AIA Vitality is a health and wellness programme, encouraging you to get healthier and earn great rewards. In order for AIA Vitality-related services to be provided to you, it will be necessary for us to collect, use and share certain personal data about you. Customers and potential customers expect us to maintain their information accurately, protected against manipulation and errors, secure from theft and free from unwarranted disclosure. We protect the data security of our customers and potential customers by complying with the Personal Data Protection Act 2010, and all relevant local laws, and ensure compliance by our staff with strict standards of security and confidentiality.
This statement ("AIAV PICS") provides you with notice as to why your personal data is collected, how it is intended to be used, to whom your personal data may be provided, from whom your personal data may be collected and how to access, review and amend your personal data. The provision of your personal data is voluntary: you may choose not to provide us with the requested data, but failure to do so may inhibit AIA Vitality's ability to provide you with its services.
AIA Vitality is operated by AIA Group Limited, AIA Company Limited, AIA Health Services Sdn. Bhd (collectively, the "AIA Vitality Operator") and members of the AIA group of companies ("AIA Group"). The AIA Vitality Operator will receive ongoing support from Discovery Limited (a company based in South Africa) and/or its affiliates ("DSY"),the [global operators of the AIA Vitality programme].
It is also important for you to note that [the underwriting and claims departments of] AIA Company Limited, AIA International Limited, AIA Bhd., AIA PUBLIC Takaful Bhd. or any other insurer/takaful operator within the AIA Group ("AIA Insurers") will not have access to your personal data (including health and medical information) provided to, or collected via, AIA Vitality. Accordingly, where you are applying for a new insurance policy/takaful certificate from the AIA Insurers, you acknowledge that any health, medical or other information that may affect the risk under an insurance policy/takaful certificate needs to be separately notified to the AIA Insurers even if you have already provided the information to the AIA Vitality Operator or the AIA Vitality Partners (as defined below). Similarly, if you are currently under any obligation to notify the AIA Insurers of the occurrence of any event or of the onset of any condition, or of the cessation of any such event or condition, then you will need to separately notify the AIA Insurers of the same even if you have already provided the information to the AIA Vitality Operator or the AIA Vitality Partners (as defined below).
By using this website, you are accepting the practices and policies in this AIAV PICS. If you object to any practices and policies in this AIAV PICS, please do not use this website to submit your personal information towards the AIA Vitality programme.
This website is for general information purpose only. While we use reasonable efforts to ensure the accuracy of the information on this website, AIA Vitality Operator and AIA Vitality Partners (as defined below) do not warrant its absolute accuracy or accept any liability for any loss or damage resulting from any inaccuracy or omission. Without prior permission from AIA Vitality Operator, no information contained on this website may be copied, except for personal use, or redistributed.
This website and our social media platforms are not intended for persons in jurisdictions that restrict the distribution of information by us or use of such social media platforms. If this is applicable to you, we would advise you to inform yourself about and observe the relevant restrictions. AIA Vitality Operator and AIA Vitality Partners (as defined below) do not accept liability in this respect.
Why we collect your personal data and how it may be used?
Personal data is collected for the following purposes:
- To process, administer, implement and effect the requests, transactions or membership services under AIA Vitality. In this regard, in addition to any personal data that the AIA Vitality Operator may collect directly from you, the AIA Vitality Operator may also need to collect from the AIA Vitality Partners (as defined below) information regarding your use of, and participation in (including progress and results from), the membership goods or services provided by the AIA Vitality Partners (as defined below);
- To design new or to enhance existing products, information and services to be provided under AIA Vitality;
- To communicate with you including to send you communications about any updates and future changes to AIA Vitality, your AIA Vitality membership and account, or this AIAV PICS;
- To provide other AIA Vitality and/or loyalty programme-related services such as online shopping at AIA Vitality website or AIA Vitality purchases;
- To personalise the appearance of our websites, mobile applications and social media platforms, provide information and services and provide targeted advertising on our website or through other channels;
- For statistical or actuarial research undertaken by the AIA Group, our partners who provide goods and services under AIA Vitality ("AIA Vitality Partners"), the financial services industry or our respective regulators;
- For advances data analytics, data matching, internal business and administrative purposes;
- to monitor and analyse your use of AIA Vitality pages in the mobile application in order to operate, evaluate and improve our services, understand your preferences and troubleshoot any problems;
- To facilitate payment for products and/or services provided by AIA Vitality Operator, any other member of the AIA Group or any AIA Vitality Partner, including but not limited to for the verification of credit card details with credit card issuers or other third party service providers, obtaining consumer credit reports from a credit reference agency and conducting match making procedures against databases of known fraudulent transactions maintained by AIA Vitality Operator, any other member of the AIA Group, any AIA Vitality Partner or third party;
- To assist in law enforcement purposes, investigations by police or other government or regulatory authorities and to meet requirements imposed by applicable laws and regulations or other obligations committed to government or regulatory authorities;
- Other purposes as notified at the time of collection; and
- Other purposes directly relating to any of the above.
