the right to object to us processing your Personal Data on this basis. We have set out details regarding how you can go about doing this above.
我们认为，本隐私政策所述任何活动均不会以任何方式损害您的利益。但是，您确实有权反对我们基于该依据处理您的个人数据。关于如何行使该权利，上文已载明相关详情。
Where you give us your consent to use your Personal Data
在您同意我们使用您的个人数据时
We are allowed to use your data where you have specifically consented. In order for your consent to be valid:
在您明确同意的情况下，我们有权使用您的数据。为使您的同意有效：
•It has to be given freely, without us putting you under any type of pressure;
同意必须自愿作出，我们不会以任何方式向您施加压力；
•You have to know what you are consenting to – so we'll make sure we give you enough information;
您必须了解您所同意的内容，因此我们会确保向您提供充分的信息；
•You should only be asked to consent to one thing at a time – we therefore avoid "bundling" consents together so that you don't know exactly what you're agreeing to; and
每次应仅就一项事项征求您的同意，因此我们会避免将同意事项“捆绑”在一起，以免您无法明确知悉自己所同意的具体事项；以及
•You need to take positive and affirmative action in giving us your consent – we're likely to provide a tick box for you to check so that this requirement is met in a clear and unambiguous fashion.
您需要通过积极、明确的行为表示同意；我们可能会提供勾选框供您选择，以清晰、明确地满足该项要求。
As part of our relationship with you, we may ask you for specific consents to allow us to use your data in certain ways. For example, we currently ask for your consent to provide you with marketing communications. If we require your consent, we will provide you with sufficient information so that you can decide whether or not you wish to consent.
在与您建立及维持关系的过程中，我们可能会就以特定方式使用您的数据另行征得您的同意。例如，我们目前会征求您的同意，以便向您发送营销信息。如需征得您的同意，我们将向您提供充分信息，以便您决定是否同意。
You have the right to withdraw your consent at any time. We have set out details regarding how you can go about this above.
您有权随时撤回您的同意。关于如何行使该权利，上文已载明相关详情。
Your rights
您的权利
You have various rights in relation to the Personal Data which we hold about you. We have described these below.
就我们所持有的关于您的个人数据，您享有多项权利。下文将予以说明。
To get in touch with us about any of these rights, please contact us at:
如需就上述任何权利与我们联系，请通过以下方式联系我们：
Business Integrity Department,
商业诚信部（Business Integrity Department），
Malaysia Airlines Berhad, 1st Floor, Administration Building,
马来西亚国际航空有限公司（Malaysia Airlines Berhad），行政大楼一楼
South Support Zone, KLIA, 64000 Sepang, Selangor, Malaysia.
马来西亚雪兰莪州雪邦市64000，吉隆坡国际机场（KLIA）南区支援区。
privacy@malaysiaairlines.com
privacy@malaysiaairlines.com
We will seek to deal with your request without undue delay, and in any event within one month (subject to any extensions to which we are lawfully entitled). Please note that we may keep a record of your communications to help us resolve any issues which you raise.
我们将设法在无不当延误的情况下处理您的请求，且无论如何应在一个月内处理完毕（除非我们依法有权延长处理期限）。请注意，我们可能会保留您的通讯记录，以帮助我们解决您提出的任何问题。
Right to object
反对权
This right enables you to object to us processing your Personal Data where we do so for one of the following reasons:
该权利使您能够反对我们出于以下任一原因处理您的个人数据：
•because it is in our legitimate interests to do so (for further information please see below);
因为该处理符合我们的合法利益（详情请参阅下文）；
•to enable us to perform a task in the public interest or exercise official authority;
为使我们能够执行公共利益任务或行使官方权力；
•to send you direct marketing materials; or
向您发送直接营销材料；或
•for scientific, historical, research, or statistical purposes.
出于科学、历史、研究或统计目的。
Right to withdraw consent
撤回同意权
Where we have obtained your consent to process your Personal Data for certain activities (for example, for marketing), you may withdraw this consent at any time and we will cease to use your data for that purpose unless we consider that there is an alternative legal basis to justify our continued processing of your data for this purpose, in which case we will inform you of this condition.
