PRIVACY POLICY

DIV Services Sdn. Bhd. (682942-A) Formerly known as ePetrol Services Sdn Bhd

This Privacy Policy discloses the privacy practices for DIV Group of companies website(s) collectively, the "Site" located at (www.whalet.com.my). DIV Group of companies,, the provider of the Website (referred to as "us", "our" or "we"), is committed to protecting your privacy online in accordance with the Malaysian Personal Data Protection Act 2010 ('PDPA'). Please read the following to learn what information we collect from you (the "User") and how we use that information when you share information with us by creating a User Account. If you have any questions about our privacy policy, please email us at [[email protected]]. PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY ACCESSING OR USING OUR SITE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTAND, AND AGREE TO BE BOUND TO ALL THE TERMS OF THIS PRIVACY POLICY AND OUR SITE TERMS OF USE. IF YOU DO NOT AGREE TO THESE TERMS, EXIT THIS PAGE AND DO NOT ACCESS OR USE THE SITE.

1. Changes DIV may review and update its Privacy Statement from time to time to reflect changes in the law, changes in our business practices, procedures and structure, and the community’s changing privacy expectations. We will post any privacy policy changes on this page - please review it frequently to obtain the latest version of the Privacy Statement at any time. If the changes are significant, we will provide a more prominent notice, in places we deem appropriate, and where reasonably possible, email notification of privacy policy changes.

2. Types of Information Collected We collect information to provide better services to all of our users. We collect information in two ways:Information you give us ("Personally Identifiable Information"). Personally Identifiable Information is information that pertains to a User. When you engage in certain activities on the Website, such as creating a user account and requesting information about our services, we will ask for personal information, like your name, NRIC/Passport Number, date of birth, mobile number, email address and other information that will allow us to identify you. Depending on the activity, some of the information we ask you to provide is identified as mandatory and some is identified as voluntary. If you do not provide the mandatory information for a particular activity that requires it, you will not be permitted to engage in that activity. Information we get from your use of our services ("Non-Personally Identifiable Information"). Non-Personally Identifiable Information is information that does not identify a specific User. We collect information about the services that you use and how you use them, like when you visit our website or you view and interact with our promotion ads, and content. This information includes: -

1

o

Device Information. We collect device-specific information (such as your hardware model, operating system version, unique device identifiers, and mobile network information include mobile number). DIV may associate your device identifiers or mobile number with your User Account.

o

Other Tracking Devices. We may use other industry standard technologies like pixel tags and web beacons to track your use of our Website pages and promotions, or we may allow our Third Party Service Providers to use these devices on our behalf. Pixel tags and web beacons are tiny graphic images placed on certain pages on our Website, or in our emails that allow us to determine whether you have performed a specific action. When you access these pages or open or click an email, pixel tags and web beacons generate a NonPersonally Identifiable notice of that action. Pixel tags allow us to measure and improve our understanding of visitor traffic and behavior on our Website, as well as give us a way to measure our promotions and performance. We may also utilize pixel tags and web beacons provided by our Affiliates and/or Marketing Partners for the same purposes.

o

Log Information. When you use our services or view content provided by DIV, we automatically collect and store certain information in server logs. This includes: Internet Protocol ("IP") address.  Device event information such as crashes, system activity, hardware settings, browser type, the date and time of your request and referral Uniform Resource Locator ("URL").  Cookies and Web beacons or Pixel tags that may uniquely identify your browser or your User Account.

o

Local Storage. We may collect and store information (including personal information) locally on your device using mechanisms such as browser web storage and application data caches.

o

Cookies and Anonymous Identifiers. To facilitate and customize your experience with the Site, we store cookies or anonymous identifiers on your computer, mobile phone or other device. A cookie is a small text file that is stored on a User's computer, mobile phone or other device for record-keeping purposes which contains information about that User. We use cookies to save you time while using the Site, remind us who you are, and track and target User interests in order to provide a customized experience. Cookies also allow us to collect Non-Personally Identifiable Information from you, like which pages you visited and what links you clicked on. Use of this information helps us to create a more user-friendly experience for all users. In addition, we may use Third Party Advertising Companies to display advertisements on our Site. As part of their service, they may place separate cookies and anonymous identifiers on your computer, mobile phone or other device. We have no access to or control over these cookies or anonymous identifiers. This Privacy Policy covers the use of cookies by our Website only and does not cover the use of cookies by any Advertiser. Most browsers automatically accept cookies; you may also set your browser to block all cookies, including cookies associated with our services, or to indicate when a cookie is being set by us. Please note that if you disable or decline these cookies, some parts of our Website services may not function properly.

