MyMed Privacy Notice

LAST UPDATED: 7 September 2026

This Privacy Notice explains how MiCare Sdn. Bhd. collects, uses, discloses and protects your personal information when you download, access or use the MyMed mobile application and the services made available through it (collectively, the "App"). It applies to your use of the App as a member or patient; if you are a doctor accessing the doctor section of the App, your personal information is handled under the separate Doctors Portal Privacy Notice, not this Notice. The App includes MiCare 360, our teleconsultation service; the additional data practices that apply when you use MiCare 360 are set out in Section 11 (MiCare 360: Teleconsultation Services), which forms part of this Notice. IF YOU DO NOT AGREE WITH ANY OF THE FOLLOWING, PLEASE DISCONTINUE YOUR USE OF THE APP.

MiCare Sdn. Bhd. (Company No. 727400M/200601007651), of Block A, No. 22, Jalan Astaka U8/84, Seksyen U8, Kawasan Perindustrian Bukit Jelutong, Bukit Jelutong, 40150 Shah Alam, Selangor ("MiCare", "we", "us" or "our"), is committed to protecting your personal information in accordance with the Personal Data Protection Act 2010 ("PDPA") and any amendments in relation thereto and, in relation to MiCare 360, the Ministry of Health (MOH) Guideline on Online Healthcare Services and the standards of the Malaysian Medical Council (MMC).

1. Personal Information We Collect

We collect and process the following categories of personal information when you use the App:

General (all users of the App): your name; your identity card or passport number; your date of birth, gender and contact details (including email, telephone number and, where relevant, your address); your account and login credentials; your MiCare membership, scheme and eligibility information; any health and vital-sign information you enter into the App; your device, usage and system/log information; and the content of your communications with our support team.

Health and consultation data: when you use MiCare 360, we also collect health and consultation information, which is described in Section 11.

2. Our Use of Your Information

We may use the personal information we collect for the following purposes:

a) to verify your identity and to register and administer your account;

b) to provide and manage your MiCare membership, benefits and eligibility, and to process related claims;

c) to enable the features of the App, including storing and displaying the health and vital-sign information you enter into the App;

d) to enable and facilitate your MiCare 360 teleconsultations with your own panel doctor (as further described in Section 11);

e) to communicate with you, send service notifications, provide support and respond to your queries;

f) to make you aware of health, wellness and patient-support programmes and disease-awareness information that may be relevant or of benefit to you;

g) where you have given your consent, to let you (or your treating doctor) know of programmes that may be relevant to you;

h) to produce anonymised and aggregated data and to use it to analyse and improve the App and to generate healthcare trends, insights and reports;

i) for security, audit, training and fraud prevention; and

j) to comply with applicable laws, regulations and guidelines, and for any other purpose to which you have consented or that is permitted by law.

We may also aggregate or anonymise the information we collect so that it no longer identifies you, and may use and share that aggregated or anonymised data — including with third parties — for research, to improve our services and to understand healthcare trends. Once information has been anonymised so that you are not reasonably identifiable, it is no longer your personal data under the PDPA, and we do not seek to re-identify you from it.

The additional ways your information is used when you use MiCare 360 are set out in Section 11.

3. Disclosure to Third Parties

Your personal information will be kept confidential, but you agree that we may disclose it to the following categories of recipients for the purposes set out above:

a) other companies within the MiCare group;

b) where you use MiCare 360, the treating doctor and clinic providing your care (see Section 11);

c) our service providers who help us operate the App (such as hosting, platform and communication providers), with whom we take steps to put in place appropriate confidentiality and data-protection safeguards;

d) the relevant payor, employer or insurer, where reasonably necessary for eligibility and claims, and where required with your consent;

e) government authorities and regulators, where required by law or for verification;

f) our professional advisers, and where necessary for the establishment or defence of legal claims; and

g) business alliance partners, where you have consented.

We do not sell your personal information.

4. Security

We maintain administrative, physical and technical safeguards designed to protect your personal information, such as access controls, authentication, logging and encryption. However, you acknowledge that no data transmission over the Internet can be guaranteed to be completely secure, and we cannot guarantee the absolute security of information transmitted to us.

5. Storage of Your Information

We store and process your personal information using service providers selected for their security arrangements and we take steps to protect it in accordance with the PDPA.

6. Data Retention

We retain your account, membership and consent records for as long as necessary for the purposes set out in this Notice. MiCare does not retain the content of your MiCare 360 consultations; your medical records are created and kept by your treating doctor or clinic, who are responsible for retaining them in accordance with their professional obligations.

7. Consent, and Children

By continuing to use the App, you agree that we may collect, use and disclose your personal information as described in this Notice. A member must be at least 18 years old to hold an account; a minor may use the App only as a dependant under the account of a parent or guardian, and, for a MiCare 360 consultation, with the guardian present during the consultation.

8. Updating Your Personal Information and Contacting MiCare

You may request access to, amendment of, deletion of, or the limiting of the processing of your personal information, and may withdraw your consent, by contacting our Data Privacy Officer. We may charge a reasonable fee for an access request, to the extent permitted under the PDPA. Please note that a request to delete medical records is subject to the statutory retention requirements described in Section 6.

General enquiries: callcenter@micaresvc.com

Data Privacy Officer, MiCare Sdn. Bhd.

Email: privacyofficer@micaresvc.com Telephone: +603-7843 9459

9. Changes to this Notice

We may update this Notice from time to time. The current version and its date appear at the top of this Notice, and your continued use of the App after any change constitutes your acceptance of it.

10. Inconsistencies

This Notice may be made available in English and Bahasa Malaysia for convenience. In the event of any inconsistency, the English version prevails. In the event of any inconsistency between this Notice and any general MiCare privacy policy in relation to your use of the App, this Notice prevails.

11. MiCare 360: Teleconsultation Services

This Section applies in addition to the rest of this Notice when you use MiCare 360, the teleconsultation service within the App. It forms part of this Notice. Where this Section and the general provisions above differ in relation to MiCare 360, this Section applies.

11.1 Health information you share in a consultation

When you use MiCare 360, you share health information with your treating doctor during the consultation (your symptoms, history and allergies), and the doctor makes clinical notes. Your consultation is not recorded, and MiCare does not retain its content. As with an in-person visit, your treating doctor records and keeps your case notes at their own clinic and is responsible for your medical record.

11.2 How we use this information

MiCare 360 enables and facilitates teleconsultations between you and your own panel doctor as part of continuity of care, so that your doctor can prescribe and dispense medication from their own clinic and arrange collection or delivery with you.

11.3 Disclosure specific to MiCare 360

In connection with MiCare 360, we disclose your information to the treating doctor and the clinic providing your care. Your medication is dispensed by the doctor's own clinic, and the doctor or clinic arranges collection or delivery with you directly. MiCare does not share your personal information, your clinical notes or your medication details with any courier or delivery personnel.

11.4 Your medical records

Your MiCare 360 medical records are created and kept by your treating doctor or clinic, not by MiCare, and are retained by them in accordance with their professional obligations. If you would like a copy of your medical record, please contact your treating doctor or clinic.