如我们已就特定活动（例如营销）获得您的同意以处理您的个人数据，您可随时撤回该同意，我们将停止为此目的使用您的数据，除非我们认为存在其他法律依据可证明我们继续为此目的处理您的数据具有正当性，在此情况下，我们将告知您该情况。
In particular, you may elect to stop receiving promotional activities by:
具体而言，您可以选择通过以下方式停止接收促销信息：
(a) unsubscribing from the mailing list;
（a）从邮件列表中退订；
(b) editing the relevant account settings to unsubscribe; or
（b）编辑相关账户设置以退订；或
(c) sending a request to privacy@malaysiaairlines.com
（c）向privacy@malaysiaairlines.com发送请求。
Data Subject Access Requests
数据主体访问请求
You may ask us for a copy of the information we hold about you at any time, and request us to modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge you for this unless permitted by law. If you request further copies of this information from us, we may charge you a reasonable administrative cost. Where we are legally permitted to do so, we may refuse your request. If we refuse your request we will always tell you the reasons for doing so.
您可以随时向我们索取我们所持有的关于您的信息的副本，并要求我们修改、更新或删除该等信息。如我们向您提供我们所持有的关于您的信息的访问权限，除法律允许外，我们不会就此向您收费。如您向我们索取该等信息的更多副本，我们可能向您收取合理的行政费用。在法律允许的情况下，我们可能拒绝您的请求。如我们拒绝您的请求，我们将始终告知您拒绝的理由。
Right to erasure
删除权
You have the right to request that we "erase" your Personal Data in certain circumstances. Normally, this right exists where:
在特定情形下，您有权要求我们“删除”您的个人数据。通常情况下，该权利存在于以下情形：
•The data are no longer necessary;
数据不再必要；
•You have withdrawn your consent to us using your data, and there is no other valid reason for us to continue;
您已撤回对我们使用您数据的同意，且我们没有其他有效理由继续使用；
•The data has been processed unlawfully;
数据处理不合法；
•It is necessary for the data to be erased in order for us to comply with our obligations under law; or
为使我们遵守法律义务，有必要删除该数据；或
•You object to the processing and we are unable to demonstrate overriding legitimate grounds for our continued processing.
您反对该等处理，且我们无法证明继续处理存在优先于您权利和利益的正当理由。
We would only be entitled to refuse to comply with your request for erasure in limited circumstances and we will always tell you our reason for doing so.
仅在有限情形下，我们才有权拒绝满足您的删除请求，且我们将始终告知您拒绝的理由。
When complying with a valid request for the erasure of data we will take all reasonably practicable steps to delete the relevant data.
在满足有效的数据删除请求时，我们将采取一切合理可行的措施删除相关数据。
Right to restrict processing
限制处理权
You have the right to request that we restrict our processing of your Personal Data in certain circumstances, for example if you dispute the accuracy of the Personal Data that we hold about you or you object to our processing of your Personal Data for our legitimate interests. If we have shared your Personal Data with third parties, we will notify them about the restricted processing unless this is impossible or involves disproportionate effort. We will, of course, notify you before lifting any restriction on processing your Personal Data.
在特定情形下，您有权要求我们限制对您个人数据的处理，例如，若您对我们所持有的关于您的个人数据的准确性提出异议，或您反对我们基于合法利益处理您的个人数据。如我们已向第三方共享您的个人数据，我们将就该受限处理通知该等第三方，除非此举不可能或需付出不成比例的努力。当然，在解除对您个人数据的任何处理限制之前，我们会通知您。
Right to rectification
更正权
You have the right to request that we rectify any inaccurate or incomplete Personal Data that we hold about you. If we have shared this Personal Data with third parties, we will notify them about the rectification unless this is impossible or involves disproportionate effort. You may also request details of the third parties that we have disclosed the inaccurate or incomplete Personal Data to. Where we think that it is reasonable for us not to comply with your request, we will explain our reasons for this decision.