2

3. Use of information Fulfilment of your Transaction Request If you request something from DIV, for example, a product or service, we will use the information you provide to fulfill your request. To help us do this, we may share information with others, for instance, DIV's business partners, DIV’s related and/or affiliated company and financial institutions involved in fulfillment. In connection with a transaction, we may also contact you as part of our customer satisfaction surveys or for market research purposes.

Personalizing your Experience on our Web Sites We may use information we collect about you to provide you with a personalized experience on our Web sites, such as providing you with content in which you may be interested and making navigation on our sites easier.

Marketing The information you provide to DIV, as well as the information we have collected about you indirectly, may be used by DIV for marketing purposes. Before we do so, however, we will offer you the opportunity to choose whether or not to have your information used in this way. You may at any time choose not to receive marketing materials from us by contacting us directly. Some of our offerings may be co-branded, that is sponsored by both DIV and third parties. If you sign up for these offerings, be aware that your information may also be collected by and shared with those third parties. We encourage you to familiarize yourself with their privacy policies to gain an understanding of the manner in which they will handle information about you.

Recruitment In connection with a job application or inquiry, whether advertised on DIV’s Web site or otherwise, you may provide us with information about yourself, such as a resume. We may use this information throughout DIV in order to address your inquiry or consider you for employment purposes.

Protect the Rights and Property of DIV and Others We may also use or share your information to protect the rights or property of DIV, our business partners, suppliers, clients, or others when we have reasonable grounds to believe that such rights or property have been or could be affected. In addition, we reserve the right to disclose your personal information as required by law and when we believe that disclosure is necessary to protect our rights, or the rights of others, or to comply with a judicial proceeding, court order, or legal process served on our Web sites.

3

Information for Business Partners If you represent DIV’s business partner, you may visit DIV Web sites intended specifically for DIV’s business partners. We may use information provided on that site to administer and develop our business relationship with you, the business partner you represent, and DIV business partners generally. For instance, this may involve using your information to send you details of DIV’s business partner programs. It may also include sharing certain information with other business partners (subject to any confidentiality obligations that may exist), or DIV customers or prospects. In connection with a particular transaction or program, we may also contact you as part of customer satisfaction surveys or for market research purposes.

Information for Suppliers If you represent DIV’s supplier, you may visit DIV’s Web sites intended specifically for use by DIV’s suppliers. We may use the information provided on that site in connection with entering into or performing a transaction with you. For example, this may include sharing information with other parts of DIV, DIV's business partners, customers, shipping companies, financial institutions and postal or government authorities involved in fulfillment. It may also be used to administer and develop our relationship with you, the supplier you represent, and other DIV’s suppliers generally.

Product & Service Improvement We also use Non-Personally Identifiable Information to analyze trends and gather demographic information to better understand customer behaviour and improve our products, services and advertising. We may also use Non-Personally Identifiable Information to troubleshoot, administer the Website, comply with applicable law, and cooperate with law enforcement activities. We also may collect information regarding customer activities on our website and from our other products and services. This information is aggregated and used to help us provide more useful information to our customers and to understand which parts of our website, products and services are of most interest. Aggregated data is considered non-personal information for the purposes of this Privacy Statement. If we do combine non-personal information with personal information the combined information will be treated as personal information for as long as it remains combined.

4. Disclosure of information. DIV complies with the data protection laws in Malaysia and takes all reasonable care to prevent any unauthorized access to your personal data. DIV and those working for agents or contractors of DIV have the responsibility to keep your information confidential and will only use it to offer products and services on behalf of DIV.

4

5. Disclosure of information to Third Parties. At times ePeetrol may make certain personal information available to strategic affiliates/alliances that work with DIV to provide products and services, or that help DIV market to customers. Service Providers DIV may share your personal information with companies who provide services such as information processing, extending credit, fulfilling customer orders, delivering products to you, managing and enhancing customer data, providing customer service, assessing your interest in our products and services, and conducting customer research or satisfaction surveys. These companies are obligated to protect your information. Others It may be necessary - by law, legal process, litigation, and/or requests from public and governmental authorities within or outside your country of residence, for DIV to disclose your personal information. We may also disclose information about you if we determine that for purposes of national security, law enforcement or other issues of public importance — disclosure is necessary or appropriate. We may also disclose information about you if we determine that disclosure is reasonably necessary to protect our rights and/or comply with a judicial proceeding, court order, or legal process served on us; enforce or apply this Privacy Policy, our Terms and Conditions or other agreements; or protect the rights, property or safety of the Site, its Users or others.

