Notice Pursuant to Personal Data Protection Act 2010

(a) Level Up Fitness Sdn Bhd, its subsidiaries, affiliates, licensees, associated companies and related corporations hereby would like to notify you that this notice is served on you pursuant to Personal Data Protection Act 2010 (“the Act”). The purpose of the enactment of the Act is to regulate the processing of personal data in commercial transactions and to provide for matters connected therewith and incidental thereto. For the purpose of this written notice, the terms “personal data” and “processing” shall have the same meaning as prescribed in the Act.

(b) STATEMENT OF PRACTICES:

i) TYPES OF PERSONAL DATA COLLECTED: We wish to inform you that your personal data is being processed by us. In this regards, we may process your personal data which shall include, but not limited to your name, identity card number or passport number; email address, telephone number; correspondence address, and/or billing address; payment details, including credit card and banking information; contact details, including contact name and telephone number or email address; your image taken at our premises with a webcam, CCTV (or similar equipment ) for visual identification; your age; gender; health information weight and height. Some of our websites may place a “cookie” on your machine; for example, to provide personalised services and/or maintain your identity across multiple pages within or across one or more sessions. This information may include, but is not limited to, relevant login and authentication details as well as information relating to your activities and preferences across our websites.

ii) SOURCE OF COLLECTION: Your personal data is collected from various sources,

including information you have provided us, information from third parties and

information in the public domain

iii) PURPOSES FOR COLLECTION, USE, DISCLOSURE AND PROCESSING OF

PERSONAL DATA: You understand, acknowledge and consent to us processing collecting and using your personal data for the following purposes:

• Processing, administering, and managing your Level Up Fitness membership;
• Processing any transactions or payments made by you and to maintain payment records;
• Contacting you or communicating with you via telephone call, text message, email and/or postal mail or the purposes of processing administering and managing your Level Up Fitness membership;
• For publicity purposes and conducting research, analysis and development activities (including but not limited to data analytics, surveys and/or profiling) to improve our services and facilities in order to enhance the services we provide to you, where you have consented us to do so;
• Record-keeping purposes;
• Responding to legal process, pursuing legal rights and remedies, defending litigation and managing any complaints or claims;
• Complying with any applicable law, regulation, legal process or government request; and
• Storing, hosting and/or backing up (whether for disaster recovery or otherwise) your personal data, whether within or outside Malaysia.

Your personal data may be used, disclosed, maintained, accessed, processed and/or transferred to the following third parties, whether sited in Malaysia or outside of Malaysia, for one or more of the purposes set out above:

• Level Up Fitness’s headquarters, affiliates and subsidiaries;
• Any of our agents, contractors or third party service providers that process or will be processing your personal data on our behalf including but not limited to those third party service providers which have been engaged by us to provide and maintain any IT equipment used to store and access your personal information; to operate; or otherwise provide membership services to you;
• Our auditors and legal advisors;
• Financial institutions, credit card companies and payment processors; and
• Public and governmental/regulatory authorities courts and other alternative

dispute forums.

iv) DATA RETENTION AND DELETION: We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. Active membership and mobile application account data is retained for the duration of your active membership or account. Upon cancellation or expiration of your membership, your personal data will be retained by us for up to ten (10) years, or until you inform us of your deletion request, whichever earlier. CCTV footage is retained for up to thirty (30) days unless required for ongoing investigations or legal proceedings.

You may request deletion of your personal data and closure of your account at any time subject to the membership terms you signed when you subscribe to your membership. To submit a deletion request, you may contact our Data Protection Officer at the contact details set out in section (v) below. We will acknowledge your request within seven (7) working days and complete the deletion within thirty (30) days of verification, save where we are required by law to retain certain records. Please note that account deletion is permanent and cannot be undone.

v) ACCESS AND CORRECTION OF PERSONAL DATA: Subject to any exceptions under applicable laws, you may request for access to and/or request correction of your Personal Data, request to limit the processing of your Personal Data above and/or make any inquiries regarding your Personal Data by contacting:

Address: Admin & Operations Department, Level Up Fitness Sdn Bhd, Wisma Everrise, Lot 376, Jalan Petanak, 93100 Kuching, Sarawak.

Email: pdpa@levelupfitness.com Phone: 082 233 222

vi) CHANGE POLICY: We reserve the right to alter any of the clauses contained herein in compliance with local legislation, to meet its global policy requirements, and for any other purpose deemed necessary by us.

originally published 9 Jul 2025, revised 29 Apr 2026