您有权要求我们更正我们所持有的关于您的任何不准确或不完整的个人数据。如我们已向第三方共享该个人数据，我们将就该更正通知该等第三方，除非此举不可能或需付出不成比例的努力。您也可以要求我们提供已向其披露不准确或不完整个人数据的第三方详情。如我们认为有合理理由不满足您的请求，我们将说明作出该决定的原因。
In particular, you may update or make amendments to your Personal Data as below:
具体而言，您可按以下方式更新或修改您的个人数据：
(a) for online registered customers, you may login to your online account and update your Personal Data; or
（a）对于在线注册客户，您可以登录您的在线账户并更新您的个人数据；或
(b) for every other customer, you may email your request to privacy@malaysiaairlines.com
（b）对于其他所有客户，您可以发送电子邮件至privacy@malaysiaairlines.com提出请求。
Right of data portability
数据可携权
If you wish, you have the right to transfer your Personal Data between service providers. In effect, this means that you are able to transfer the details we hold on you to another third party. To allow you to do so, we will provide you with your data in a commonly used machine-readable format so that you can transfer the data. Alternatively, we may directly transfer the data for you.
如您愿意，您有权在服务提供商之间转移您的个人数据。实际上，这意味着您可以将我们所持有的关于您的资料转移给另一第三方。为便于您这样做，我们将以常用的机器可读格式向您提供您的数据，以便您进行转移。或者，我们也可以直接为您转移数据。
Right to complain
投诉权
You have the right to lodge a complaint with our regulator, who is the Commissioner of Personal Data Protection in Malaysia. In Europe, you may access to the privacy regulators for each Member State are listed (along with contact details) by clicking the link.
您有权向我们的监管机构——马来西亚个人数据保护专员（Commissioner of Personal Data Protection in Malaysia）提出投诉。在欧洲，您可以点击链接查阅各成员国隐私监管机构的名单（连同联系方式）。
To whom do we disclose your Personal Data?
我们向谁披露您的个人数据？
We will not trade or sell your Personal Data to third parties. Your Personal Data shall only be disclosed or transferred to the following third parties appointed or authorised by the Company, who may be located within or outside Malaysia:
我们不会交易您的个人数据或将其出售给第三方。您的个人数据仅会向下列由本公司委任或授权的第三方披露或转移，该等第三方可能位于马来西亚境内或境外：
a)our travel and freight service providers or travel-related businesses;
我们的出行和货运服务提供商或出行相关业务方；
b)our partner airlines and other carriers;
我们的伙伴航空公司及其他承运人；
c)airport authorities;
机场管理机构；
d)our other affiliates and service partners where it is necessary to facilitate your travel;
在为便利您的出行而有必要时，我们的其他关联公司和服务合作伙伴；
e)our group of companies within Malaysia Aviation Group to provide services, products or personalised offers or/and messages;
马来西亚航空集团旗下公司，以便向您提供服务、产品或个性化优惠和/或信息；
f)credit card verification providers,
信用卡核验提供商，
g)IT, cloud hosting, document verification and eligibility assessment service providers engaged by us to support the provision of our services;
我们为支持服务提供而聘用的信息技术（IT）、云托管、证件核验及出行资格评估服务提供商；
h)data analytics including search engine providers and/or marketing agency which assist us to improve and optimise your experience in using our website and mobile application;
数据分析机构，包括搜索引擎提供商和/或协助我们改进和优化您使用我们网站及移动应用程序体验的营销机构；
i)advertisers and advertising networks which require certain data to offer relevant adverts to you and/or other selected partners to provide better customised offers, promotions, or/and personalised messages to you or others;
需要使用特定数据向您投放相关广告的广告商和广告网络，和/或为向您或他人提供更具针对性的优惠、促销活动和/或个性化信息而选定的其他合作伙伴；
j)other third parties in order to process your commercial transactions;
为处理您的商业交易的其他第三方；
k)participating merchants and partners of our Enrich loyalty programme or/and any other programmes within Malaysia Aviation Group offering products and services by using or through our website or mobile application hosted by us;
Enrich常旅客计划和/或马来西亚航空集团旗下任何其他计划的参与商户及合作伙伴，其通过我们托管的网站或移动应用程序提供产品和服务；
l)legal bodies as permitted or required by law such as in compliance with a warrant or subpoena issued by a court of competent jurisdiction; and/or
法律允许或要求向其披露的有关机构，例如为遵守有管辖权的法院签发的搜查令或传票；和/或
m)customs, immigration or other regulatory authorities applicable to you;
对您具有管辖权的海关、移民或其他监管机构；
n)if necessary, prevent passengers who have been issued notices from flying or using any of the services under Malaysia Aviation Group; and/or
在必要时，阻止已收到相关通知的乘客搭乘马来西亚航空集团旗下公司的航班或使用其任何服务；和/或
o)safety and security personnel.
