Who we are

Suggested text: Our website address is: https://travelerwp.com/

Comments

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Suggested text: Visitor comments may be checked through an automated spam detection service.

Privacy Notice | Kembara Khalifah Travel
Kembara Khalifah Travel

Privacy Notice

Last updated: 24 September 2026

This notice explains how Kembara Khalifah Travel collects, uses, stores and shares your personal data when you visit kembarakhalifahtravel.com.my, contact us or book a trip with us. It is issued under Malaysia's Personal Data Protection Act 2010 (PDPA).

1Who we are

This website is operated by Kembara Khalifah Travel Sdn. Bhd. (SSM no. 1278327-H), trading as Kembara Khalifah Travel (“KKT”, “we”, “us”). We are a travel agency licensed by the Ministry of Tourism, Arts and Culture Malaysia (MOTAC), licence no. 9125.

Under the PDPA, we are the data user responsible for your personal data. Our registered address is No. 27-3, Jalan Cecawi PSB 6/19A, Seksyen 6 Kota Damansara, 47810 Petaling Jaya, Selangor.

2Personal data we collect

Depending on how you deal with us, we may collect:

  • your name as it appears on your passport, NRIC or passport number, date of birth, nationality and gender;
  • your phone number, WhatsApp number, email address and mailing address;
  • travel details such as itineraries, passport copies, visa or travel authorisation details, photographs, loyalty programme numbers and emergency contacts;
  • billing details, payment records and proof of bank transfer;
  • special requirements you tell us about, such as health conditions, mobility needs, dietary needs or religious observances;
  • technical data such as your IP address, device and browser type, pages visited and cookie data;
  • your messages, enquiries, form submissions and feedback.

If you give us someone else's details (a family member, travel companion or emergency contact), you confirm that they know about this and agree to it.

3How we collect it

Most of it comes from you directly: through website forms, WhatsApp, email, phone calls, or in person when you make a booking. Some technical data is collected automatically through cookies when you use our website.

We may also receive your details from other people, such as a travel companion or group organiser who books on your behalf, and from suppliers and agents we work with.

4Why we use it

  • to answer enquiries and prepare quotations;
  • to make and manage bookings for flights, hotels, transport, tours, visas and travel authorisations;
  • to take payment and issue invoices and receipts;
  • to contact you about your trip, including schedule changes and urgent updates;
  • to meet legal duties, including licensing, tax, accounting and immigration requirements;
  • to improve our website and services;
  • to send you offers and updates, where you have agreed to receive them;
  • to prevent fraud and to handle complaints and disputes.

5Sensitive personal data

Health conditions, mobility needs and religious requirements are sensitive personal data under the PDPA. We ask for them only when we need them to arrange things like special meals, seating, assistance or suitable activities, and we process them only with your explicit consent or where the law allows.

You can withdraw your consent at any time. If you do, we may no longer be able to arrange the related service.

6Who we share it with

We share only what each party needs to do its part. That includes:

  • airlines, hotels, transport operators, ground handlers, tour guides and other suppliers delivering your trip;
  • embassies, immigration authorities and government portals, where a visa or travel authorisation is needed;
  • insurers, banks and payment providers;
  • IT, website hosting, email and messaging providers that support our operations;
  • our accountants, auditors and legal advisers;
  • regulators, courts and law enforcement, where the law requires it;
  • a buyer or successor, if our business is ever sold or restructured.

We don't sell your personal data.

7Transfers outside Malaysia

Most trips involve suppliers abroad, so your details will often go to overseas airlines, hotels and authorities. Some of our service providers may also store data on servers outside Malaysia.

Where that happens, we take reasonable steps to make sure your data is protected. Transfers needed to carry out your booking are made because the booking can't happen without them.

8Cookies

Cookies are small files stored on your device. Our website uses essential cookies to work properly, and may use analytics cookies to see how visitors use the site and marketing cookies to measure our advertising.

You can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site, such as forms or search, from working.