Unless permitted by applicable laws and regulations, we will obtain consent from you if we wish to use your personal data for purposes other than those stated in this Privacy Statement.
For our policy on use of your personal data for promotional or marketing purposes relating to AIA Vitality, please see the section "Use of Personal Data for Direct Marketing Purposes" below.
Who may be provided with your personal data?
Personal data will be kept confidential but may, where permitted by law or such disclosure is necessary to satisfy the purpose or a directly related purpose for which the personal data was collected, provide such personal data to the following parties:
- Any of our affiliates and to DSY and AIA Vitality for the purposes specified above;
- Any person authorised to act as an agent of the AIA Vitality Operator for the distribution of information in relation to AIA Vitality;
- The AIA Vitality Partners and their agents for the provision of membership goods and/or services, and programme administration;
- Any agent, contractor or third party service provider who provides membership servicing support including but not limited to administration, data processing, data storage, call centre services, mailing, system infrastructure and operation, website administration, marketing, finance, rewards, invoicing and training;
- Other companies who help gather your information or communicate with you, such as research companies and ratings agencies, in order to enhance the services to be provided under AIA Vitality.
- Government or regulatory authorities or any person to whom the AIA Vitality Operator (or another AIA Group company) or an AIA Vitality Partner is to make disclosure:
(a) under a legal and / or regulatory obligation in that jurisdiction applicable to that particular AIA Group company or AIA Vitality Partner; or
(b) which the AIA Group company or AIA Vitality Partner has agreed to make disclosures
From time to time, the AIA Group may purchase a business or sell one or more of its businesses (or portions thereof) and your personal data may be transferred or disclosed as part of the purchase or sale or a proposed purchase or sale. In the event that the AIA Group purchase a business, the personal data received with that business, to the extent that it is relevant to AIA Vitality, will be treated in accordance with this AIAV PICS. In the event that the AIA Group sell a business, to the extent that it is relevant to AIA Vitality, a provision will be included in the selling contract requiring the purchase to treat your personal data in the same manner required by this AIAV PICS.
Your personal data may be provided to any of the above parties who may be located in Malaysia or outside of Malaysia.
Your information may be transferred to, stored, and processed in other jurisdictions where any of the above parties is located, or jurisdictions where a third-party contractor is located or from which the third-party contractor provides us services. Where required under relevant law, we may seek your consent to the transfer of such information outside your jurisdiction to our facilities or to those third parties with whom we share it as described above. Your personal data will only be transferred to other locations, where we are satisfied that adequate levels of protection exist to protect the integrity and security of your personal data, which as minimum are comparable to the jurisdiction or territory in which you provided such personal data.
For our policy on sharing your personal data for promotional or marketing purposes relating to AIA Vitality, please see the section "Use of Personal Data for Direct Marketing Purposes" below.
Access rights to personal data
Under applicable laws and regulations, you have the right to:
- Verify whether the AIA Vitality Operator holds any personal data about you in relation to AIA Vitality and to access any such data or information about how AIA Vitality used or disclosed your personal data;
- Require the AIA Vitality Operator to correct any personal data relating to you held under AIA Vitality which is inaccurate or incomplete;
- Request deletion of your personal data under certain circumstances;
- Make a complaint about AIA Vitality Operator’s data handling; and
- Enquire about AIA Vitality Operator's policies and practices in relation to personal data.