安全和安保人员。
In addition to the above, your Personal Data may also be disclosed or transferred to any of the Company’s actual and potential assignee, transferee or acquirer (within or outside Malaysia) (including our affiliates and subsidiaries) of our business, assets or group companies, or in connection with any corporate restructuring or exercise including the restructuring to transfer the business, assets and/or liabilities.
除上述情形外，您的个人数据也可能被披露或转移给本公司业务、资产或集团公司的任何实际或潜在受让人、受让方或收购方（位于马来西亚境内或境外，包括我们的关联公司和子公司），或与任何公司重组或相关行动相关，包括为转让业务、资产和/或负债而进行的重组。
We shall take reasonable and practical steps in accordance with the law and acceptable industry standards to ensure that their employees, officers, agents, consultants, contractors and such other third parties mentioned above who are involved in the collection, use and disclosure of your Personal Data will observe and adhere to the terms of this Privacy Policy.
我们将依据法律及公认的行业标准采取合理且切实可行的措施，确保上述第三方中参与收集、使用和披露您个人数据的员工、高级管理人员、代理人、顾问、承包商及其他相关人员遵守本隐私政策的条款。
Where do we store your Personal Data?
我们在何处存储您的个人数据？
We will store your Personal Data in the country in which we are based (i.e. Malaysia). As discussed above, we may also disclose your Personal Data to our group companies and their service providers located in Malaysia and elsewhere, and to employees operating outside of the EEA who work for us or for one of our group companies or their respective service providers.
我们将把您的个人数据存储在我们所在的国家（即马来西亚）。如上文所述，我们也可能将您的个人数据披露给位于马来西亚及其他地区的集团公司及其服务提供商，以及在欧洲经济区（EEA）境外为我们、我们的任何集团公司或其各自服务提供商工作的员工。
Certain Personal Data provided specifically to facilitate document verification and eligibility assessment services may be hosted, processed or supported through systems, infrastructure or personnel located outside Malaysia, including within the European Union and other jurisdictions, subject to appropriate and adequate data protection safeguards.
为支持证件核验和出行资格评估服务而专门提供的某些个人数据，可能会通过位于马来西亚境外（包括欧盟及其他司法管辖区）的系统、基础设施或人员进行托管、处理或获得支持，但须采取适当且充分的数据保护保障措施。
We want to make sure that your Personal Data is stored and transferred in a way which is secure.
