Privacy Policy

Last updated: 23 September 2026

Your privacy is important to us.

This Privacy Policy explains how NetQuas Holiday Sdn. Bhd. (Company No. 201201040322 (1024800-T), MOTAC License No. KPK/LN 7028), which operates NetCruise ("NetCruise", "we", "us" or "our"), collects, uses, discloses and protects your personal data when you visit netcruise.com.my, create a member account, make a booking, join the NetCruise E-Reward Card programme or contact us. We process personal data in accordance with the Personal Data Protection Act 2010 of Malaysia ("PDPA") and its amendments.

By using our website or services, or by providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.

 

It is NetCruise's policy to respect your privacy regarding any information we may collect while operating our website. Accordingly, we have developed this privacy policy in order for you to understand how we collect, use, communicate, disclose and otherwise make use of personal information. We have outlined our privacy policy below.

• We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned.
• Before or at the time of collecting personal information, we will identify the purposes for which information is being collected.
• We will collect and use personal information solely for fulfilling those purposes specified by us and for other ancillary purposes, unless we obtain the consent of the individual concerned or as required by law.
• Personal data should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, should be accurate, complete, and up-to-date.
• We will protect personal information by using reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use or modification.
• We will make readily available to customers information about our policies and practices relating to the management of personal information.
• We will only retain personal information for as long as necessary for the fulfilment of those purposes.

We are committed to conducting our business in accordance with these principles in order to ensure that the confidentiality of personal information is protected and maintained.

 

Depending on how you use our services, we may collect the following personal data:

• Account information: your name, email address, mobile number, country and password when you register as a NetCruise member.
• Booking information: contact person details, nationality, passenger names and, where required by the cruise line, airline, hotel or immigration authorities, details such as date of birth, gender, passport or identity card information, special requests (e.g. dietary, medical or accessibility needs) and emergency contacts.
• Payment information: payment method, amount and transaction reference. Card payments are processed by our payment gateway, Fiuu. We do NOT store your full credit or debit card details on our system.
• E-Reward Card information: your Reward Card number, points earned, redeemed and expired, and your booking history.
• Communications: enquiries, feedback, reviews and messages you send us by email, telephone, online forms, WhatsApp, WeChat, LINE, Telegram or social media.
• Technical and usage data: IP address, browser and device type, pages viewed, referring website, language and currency preferences, and information collected through cookies and similar technologies (see Section 7).

Some personal data is necessary for us to complete your booking. If you do not provide it, we may not be able to process your booking or provide the requested service.

 

We use your personal data for the following purposes:

• To process, confirm and manage your cruise, fly-cruise, river cruise and related travel bookings, including issuing booking confirmations, e-tickets and travel documents.
• To process payments, refunds and credits, and to prevent fraud and misuse of our website.
• To create and manage your member account and your E-Reward Card points.
• To respond to your enquiries and provide customer service, including notifying you of itinerary changes, cancellations or other important updates to your booking.
• To send you promotions, newsletters and special offers, where you have agreed to receive them. You may opt out at any time (see Section 9).
• To analyse website usage, improve our website and services, and measure the effectiveness of our advertising.
• To comply with legal and regulatory obligations, including requirements of the Ministry of Tourism, Arts and Culture (MOTAC), tax authorities and law enforcement agencies.

 

We do not sell or rent your personal data. We may disclose your personal data only to the following parties, and only as needed for the purposes above:

• Travel service providers: cruise lines, airlines, hotels, ground handlers, tour operators and insurance providers that deliver the services you book.
• Payment service providers: our payment gateway and banks, to process your payments and refunds.
• IT and service providers: companies that provide website hosting, cloud storage, email delivery, messaging, analytics and advertising services on our behalf, under appropriate confidentiality obligations.
• Government and regulatory authorities: port, immigration, customs and other authorities where required for your travel, or where disclosure is required or permitted by law, court order or regulatory request.
• Professional advisers and successors: our auditors and legal advisers, or a buyer or successor in the event of a merger, acquisition or restructuring of our business.

 

Because cruises and travel involve suppliers in many countries, your personal data may be transferred to and processed by cruise lines and other travel service providers outside Malaysia, as well as by our cloud service providers whose servers may be located overseas. Where we transfer your personal data outside Malaysia, we take reasonable steps to ensure it receives a level of protection comparable to that required under the PDPA.

 

We use reasonable technical and organisational measures to protect your personal data, including encrypted connections (HTTPS) on our website, access controls limited to authorised staff, and processing of card payments through our payment gateway rather than on our own servers. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping your account password confidential. Please contact us immediately if you suspect any unauthorised use of your account.

 

Our website uses cookies and similar technologies to:

• Keep the website working: e.g. keeping you logged in and remembering your language and currency selection.
• Understand website usage: e.g. Google Analytics, which helps us see how visitors use our website.
• Advertising: e.g. Google Ads and the Meta (Facebook) Pixel, which help us measure and show relevant advertisements to you on other websites and social media.
• Security: e.g. Google reCAPTCHA, which helps protect our forms from spam and abuse.

These third parties may collect information about your use of our website in accordance with their own privacy policies. You can block or delete cookies through your browser settings, although some parts of our website may then not work properly. You may also opt out of Google Analytics at tools.google.com/dlpage/gaoptout and manage your ad preferences in your Google and Facebook account settings.

 

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide your booking and member services, to resolve disputes, and to meet legal, accounting and tax record-keeping requirements. When personal data is no longer required, we will securely delete or anonymise it.

 

Subject to the PDPA, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of personal data that is inaccurate, incomplete, misleading or out of date. You can also update your account details by logging in to your member account.
• Withdraw your consent to the processing of your personal data, or limit its processing. Please note that this may affect our ability to provide certain services to you.
• Opt out of marketing communications at any time by following the unsubscribe instructions in our messages or by contacting us.
• Request that we close your member account. Unredeemed E-Reward Card points will be forfeited upon termination, as stated in our Terms & Conditions.

To exercise these rights, please contact us using the details in Section 13. We may need to verify your identity before acting on your request, and we will respond within the period required by law.

 

Our website is intended for users aged 18 and above. Bookings for passengers under 18 years old must be made by a parent, guardian or accompanying adult, who consents to our processing of the minor's personal data for the purposes of the booking.

 

Our website may contain links to third-party websites, such as cruise line, payment gateway and social media websites. We are not responsible for the privacy practices or content of those websites, and we encourage you to read their privacy policies.

 

NetCruise may change this privacy policy from time to time at NetCruise's sole discretion. Any changes will be posted on this page with a revised "Last updated" date. Your continued use of our website or services after the changes take effect means you accept the revised Privacy Policy.

In the event of any dispute or inconsistency between the English version of this Privacy Policy and any translation, the English version shall prevail.

 

If you have any questions, requests or complaints about this Privacy Policy or our handling of your personal data, please contact us:

NetQuas Holiday Sdn. Bhd.
Email: [email protected]
Office: +6088 532732
Mobile / WhatsApp: +6010 212 6789