Disclaimer

Information published is subject to change without prior notice. Kampachi Restaurants Sdn. Bhd. accepts no liability for any loss or damage arising from any use, misuse, inaccuracy or omission of information or other contents published in this website. This website serves as a convenient reference on Kampachi Restaurants only and as such, Kampachi Restaurants is not liable for the contents of any off-site webpages or websites linked or linking to this website. Photographs shown are for illustrative purposes and may vary from the actual product.

Privacy Policy

Preamble:-

• Version: 1.0
• Effective Date: 22/4/2026
• Last Reviewed: 22/4/2026

Welcome to the 47 in 27 website. This Privacy Policy is established by Kampachi Restaurants Sdn Bhd, business registration number 200701010705 (768708-H) for Kampachi Restaurants Sdn Bhd. IRR Sdn Bhd (201201042087 (1026563-T)), TMR Sdn Bhd (199101012161 (222473-M)), HOTEL EQUATORIAL (M) SDN BHD (197001000979 (10267-M)) are also participating. This policy is written in accordance with the Malaysian Personal Data Protection Act 2010 (“PDPA”). It outlines how each brand collects, uses, and stores your data. This policy will be updated from time to time.

By participating in the 47 in 27 campaign, or any services provided by Kampachi Restaurants Sdn Bhd, IRR Sdn Bhd, TMR Sdn Bhd, HOTEL EQUATORIAL (M) SDN BHD, you agree to the practices and policies outlined in this Privacy Policy. You acknowledge and consent to the collection, use, and sharing of your information as described. Any new features or tools added to our mobile apps will also be subject to this policy.

We reserve the right to modify or replace any part of this policy. You are bound by any changes to the Privacy Policy when you use the service after the changes have been posted.

1. Purpose

This Data Protection Policy outlines how Kampachi Restaurants Sdn Bhd, IRR Sdn Bhd, TMR Sdn Bhd, HOTEL EQUATORIAL (M) SDN BHD collects, uses, stores, discloses, and protects personal data in compliance with applicable data protection laws under the Personal Data Protection Act 2010.

2. Scope

This policy applies to:

• All employees, contractors, and relevant third-party service providers of Kampachi Restaurants Sdn Bhd, IRR Sdn Bhd, TMR Sdn Bhd, HOTEL EQUATORIAL (M) SDN BHD.
• All customers, and data subjects, who have their personal data collected by Kampachi Restaurants Sdn Bhd, IRR Sdn Bhd, TMR Sdn Bhd, HOTEL EQUATORIAL (M) SDN BHD.

3. Definitions

• Personal Data: Any information that identifies or can be used to identify a living individual including, but not limited to:
  • Names (first, middle and last)
  • Date of Birth
  • Malaysian NRIC Number
  • Phone number
  • Email Address
  • Gender
  • Nationality
  • Marketing Preferences
  • Transaction Details
• Sensitive Personal Data: Data relating, but not limited to, health, political opinions and religious beliefs.
• Processing: Any operation on personal data including, but not limited to:
  • Data Collection
  • Data Usage
  • Data Storage
  • Data Sharing
  • Data Disclosure
  • Data Security
  • Data Retention
  • Data Access
• Data Subject: The individual to whom the personal data relates (eg. customers or employees of Kampachi Restaurants Sdn Bhd, IRR Sdn Bhd, TMR Sdn Bhd, HOTEL EQUATORIAL (M) SDN BHD.
• Data Protection Officer (DPO): The person responsible for data protection compliance as mandated by the June 2025 amendment of the Personal Data Protection Act 2010.