我们希望确保您的个人数据以安全的方式存储和转移。
We will therefore only transfer data outside of the EEA where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your data. For example, this could be:
因此，我们仅在符合数据保护法律且转移方式能为您的数据提供充分保障的情况下，才将数据转移至欧洲经济区（EEA）境外。例如，可通过以下方式：
•By way of an intra-group agreement between MAB entities, incorporating the current standard contractual clauses adopted by the European Commission for the transfer of Personal Data by controllers in the EEA to controllers and processors in jurisdictions without adequate data protection laws;
通过马来西亚国际航空有限公司（MAB）旗下各实体之间的集团内部协议，纳入欧盟委员会现行标准合同条款，以便欧洲经济区（EEA）内的数据控制者向数据保护法律未达到充分水平的司法管辖区内的数据控制者和处理者转移个人数据；
•By way of a data transfer agreement with a third party, incorporating the current standard contractual clauses adopted by the European Commission for the transfer of Personal Data by controllers in the EEA to controllers and processors in jurisdictions without adequate data protection laws; or
通过与第三方订立数据传输协议，纳入欧盟委员会当前通过的标准合同条款，用于由欧洲经济区（EEA）内的控制者向数据保护法律不充分的司法辖区内的控制者和处理者转移个人数据；或
•By transferring your data to an entity which has signed up to the EU-U.S. Privacy Shield Framework for the transfer of Personal Data from entities in the EU to entities in the United States of America or any equivalent agreement in respect of other jurisdictions; or
通过将您的数据传输给已签署欧盟-美国隐私护盾框架（EU-U.S. Privacy Shield Framework）的实体，该框架用于将欧盟实体的个人数据传输给美利坚合众国的实体，或适用于其他司法辖区的任何同等协议；或
•By transferring your data to a country where there has been a finding of adequacy by the European Commission in respect of that country's levels of data protection via its legislation; or
通过将您的数据传输至欧盟委员会已就其立法所确立的数据保护水平作出充分性认定的国家；或
•Where it is necessary for the conclusion or performance of a contract between ourselves and a third party and the transfer is in your interests for the purposes of that contract; or
如为订立或履行我们与第三方之间的合同而有必要进行转移，且该转移符合您在该合同项下的利益；或
•Where you have explicitly consented to the data transfer.
在您明确同意该数据转移时。
Where we transfer your Personal Data outside the EEA and where the country or territory in question does not maintain adequate data protection standards, we will take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.
当我们向欧洲经济区（EEA）境外转移您的个人数据，且相关国家或地区未保持充分的数据保护标准时，我们将采取一切合理措施，确保您的数据得到安全处理并符合本隐私政策。
How do we keep your Personal Data secure?
我们如何保护您的个人数据安全？
We will take all reasonable precautions necessary to protect your Personal Data from misuse, interference and loss; and unauthorised access, modification or disclosure. In addition, the Company will secure your data in following ways:
我们将采取一切必要且合理的预防措施，保护您的个人数据免遭滥用、干扰或丢失，以及未经授权的访问、修改或披露。此外，本公司将通过以下方式保障您的数据安全：
(a) register all those who are allowed access;
（a）登记所有获准访问的人员；
(b) control and limit access based on necessity;
（b）按照必要性原则控制和限制访问权限；
(c) maintain proper record of access and transfer of Personal Data;
（c）妥善保存个人数据访问和转移的记录；
(d) ensure all employees of the Company protect confidentiality;
（d）确保本公司所有员工保守机密；
(e) conduct awareness programmes to all employees on responsibility to protect Personal Data;
（e）就保护个人数据的责任对全体员工开展意识培训；
(f) establish physical security procedures;
（f）建立实体安全程序；
(g) bind third parties involved in processing of Personal Data; and
（g）约束参与个人数据处理的第三方；以及
(h) do not use removable device and cloud computing service to transfer or store Personal Data unless with written consent from top management of the Company.
（h）除非获得本公司最高管理层的书面同意，否则不得使用可移动设备和云计算服务转移或存储个人数据。
For how long do we retain your Personal Data?
我们将您的个人数据保留多长时间？
We will not retain your Personal Data longer than necessary for the purposes for which they are collected. However, relevant Personal Data may be retained subject to the conditions below:
我们保留您个人数据的期限不会超过实现其收集目的所必需的期限。但是，相关个人数据可能在符合以下条件时予以保留：
(a) as and when required under legislation; or
（a）在法律要求时予以保留；或
(b) where legal actions have arisen and are pending.
（b）已发生法律诉讼且诉讼尚待解决时。
(c) commercial/operational purposes of Malaysia Airlines
（c）马来西亚国际航空的商业/运营目的。
We shall take all reasonable steps to ensure that all Personal Data is destroyed or permanently deleted when no longer required and prepare disposal schedule for inactive data within 24 months period.