Requests for access, correction, complaints, or other queries relating to you under the AIA Vitality programme should be addressed to us via Contact Us | AIA Malaysia
The AIA Vitality Operator has the right to charge costs which are directly related to and necessary for the processing of any personal data access request.
Use of personal data for direct marketing purposes
As well as for the purposes set out above, the AIA Group intends to use your name and contact details for promotional or marketing purposes including sending you promotional materials and conducting direct marketing in relation to the following products, services, advice and subjects: insurance; takaful; annuities; MPF/ORSO; wealth management; investment; banking; financial services; credit cards; medical/health treatment; educational; recruitment; training; reward/loyalty/privilege programmes; travel; accommodation; apparel; concerts; sporting and special events; food and beverage; household; media; social networking; spa and similar relaxation activities and other leisure services; telecommunication and mobile services; internet; other retail/consumer products and services; wellness and charitable/non-profitable causes ("Classes of Marketing Subjects").
For the purposes of direct marketing, we may provide your personal information to providers (and their agents) (whether within or outside of the AIA Group) of any of the Classes of Marketing Subjects described above so that they can contact you and/or send you promotional materials and conduct direct marketing in relation to the products and services that they offer (these materials may be sent to you by postal mail, email or other means). We may provide your personal data to providers (whether within or outside of the AIA Group) of any of the Classes of Marketing Subjects for gain.
Before using or providing your personal data for the purposes and to the transferees set out in this section, we may be required by law to obtain your written consent, and in such cases, only after having obtained such written consent, may we use and provide your personal data for any promotional or marketing purpose.
The types of personal data that AIA Group would use and provide for direct marketing purposes as described above are your name and relevant contact details, although we may possess additional personal data.
You may in future withdraw your consent to the use and provision to a third party by the AIA Vitality Operator of your personal data for direct marketing purposes and thereafter the AIA Vitality Operator shall cease to use such data for direct marketing purposes.
If you wish to withdraw your consent, please inform us by writing to the address in the section on "Access Rights to Personal Data" or sending us an email. Any such request should clearly state details of the personal data in respect of which the request is being made.
Use of cookies
Cookies are small text containing small amounts of information which are downloaded and may be stored on any of your web browsers or internet enabled devices (e.g. your computer, smartphone or tablet) that can later be read by the server - like a memory for a web page.
AIA Vitality Operator may use cookies and other tools on the website and mobile applications. By continuing to use the website, you are agreeing to us placing cookies on your computer. The information collected (including but not limited to: your IP addresses (and domain names), browser software, types and configurations of your browser, language settings, geo-locations, operating systems, referring website, pages and content viewed, and durations of visit) will be used to ensure operation of the website and enable you to log in securely, for compiling aggregate statistics on how our visitors reach and browse our websites for web enhancement and optimisation purposes, and to help us understand how we can improve your experience on it.
The cookies also enable our website to remember you and your preferences, and tailor the website for your needs. Advertising cookies will allow us to provide advertisements on our websites that are as relevant to you as possible, e.g. by selecting interest-based advertisements for you, or preventing the same advisement from constantly reappearing to you. You can find more information on the types of cookies we collect, what we use these for, and how to manage your cookie settings in our Cookie Policy.
External links
If any part of this website, mobile applications and social media platforms contains links to other websites, those sites may not operate under this AIAV PICS. You are advised to check the privacy statements on those websites to understand their policies on the collection, usage, transferal and disclosure of personal data.
Amendments to this AIAV pics
The AIA Vitality Operator reserves the right, at any time and without notice, to add to, change, update or modify this AIAV PICS, simply by notifying you of such change, update or modification. If we decide to change our personal data policy, those changes will be notified to you either on our website or in writing so that you are always aware of what information we collect, how we use the information and under what circumstances the information is disclosed. Any such change, update or modification will be effective immediately upon posting.
Additional information
If you have any questions about this AIAV PICS or would like additional information regarding the AIA Vitality Operator's data privacy policies and practices, please do not hesitate to contact us. you can contact our Data Protection Officer (DPO) using the following details:
Data Protection Officer:
Our DPO is responsible for overseeing our data protection strategy and ensuring our compliance with applicable data protection laws and regulations.
Last Updated: 11 June 2025