9Marketing messages

We send promotions by email, WhatsApp or SMS only if you have agreed to receive them. To stop, reply “STOP”, use the unsubscribe link, or contact us. We'll still send messages that are part of a booking, such as confirmations and itinerary changes.

10Keeping your data secure

We limit access to personal data to staff and providers who need it, use secure (HTTPS) connections on our website, and keep documents such as passport copies in access-controlled systems. No method of storage or transmission is completely secure, so please tell us straight away if you think your data has been misused.

If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commissioner as the law requires.

11How long we keep it

We keep personal data only as long as we need it for the purposes above, and for as long as the law requires us to (for example, for accounting, tax and licensing records). After that, we delete or anonymise it.

12Your rights

Under the PDPA you can ask us to:

  • tell you whether we hold your personal data and give you a copy;
  • correct data that is inaccurate, incomplete or out of date;
  • stop or limit how we use your data, including withdrawing consent;
  • transfer your data to another service provider you choose, where technically possible.

Send your request in writing to the contact below. We may ask you to confirm your identity first, and we'll respond within 21 days. The law lets us charge a reasonable fee for access requests, and there are limited cases where we can refuse a request, in which case we'll tell you why.

13Children

If a traveller is under 18, we need the details and consent of a parent or legal guardian. We don't knowingly collect personal data from children without that consent.

15Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed. Where a change is significant, we'll tell you through our website or by direct message.

16Contact us and complaints

For questions, requests or complaints about your personal data, contact our data protection contact person:

Data Protection Contact Person, Kembara Khalifah Travel Sdn. Bhd.
Email: kembarakhalifahtravel@gmail.com
Phone / WhatsApp: 016-216 6860
Address: No. 27-3, Jalan Cecawi PSB 6/19A, Seksyen 6 Kota Damansara, 47810 Petaling Jaya, Selangor

If we haven't resolved your concern, you can complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi) at www.pdp.gov.my.

Notis Privasi

Kemas kini terakhir: 24 September 2026

Notis ini menerangkan cara Kembara Khalifah Travel mengumpul, menggunakan, menyimpan dan berkongsi data peribadi anda apabila anda melayari kembarakhalifahtravel.com.my, menghubungi kami atau menempah perjalanan bersama kami. Notis ini dikeluarkan menurut Akta Perlindungan Data Peribadi 2010 (PDPA) Malaysia.

1Siapa kami

Laman web ini dikendalikan oleh Kembara Khalifah Travel Sdn. Bhd. (No. SSM 1278327-H), yang beroperasi sebagai Kembara Khalifah Travel (“KKT”, “kami”). Kami ialah agensi pelancongan berlesen di bawah Kementerian Pelancongan, Seni dan Budaya (MOTAC), No. lesen 9125.

Bagi tujuan PDPA, kami ialah pengguna data yang bertanggungjawab terhadap data peribadi anda. Alamat berdaftar kami ialah No. 27-3, Jalan Cecawi PSB 6/19A, Seksyen 6 Kota Damansara, 47810 Petaling Jaya, Selangor.

2Data peribadi yang kami kumpul

Bergantung pada urusan anda dengan kami, kami boleh mengumpul:

  • nama seperti dalam pasport, nombor kad pengenalan atau pasport, tarikh lahir, warganegara dan jantina;
  • nombor telefon, nombor WhatsApp, alamat e-mel dan alamat surat-menyurat;
  • butiran perjalanan seperti jadual perjalanan, salinan pasport, butiran visa atau kebenaran perjalanan, gambar, nombor program kesetiaan dan kenalan kecemasan;
  • butiran bil, rekod pembayaran dan bukti pindahan bank;
  • keperluan khas yang anda beritahu kami, seperti keadaan kesihatan, keperluan mobiliti, keperluan pemakanan atau amalan keagamaan;
  • data teknikal seperti alamat IP, jenis peranti dan pelayar, halaman yang dilawati dan data kuki;
  • mesej, pertanyaan, borang dan maklum balas anda.