我们将采取一切合理措施，确保所有个人数据在不再需要时被销毁或永久删除，并在24个月内制定不活跃数据的处置时间表。
If you opt-out or withdraw your consent to marketing, we will remove you from our marketing database. You may do so by clicking the opt out link provided at the bottom of such email or send us your opt out request to privacy@malaysiaairlines.com.
如您选择退出营销或撤回对营销的同意，我们将把您从我们的营销数据库中移除。您可以通过点击此类电子邮件底部提供的退出链接，或向privacy@malaysiaairlines.com发送退出请求。
Links to third party website
第三方网站链接
We may link this website and/or our applications to other companies or organizations websites (collectively, “Third Party Sites”). This Privacy Policy does not apply to such Third Party Sites as those sites are outside our control. If you access Third Party Sites using the links provided, the operators of these sites may collect your personal information. Please ensure that you are satisfied with the privacy statements of these Third Party Sites before you submit any personal information. We try, as far as we can, to ensure that all third party linked sites have equivalent measures for protection of your personal information, but we cannot be held responsible legally or otherwise for the activities, privacy policies or levels of privacy compliance of these Third Party Sites.
我们可能将本网站和/或我们的应用程序链接至其他公司或组织的网站（统称“第三方网站”）。本隐私政策不适用于该等第三方网站，因为这些网站不受我们控制。如您使用所提供的链接访问第三方网站，这些网站的运营方可能会收集您的个人信息。请在提交任何个人信息之前，确保您认可这些第三方网站的隐私声明。我们将尽最大努力确保所有第三方链接网站均采取同等的个人信息保护措施，但对于这些第三方网站的活动、隐私政策或隐私合规水平，我们不承担法律或其他方面的责任。
Cookies Management
Cookie管理
Cookies are small text files that are placed on your device (computer, smartphone, tablet) when you visit our website. They help the website remember your preferences, track your usage, and enhance your browsing experience. Cookies can be either session cookies (which expire when you close your browser) or persistent cookies (which remain on your device for a specified period or until deleted).
Cookie是您访问我们的网站时存储在您设备（电脑、智能手机或平板电脑）上的小型文本文件，可帮助网站记住您的偏好、记录您的使用情况并改善浏览体验。Cookie可以是会话Cookie（在您关闭浏览器时失效），也可以是持久Cookie（在您的设备上保留指定期限或直至被删除）。
We use the following types of cookies:
我们使用以下类型的Cookie：
•Strictly Necessary and Performance Cookies: we use cookies to ensure you have a smooth user experience such as logging in and filling out forms. It is not possible to switch off these cookies in our systems. We respect your privacy and do not store any personally identifiable information. However, if you do not allow the usage of these cookies, it might affect the functioning of these services partially or completely.
严格必要及性能类Cookie：我们使用Cookie确保您拥有流畅的用户体验，例如登录和填写表单。在我们的系统中无法关闭这些Cookie。我们尊重您的隐私，不会存储任何可识别个人身份的信息。但是，如您不允许使用这些Cookie，可能会部分或完全影响这些服务的运行。
•Preference Cookies: we value your time and preferences. These cookies help us to provide enhanced functionality and personalized services. Functional cookies can include first-party, third-party, persistent, or session cookies. Thus, facilitating us to remember your site preferences and choices. However, if you do not allow these cookies, it might affect the functioning of these services partially or completely.
偏好Cookie：我们重视您的时间和偏好。这些Cookie帮助我们提供增强功能和个性化服务。功能性Cookie可包括第一方、第三方、持久或会话Cookie，从而帮助我们记住您的网站偏好和选择。但是，如您不允许使用这些Cookie，可能会部分或完全影响这些服务的运行。
•Statistics Cookies: we use cookies to ensure you have a smooth user experience such as logging in and filling out forms. It is not possible to switch off these cookies in our systems. We respect your privacy and do not store any personally identifiable information. However, if you do not allow the usage of these cookies, it might affect the functioning of these services partially or completely.
