Privacy policy

This Privacy Policy describes how personal data is collected, used, and protected by Mek Kebaya Cultural Village Sdn. Bhd. operating as Al-Villa Kampung Cina (“Al-Villa”, “we”, “us”, or “our”).

This Policy is issued in accordance with the Personal Data Protection Act 2010 of Malaysia (PDPA).

By making a reservation, staying at the Hotel, or communicating with us, you consent to the processing of your personal data as described below.

We may collect and process the following personal data:

• Full name


• NRIC number or passport number (for verification purposes)


• Nationality


• Contact number


• Email address


• Billing information


• Payment confirmation details (processed via secure payment gateway)


• Vehicle registration number (if applicable)


• CCTV recordings within the premises


• Any other information voluntarily provided by you

We collect only personal data that is necessary for operational, legal, and security purposes.

Your personal data is collected and processed for the following purposes:

• Processing and managing reservations


• Identity verification during check-in


• Compliance with Malaysian legal and regulatory requirements


• Guest registration and security procedures


• Communication regarding your stay


• Responding to inquiries, feedback, or complaints


• Internal record keeping and administrative purposes


• Ensuring safety and security within the premises

We will not use your personal data for unrelated purposes without your consent.

Guests may be required to present a valid NRIC or passport for identity verification during check-in.

We record necessary identification details for verification and compliance purposes. We do not retain copies of identification documents for standard short-term stays unless required by law or specific operational necessity.

Your personal data may be disclosed to:

• Payment gateway providers


• Online Travel Agencies (OTAs) where applicable


• Government authorities or law enforcement agencies where required by law


• Professional advisors (such as auditors or legal counsel)


• IT service providers engaged by us

We do not sell, trade, or rent your personal data to third parties.

Personal data will be retained only for as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable laws.

When no longer required, personal data will be securely deleted or anonymised.

We implement reasonable administrative, technical, and physical safeguards to protect personal data against unauthorized access, disclosure, alteration, misuse, or loss.

Access to personal data is restricted to authorised personnel only.

CCTV cameras are installed within certain areas of the Hotel for safety and security purposes. Recorded footage is used solely for security monitoring and incident investigation.

Al-Villa reserves the right to update or amend this Privacy Policy at any time. The latest version will be published on our official website and will take effect immediately upon publication.