Privacy Policy

This Privacy Policy explains how Asuma Travel Sdn Bhd (Company No. 1310173-P) ("we", "us", "our") collects, uses, discloses, and protects your personal data. This policy applies to all interactions through our websites asumatravel.com and jomjapan.com, our social media channels, WhatsApp, and any other platforms through which we provide our services.

We are committed to protecting your personal data in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and its subsequent amendments.

We may collect and process the following categories of personal data:

• Full name
• Email address
• Phone number / WhatsApp number
• Travel preferences and requirements
• Passport details (for tour booking and visa processing)
• Payment and billing information
• Website usage data (pages visited, interactions, device information)
• IP address and approximate location
• Social media profile information (when you interact with us via social platforms)

We collect your personal data through:

• Booking forms and quote request forms on our websites
• WhatsApp, email, and social media conversations
• Meta Pixel (Facebook/Instagram tracking pixel) embedded on our websites
• Meta Conversions API (CAPI) — server-side event tracking
• Google Analytics — website analytics
• Cookies and similar tracking technologies
• Third-party referral partners

We collect and process your personal data for the following purposes:

• To provide travel services, including tour bookings, itinerary planning, and customer support
• To generate and send quotations, invoices, and receipts
• To communicate with you regarding your bookings and inquiries
• To send marketing communications (with your consent)
• To analyse website traffic and improve our services
• To comply with legal, tax, and regulatory obligations under Malaysian law
• To prevent fraud and ensure the security of our services

By using our websites, engaging our services, submitting forms, or communicating with us, you consent to the collection, processing, and use of your personal data as described in this policy.

For marketing communications, we will obtain your explicit consent before sending promotional materials. You may withdraw your consent for marketing at any time by contacting us or using the unsubscribe mechanism provided.

Our websites use the Meta Pixel and Meta Conversions API to track user interactions, including page views, form submissions, and other engagement events. This data is sent to Meta Platforms, Inc. to measure advertising effectiveness and to deliver targeted advertisements.

The Meta Conversions API sends event data server-side, which may include hashed email addresses, phone numbers, and browsing behaviour. This data is processed in accordance with Meta's Data Policy.

You can manage your Meta advertising preferences through your Facebook Ad Settings.

We use Google Analytics to collect anonymized data about website usage, including pages visited, session duration, and traffic sources. IP addresses are anonymized.

For more information, see Google's Privacy Policy. You may opt out using the Google Analytics Opt-out Browser Add-on.

We may share your personal data with the following categories of third parties, strictly for the purposes stated in this policy:

• Meta Platforms, Inc. — for advertising measurement and targeted advertising
• Google LLC — for website analytics
• Payment processors — to process payments for bookings
• Airlines, hotels, and ground operators — to fulfil your tour bookings and travel arrangements
• Government authorities — where required by Malaysian law

We do not sell your personal data to any third party.

In accordance with Section 129 of the PDPA 2010, your personal data may be transferred to and processed in countries outside Malaysia, including:

• United States — via Meta Platforms and Google services
• Japan — via JomJapan Inc. (Level 9 Ariake Frontier Building Tower B, 3-7-26 Ariake Koto-ku, Tokyo 135-0063) for tour operations and coordination

We ensure that adequate safeguards are in place to protect your data during such transfers, including contractual obligations and security measures consistent with the PDPA.

We retain your personal data in accordance with the following schedule:

• Booking and customer records: 7 years from the date of the last transaction (as required by Malaysian tax law)
• Marketing data: until you withdraw your consent
• Analytics data: up to 26 months
• Cancelled booking data: retained in accordance with our cancellation policy and applicable legal requirements

Under the PDPA 2010, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Withdraw consent — withdraw your consent for data processing (subject to legal obligations)
• Request deletion — request erasure of your personal data (see our Data Deletion page)
• Lodge a complaint — file a complaint with the Jabatan Perlindungan Data Peribadi (JPDP)

To exercise any of these rights, please contact us at hadi@asumatravel.com.

We implement reasonable technical and organizational measures to protect your personal data, including SSL/TLS encryption for data in transit, access controls, and secure storage. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

In accordance with the PDPA Amendment 2024, in the event of a personal data breach that poses a risk of significant harm, we will notify the Personal Data Protection Commissioner and affected individuals within 72 hours of becoming aware of the breach.

Our websites use the following types of cookies:

• Essential cookies — required for website functionality (e.g., session management)
• Analytics cookies — Google Analytics, for understanding website usage
• Marketing cookies — Meta Pixel, for advertising measurement and retargeting

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect website functionality.

We do not knowingly collect personal data from persons under the age of 18 without the consent of a parent or legal guardian. If you believe we have inadvertently collected such data, please contact us immediately.

While we take reasonable measures to protect your data, we are not liable for the data practices of third-party services, including but not limited to Meta Platforms, Google, airlines, hotels, and payment processors.

We encourage you to review the privacy policies of these third parties. Links to their respective policies are provided in the relevant sections of this document.

We reserve the right to update or modify this Privacy Policy at any time. Changes will be effective upon posting to this page. Your continued use of our websites and services after any changes constitutes your acceptance of the updated policy.

This Privacy Policy is governed by and construed in accordance with the laws of Malaysia. Any disputes arising from or in connection with this policy shall be subject to the exclusive jurisdiction of the courts of Malaysia.

If you have any questions or concerns regarding this Privacy Policy, please contact us:

• Email: hadi@asumatravel.com
• Phone: +60 12-217 6490
• Address: 152-1-13, Kompleks Maluri, Maluri, 55100 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur, Malaysia

You may also lodge a complaint with the Jabatan Perlindungan Data Peribadi (JPDP), the Personal Data Protection Department of Malaysia.

For our full Terms & Conditions, please visit our Terms & Conditions page. To request data deletion, please visit our Data Deletion page.

This policy was last updated on: 21 March 2026.