统计Cookie：我们使用Cookie确保您拥有流畅的用户体验，例如登录和填写表单。在我们的系统中无法关闭这些Cookie。我们尊重您的隐私，不会存储任何可识别个人身份的信息。但是，如您不允许使用这些Cookie，可能会部分或完全影响这些服务的运行。
•Marketing Cookies: we would like to inform you that these cookies are placed by us and our advertising partners. It facilitates serving you with personalized content and relevant offers. However, if you choose to block these cookies, you will still view generic advertising that is not based on your interest.
营销类Cookie：此类Cookie由我们及我们的广告合作伙伴设置，用于向您提供个性化内容及相关优惠。但是，如您选择阻止此类Cookie，您仍会看到并非基于您兴趣投放的通用广告。
Third Party Cookies
第三方Cookie
We may use third-party services that place cookies on your device. These third-party cookies are subject to the privacy policies of the respective third parties. In furtherance, we also imposed a strict security protocol and standard to our third-party services managing the cookies.
我们可能使用会在您的设备上设置Cookie的第三方服务。该等第三方Cookie受相应第三方隐私政策约束。此外，我们亦要求负责管理Cookie的第三方服务提供商遵守严格的安全协议和标准。
You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking or deleting cookies may affect your ability to use certain features of our website and services.
您可以通过浏览器设置管理您的Cookie偏好。大多数浏览器允许您阻止或删除Cookie。请注意，阻止或删除Cookie可能会影响您使用我们网站和服务的某些功能。
To manage cookies:
如需管理Cookie：
•Chrome： 在Chrome中管理Cookie
•Firefox： 在Firefox中管理Cookie
•Safari： 在Safari中管理Cookie
•Edge： 在Edge中管理Cookie
By using our website, you consent to the use of cookies as described in this Cookies Policy. You can withdraw your consent at any time by changing your browser settings or by using any opt-out mechanisms provided.
使用我们的网站，即表示您同意本Cookie政策所述的Cookie使用方式。您可以随时通过更改浏览器设置或使用所提供的任何退出机制撤回您的同意。
Contact
联系我们
If you still have inquiries or complaints in relation to our handling of your Personal Data or our Privacy Policy or wish to exercise any of your rights as described above, please contact us via the details as described below:
如您对我们处理您的个人数据或我们的隐私政策仍有疑问或投诉，或希望行使上述任何权利，请通过以下方式联系我们：
Chief Privacy Officer,
首席隐私官（Chief Privacy Officer），
Group Business Integrity, Malaysia Aviation Group,
马来西亚航空集团商业诚信部（Group Business Integrity），
Administration Building, South Support Zone, KLIA,
行政大楼，南区支援区，吉隆坡国际机场（KLIA），
64000 Sepang, Selangor, Malaysia.
马来西亚雪兰莪州雪邦市64000。
Malaysia Airlines’ UK Office,
马来西亚国际航空英国办事处（Malaysia Airlines' UK Office），
No. 247-249, Cromwell Road,
克伦威尔路247-249号，
Kensington, London SW5 9GA,
伦敦肯辛顿，SW5 9GA，
United Kingdom.
英国。
Contact Details: +44 (0) 207 341 2075
联系方式：+44 (0) 207 341 2075
If you are our Enrich members and wish to change your personal details, you may login to Enrich portal here. If you wish to amend either your Name or Date of Birth, please contact our Enrich team here.
如果您是我们的Enrich会员并希望更改您的个人信息，您可以登录Enrich门户，点击此处。如您希望修改您的姓名或出生日期，请联系我们的Enrich团队，点击此处。
If you have any queries or issues regarding your reservation and flight details, please click here.
如您对您的预订和航班信息有任何疑问或问题，请点击此处。
Language Disclaimer
This Policy is prepared in English and Mandarin. In the event of any inconsistency, conflict, or discrepancy between the English version and the Mandarin version, the English version shall prevail.
语言声明
本政策以英文及中文版本编制。如英文版本与中文版本之间存在任何不一致、冲突或差异，概以英文版本为准。