4. Data Protection Principles

Kampachi Restaurants Sdn Bhd, IRR Sdn Bhd, TMR Sdn Bhd, HOTEL EQUATORIAL (M) SDN BHD are committed to upholding the following principles:

• Lawful and Fair Data Processing: Personal data shall be processed lawfully and fairly.
• Purpose Limitation: Data is collected for specified, legitimate purposes.
• Data Minimization: Only data necessary for business functions is collected.
• Accuracy: Stored data must be accurate and kept to date.
• Storage Limitation: Data will not be retained longer than necessary.
• Integrity and Confidentiality: Appropriate security measures are in place.
• Accountability: Kampachi Restaurants Sdn Bhd, IRR Sdn Bhd, TMR Sdn Bhd, HOTEL EQUATORIAL (M) SDN BHD is accountable for compliance with these principles.
• Data Access: Data subjects maintain the right to access, adjust, and request for their personal data to be securely disposed of.
• Consent: Data subjects’ consent will be obtained before processing data.
• Disclosure: Data subjects’ data will not be shared to third parties without prior consent.

5. Collection and Use of Personal Data

• Personal Data is collected for purposes including, but not limited to:
  • Employment and HR Administration.
  • Customer support and service delivery.
  • Marketing and communications.
  • Legal and regulatory compliance.
  • App Access.
  • Operational Maintenance.

6. Consent and Notice

• Data subjects will be informed of the intended purpose of data collection.
• Data subjects consent will be obtained where required.
• Data subjects may withdraw consent at any time by writing to any of the participating parties.

7. Access and Correction

Data subjects have the right to:

• Access their personal data held by Hotel Equatorial Management Sdn Bhd, IRR Sdn Bhd, EQKL Sdn Bhd, TM Restaurants Sdn Bhd and Kampachi Restaurants Sdn Bhd.
• Request correction of inaccurate or incomplete data.
• Requests can be sent to:
• Kampachi Marketing (kampachi-marketing@equatorial.com)
  Or
• 28-01 Menara Generali, No.27 Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia

8. Data Retention

Kampachi Restaurants Sdn Bhd, IRR Sdn Bhd, TMR Sdn Bhd, HOTEL EQUATORIAL (M) SDN BHD will retain personal data only as long as necessary for legal, regulatory, auditory or business purposes. Data will securely be destroyed when it is no longer required.

9. Data Security

Kampachi Restaurants Sdn Bhd, IRR Sdn Bhd, TMR Sdn Bhd, HOTEL EQUATORIAL (M) SDN BHD implements appropriate security controls including:

• Encryption and firewalls.
• Role-based access controls.
• Audits and monitoring.
• A secure disposal of physical and digital records.
• Engaging third party vendors who are PDPA compliant.

10. Third Party Disclosures

Personal data may, in certain events, be shared with the appropriate third parties only when:

• Required for service delivery.
• Mandated by law or regulation.
• With consent from the data subject.
• Third party vendors comply with Malaysian PDPA laws, or laws of a similar standard.

Third-party vendors are bound by confidentiality and data protection obligations.

11. International Data Transfers

• Personal data will not be transferred outside Malaysia unless:
  • For regulatory, legal, or auditory reasons.
• The  receiving country has equivalent data privacy laws to Malaysia, or can provide adequate security.
• Data subject consent is obtained.
• Contractual legal clauses are in place.

12. Data Breach Management

In the event of a data breach:

• Affected data subjects and authorities will be notified promptly as required by law.
• Investigation and remediation will be initiated.

13. Employee Responsibilities

Kampachi Restaurants Sdn Bhd, IRR Sdn Bhd, TMR Sdn Bhd, HOTEL EQUATORIAL (M) SDN BHD employees will:

• Handle personal data responsibly and in line with this privacy policy.
• Report any suspected breaches or misuse.
• Attend training and awareness sessions on data privacy.
• Ensure necessary third parties maintain PDPA compliance.

14. Training and Awareness

Kampachi Restaurants Sdn Bhd, IRR Sdn Bhd, TMR Sdn Bhd, HOTEL EQUATORIAL (M) SDN BHD will provide regular training to ensure staff understand data protection obligations.

15. Policy Review

This policy will be reviewed at least annually or when significant changes to the Personal Data Protection Act occur. Updates will be communicated to all employees.

16. Contact Information

Name: Justin Lim Zhan Li
Position: Data Protection Officer
Email: justin.lim@hec.equatorial.com