Jika anda memberikan maklumat orang lain (ahli keluarga, rakan seperjalanan atau kenalan kecemasan), anda mengesahkan bahawa mereka mengetahui dan bersetuju dengan perkara ini.

3Cara kami mengumpulnya

Kebanyakannya datang terus daripada anda: melalui borang di laman web, WhatsApp, e-mel, panggilan telefon, atau secara bersemuka semasa anda membuat tempahan. Sebahagian data teknikal dikumpul secara automatik melalui kuki apabila anda menggunakan laman web kami.

Kami juga boleh menerima maklumat anda daripada orang lain, seperti rakan seperjalanan atau penganjur kumpulan yang membuat tempahan bagi pihak anda, serta daripada pembekal dan ejen yang bekerjasama dengan kami.

4Tujuan kami menggunakannya

  • menjawab pertanyaan dan menyediakan sebut harga;
  • membuat dan menguruskan tempahan penerbangan, hotel, pengangkutan, pakej lawatan, visa dan kebenaran perjalanan;
  • menerima bayaran serta mengeluarkan invois dan resit;
  • menghubungi anda tentang perjalanan anda, termasuk perubahan jadual dan makluman segera;
  • memenuhi kewajipan undang-undang, termasuk keperluan pelesenan, cukai, perakaunan dan imigresen;
  • menambah baik laman web dan perkhidmatan kami;
  • menghantar tawaran dan berita terkini, jika anda bersetuju menerimanya;
  • mencegah penipuan serta mengendalikan aduan dan pertikaian.

5Data peribadi sensitif

Keadaan kesihatan, keperluan mobiliti dan keperluan keagamaan ialah data peribadi sensitif di bawah PDPA. Kami memintanya hanya apabila perlu untuk menyediakan perkara seperti makanan khas, tempat duduk, bantuan atau aktiviti yang sesuai, dan kami memprosesnya hanya dengan persetujuan nyata anda atau apabila dibenarkan oleh undang-undang.

Anda boleh menarik balik persetujuan pada bila-bila masa. Jika anda berbuat demikian, kami mungkin tidak dapat lagi menyediakan perkhidmatan yang berkaitan.

6Pihak yang kami kongsikan data

Kami hanya berkongsi apa yang diperlukan oleh setiap pihak untuk menjalankan tugasnya. Antaranya:

  • syarikat penerbangan, hotel, pengendali pengangkutan, ejen operasi darat, pemandu pelancong dan pembekal lain yang menyampaikan perjalanan anda;
  • kedutaan, pihak berkuasa imigresen dan portal kerajaan, apabila visa atau kebenaran perjalanan diperlukan;
  • syarikat insurans, bank dan penyedia pembayaran;
  • penyedia IT, pengehosan laman web, e-mel dan pemesejan yang menyokong operasi kami;
  • akauntan, juruaudit dan penasihat undang-undang kami;
  • pengawal selia, mahkamah dan penguat kuasa undang-undang, apabila diwajibkan oleh undang-undang;
  • pembeli atau pengganti, jika perniagaan kami dijual atau distruktur semula.

Kami tidak menjual data peribadi anda.

7Pemindahan ke luar Malaysia

Kebanyakan perjalanan melibatkan pembekal di luar negara, maka maklumat anda sering dihantar kepada syarikat penerbangan, hotel dan pihak berkuasa di luar negara. Sesetengah penyedia perkhidmatan kami juga mungkin menyimpan data di pelayan di luar Malaysia.

Apabila ini berlaku, kami mengambil langkah yang munasabah untuk memastikan data anda dilindungi. Pemindahan yang diperlukan untuk melaksanakan tempahan anda dibuat kerana tempahan tersebut tidak dapat dilaksanakan tanpanya.

8Kuki

Kuki ialah fail kecil yang disimpan pada peranti anda. Laman web kami menggunakan kuki penting supaya berfungsi dengan betul, dan mungkin menggunakan kuki analitik untuk melihat cara pengunjung menggunakan laman web serta kuki pemasaran untuk mengukur iklan kami.

