Security Policy

DIVA takes reasonable administrative, technical and organisational measures to protect customer information and payment-related data.

Payment card and online banking information is entered directly through DIVA’s authorised payment gateway and is not requested through DIVA consultation forms or WhatsApp.

Access to customer contact details, consultation information and photographs is limited to authorised personnel and service providers who reasonably require access to perform their functions.

DIVA will never ask customers through WhatsApp, email or telephone to disclose:

• online banking passwords;
• OTP or TAC codes;
• full card security codes;
• or account login passwords.

If a customer receives an unexpected payment request or notification of changed bank or payment details, the customer should verify the request through DIVA’s official contact details before making payment.

No online system can guarantee absolute security.

If DIVA becomes aware of a personal data or security incident, DIVA will investigate the matter, take reasonable remedial action and make any notifications required under applicable Malaysian law.

Customers who suspect misuse of their booking or personal information should contact DIVA promptly.

Customers should never send passwords, OTPs or full card information when reporting an issue.

Third-party payment, hosting, WhatsApp, communications and technology providers operate subject to their own systems and terms.