6. We may share your information in a Business Transfer. As with any other business, we could merge with, or be acquired by another company. If this occurs, the successor company would acquire the information we maintain, including Personally Identifiable Information. However, Personally Identifiable Information would remain subject to this Privacy Policy.

7. Release of Non-Personally Identifiable Information We may disclose or share Non-Personally Identifiable Information with Partners, Affiliates and Advertisers. For example, we may share aggregated demographic information (which does not include any Personally Identifiable Information) with "Third Party Advertisers" or "Third Party Advertising Companies" and other parties as provided below: We use Third Party Advertising Companies to serve ads when you visit our Site. These companies may use Non-Personally Identifiable Information about your visits to this and other websites in order to provide, through the use of network tags, advertisements about goods and services that may be of interest to you. We also use Third Party Service Providers to track and analyze Non-Personally Identifiable usage and volume statistical information from our Users to administer our Site and constantly improve its quality. We may also publish this information for promotional purposes or as a representative audience for Advertisers. Please note that this is not Personally Identifiable Information, only general summaries of the activities of our Users. Such data is collected on our behalf, and is owned and used by us.

5

8. Security of Information We take security seriously and take numerous precautions to protect the security of Personally Identifiable Information. You can access your Personally Identifiable Information on our Website through a Password and your User Name. This password is encrypted. We recommend that you do not share your password with anyone. In addition, your Personally Identifiable Information resides on a secure server that only selected personnel and contractors have access to. We encrypt certain sensitive information using Secure Socket Layer (SSL) technology to ensure that your Personally Identifiable Information is safe as it is transmitted to us. Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, while we employ commercially reasonable security measures to protect data and seek to partner with companies which do the same, we cannot guarantee the security of any information transmitted to or from the Website, and are not responsible for the actions of any third parties that may receive any such information.

9. Privacy Policies of Third Party Websites This Privacy Policy only addresses the use and disclosure of information we collect from you on www.whalet.com.my. Other websites that may be accessible through this Website have their own privacy policies and data collection, use and disclosure practices. If you link to any such website, we urge you review the website's privacy policy. We are not responsible for the policies or practices of third parties.

10. Access & Correction of Personal Information We make good faith efforts to provide you with access so you can request that we correct the data if it is inaccurate or delete the data if DIV is not required to retain it by law or for legitimate business purposes. You may change any of your Personally Identifiable Information by logging into your account and accessing the "User Profile" section of the site or contacting our customer service personnel at 03-7720 1800 or at [email protected]. Please indicate your name and email address, and what information you would like to update when you contact us. We encourage you to promptly update your Personally Identifiable Information if it changes. You may ask to have the information on your account deleted or removed; We may decline to process requests if no information is supplied to prove your identity, no information is supplied to locate the personal data, require disproportionate technical effort, jeopardize the privacy or confidential information of others, or for which access is in violation of the law.

11. Integrity and Retention of Personal Information DIV makes it easy for you to keep your personal information accurate, complete and up to date. We will retain your personal information for as long as your account is active or as needed to provide you services. If you wish to request that we no longer use your registration information to provide you services contact us at [email protected]. We will retain and use your registration information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

6

12. Our commitment to your privacy To make sure your personal information is secure, we communicate our privacy and security guidelines to DIV employees and strictly enforce privacy safeguards within the company. o o

o o

We will safeguard, according to strict standards of security and confidentiality, any information our customers share with us. We will limit the collection and use of customer information to the minimum as may be required to deliver superior service to our customers, which includes advising our customers about our products, services and other opportunities, and to administer our business. We will permit only authorized employees, who are trained in the proper handling of customer information, to have access to that information. Whenever we hire other organizations to provide support services, we will require them to conform to our privacy standards and to allow us to audit them for compliance.

13. Enquiries and Complaints If you would like to make an enquiry or a complaint, or if you would like to obtain information on how to limit the processing of your personal data, you may contact our customer service personnel at 037720 1800 or [email protected].

7