Anda boleh menyekat atau memadam kuki melalui tetapan pelayar anda. Menyekat kuki penting mungkin menyebabkan sebahagian laman web, seperti borang atau carian, tidak berfungsi.

9Mesej pemasaran

Kami menghantar promosi melalui e-mel, WhatsApp atau SMS hanya jika anda telah bersetuju menerimanya. Untuk berhenti, balas “STOP”, gunakan pautan berhenti melanggan, atau hubungi kami. Kami tetap akan menghantar mesej yang berkaitan dengan tempahan, seperti pengesahan dan perubahan jadual.

10Menjaga keselamatan data anda

Kami mengehadkan akses kepada data peribadi kepada kakitangan dan penyedia yang memerlukannya, menggunakan sambungan selamat (HTTPS) di laman web kami, dan menyimpan dokumen seperti salinan pasport dalam sistem yang akses kepadanya dikawal. Tiada kaedah penyimpanan atau penghantaran yang selamat sepenuhnya, jadi sila maklumkan kami dengan segera jika anda rasa data anda disalahgunakan.

Jika pelanggaran data berkemungkinan menyebabkan kemudaratan yang ketara kepada anda, kami akan memaklumkan anda dan Pesuruhjaya Perlindungan Data Peribadi seperti yang dikehendaki oleh undang-undang.

11Tempoh kami menyimpannya

Kami menyimpan data peribadi hanya selama diperlukan untuk tujuan di atas, dan selama yang dikehendaki oleh undang-undang (contohnya untuk rekod perakaunan, cukai dan pelesenan). Selepas itu, kami akan memadam atau menyahkenalkan data tersebut.

12Hak anda

Di bawah PDPA, anda boleh meminta kami untuk:

  • memberitahu anda sama ada kami menyimpan data peribadi anda dan memberikan salinannya;
  • membetulkan data yang tidak tepat, tidak lengkap atau sudah lapuk;
  • menghentikan atau mengehadkan penggunaan data anda, termasuk menarik balik persetujuan;
  • memindahkan data anda kepada penyedia perkhidmatan lain pilihan anda, jika boleh dilaksanakan dari segi teknikal.

Hantar permintaan anda secara bertulis kepada kenalan di bawah. Kami mungkin meminta anda mengesahkan identiti terlebih dahulu, dan kami akan membalas dalam tempoh 21 hari. Undang-undang membenarkan kami mengenakan bayaran yang munasabah bagi permintaan akses, dan terdapat kes terhad di mana kami boleh menolak permintaan, dan jika demikian kami akan memberitahu sebabnya.

13Kanak-kanak

Jika pelancong berumur di bawah 18 tahun, kami memerlukan butiran dan persetujuan ibu bapa atau penjaga sah. Kami tidak dengan sengaja mengumpul data peribadi kanak-kanak tanpa persetujuan tersebut.

15Perubahan pada notis ini

Kami boleh mengemas kini notis ini dari semasa ke semasa. Tarikh di bahagian atas menunjukkan bila ia terakhir diubah. Jika perubahan itu ketara, kami akan memaklumkan anda melalui laman web atau mesej terus.

16Hubungi kami dan aduan

Untuk pertanyaan, permintaan atau aduan tentang data peribadi anda, hubungi pegawai perhubungan perlindungan data kami:

Pegawai Perhubungan Perlindungan Data, Kembara Khalifah Travel Sdn. Bhd.
E-mel: kembarakhalifahtravel@gmail.com
Telefon / WhatsApp: 016-216 6860
Alamat: No. 27-3, Jalan Cecawi PSB 6/19A, Seksyen 6 Kota Damansara, 47810 Petaling Jaya, Selangor

Jika kebimbangan anda masih belum selesai, anda boleh membuat aduan kepada Pesuruhjaya Perlindungan Data Peribadi (Jabatan Perlindungan Data Peribadi) di www.pdp.gov.my.