HILTON KUALA LUMPUR

DAITO ASIA DEVELOPMENT (MALAYSIA) II SDN BHD. (0414238W) owns Hilton Kuala Lumpur, which is managed by Hilton Worldwide Holdings Inc. Hilton's mission is to be the most hospitable company in the world. We're passionate about delivering exceptional guest experiences, and we look forward to welcoming you to our hotels so we can share the light and warmth of hospitality with you.

We pledge to deliver the highest level of customer service, which includes respecting your privacy and protecting your personal information. In this privacy statement ("Statement"), we provide you with details about how we collect, use, and disclose your personal information.

This Statement applies to Hilton Worldwide Holdings Inc., its subsidiaries , and all of the hotels within the Hilton Portfolio of Brands (collectively, "Hilton," "we," or "us"). Our Portfolio of Brands includes Waldorf Astoria Hotels & Resorts, LXR Hotels & Resorts, Conrad Hotels & Resorts, Canopy by Hilton, Signia Hilton, Hilton Hotels & Resorts, Curio A Collection by Hilton, DoubleTree by Hilton, Tapestry Collection by Hilton, Embassy Suites by Hilton, Hilton Garden Inn, Motto by Hilton, Hampton by Hilton, tru by Hilton, Homewood Suites by Hilton, and Home2 Suites by Hilton.

By using any of our products or services and/or by agreeing to this Statement, e.g. in the context of registering for any of our products or services, you understand and acknowledge that we will collect and use personal information as described in this Statement.

Please note that this Statement does not apply to our processing of personal information on behalf of and subject to the instructions of third parties such as airlines, car rental companies and other service providers, companies that organize or offer packaged travel arrangements, marketing partners, or corporate customers.

ANALYTICS AND INTEREST-BASED ADVERTISEMENTS

We partner with certain third-party service providers to collect information to engage in analytics, auditing, research, and reporting. These third parties may use server logs, web beacons, tags, pixels, and similar technologies, and they may set and access cookies on your computer or other device.

In particular, we use Yahoo Analytics to help us understand how our customers use our websites. You can read more about how Yahoo uses your Personal Information and opt out of the use of cookies in web browsers by Yahoo Analytics by clicking here. We also use FullStory. The FullStory analytics service uses heat mapping and records mouse movements, clicks, scrolls, and keystrokes during your use of our site. This information helps us identify and address technical issues and understand usage of our Services, which we use to improve the Services for you. You can opt-out of our use of FullStory here. We also partner with 24/7 which supports our chat platform. 24/7 uses tags on websites to determine and enable predictive chat and allow the chat agent to understand what page the guest is on so the agent can provide assistance.

We also partner with third parties to provide advertising services that are targeted based on your online activities across websites, mobile apps, and devices over time (commonly referred to as “interest-based advertising”). Our advertising partners may collect information about your activities on our Services on your current device and combine it with information about your activities on other websites, mobile apps, and devices. They may collect such information using server logs, cookies, web beacons, tags, pixels, mobile advertising IDs (such as Facebook cookies or Google's Advertising ID), cross-device linking, and similar technologies. For example, our advertising partners may use the fact that you visited our website to target advertising to you on other websites and mobile apps on your current device or on other devices you use. They may match your browsers or devices if you log into the same online service on multiple devices or if your devices share similar attributes that support an inference that they are used by the same person or household. This means that information about your activity on websites or apps on your current browser or device may be combined and used with information collected from your other browsers or devices. You can opt out of interest-based advertising in web browsers and mobile apps on your current browser or device by following the instructions below.

For more information about interest-based advertising and cross-device linking, please visit the Network Advertising Initiative (“NAI”) website and the Digital Advertising Alliance (“DAA”) website. We adhere to the DAA's interest-based advertising principles by providing you enhanced notice, transparency, and control of our digital marketing practices as stated at http://www.aboutads.info/principles/. You may opt out of interest-based advertising and cross-device linking in web browsers and mobile apps on your current browser or device by following the instructions below.

Web Browser Opt-Out. To opt out in web browsers, please visit http://optout.aboutads.info/ and http://optout.networkadvertising.org. To help preserve the choices that you make in the DAA's WebChoices page, you can install the DAA's “Protect My Choices” extension that is available at http://www.aboutads.info/PMC.
Mobile Application Opt-Out. To opt out in mobile apps, you can adjust the advertising preferences on your mobile device (for example, in iOS, visit Settings > Privacy > Advertising > Limit Ad Tracking, and in Android, visit Settings > Google > Ads > Opt out of interest-based ads). You can also opt out for companies that participate in the Digital Advertising Alliance's AppChoices tool by downloading it here and following the instructions in the app. For more information about opting out on mobile devices, please see here.
Please note that the opt-outs described above will apply only to the specific browser or device from which you opt out, and therefore you will need to opt out separately on all of your browsers and devices. If you delete or reset your cookies or mobile advertising identifiers, change browsers (including upgrading certain browsers), or use a different device, any opt-out cookie or tool may no longer work, and you will need to opt out again. We do not respond to Do Not Track signals at this time.

CHANGING AND ACCESSING YOUR PERSONAL INFORMATION

If you are a Hilton Honors member, you may review and update the information you provided to us at the time of enrollment at any time by signing in to your Hilton Honors profile.

To the extent required by applicable law, you may be able to request that we inform you about the personal information we maintain about you and, where appropriate, withdraw your consent for certain data processing activity and/or request that we update, correct, delete, and/or stop processing your personal information. We will make all required updates and changes within the time specified by applicable law and as required by law. When permitted by law, we may charge an appropriate fee to cover the costs of responding to the request. Such requests may be submitted by accessing the Data Subject Rights Requests Portal at datarights.hilton.com or in writing to DataProtectionOffice@hilton.com or Hilton Data Protection Officer, 7930 Jones Branch Drive, McLean, VA 22102, USA.

In addition, in some circumstances based on applicable law, you may request that we cease sharing personal information about you with our business partners or that Hilton cease using personal information about you by contacting us using the email or mailing address above. We will honor those requests as required by applicable law.

HOW WE PROTECT PERSONAL INFORMATION

We take reasonable measures to: (i) protect personal information from unauthorized access, disclosure, alteration, or destruction, and (ii) keep personal information accurate and up-to-date as appropriate.

Hilton employs a robust team of dedicated information security professionals who are responsible for managing Hilton's security program. This team is responsible for, among many other things, monitoring our systems for potential intrusions, responding to potential incidents, supporting property-level information security, regularly reviewing and updating the security controls Hilton uses to protect data, and providing training on Hilton's information security program.

Hilton maintains a payment card industry (“PCI”) compliance program and an Information Technology compliance program. This compliance program generates audit reports concerning the adequacy and effectiveness of Hilton's Technology internal controls, including a PCI Attestation of Compliance signed by an external PCI Qualified Security Assessor and a SSAE16/SOC1 report addressing the Technology general controls over systems that support certain accounting and financial reporting.

We require third parties with whom we share personal information to exercise reasonable efforts to maintain the confidentiality of personal information.

We will never ask you to send us confidential personal information or payment card information via email or text message.

In the event of a security incident, Hilton will notify regulators and/or consumers as required by applicable laws and regulations.

MARKETING COMMUNICATIONS - CHOICES

We want to make you aware of the fantastic products we offer! To do so, we may send you communications via email, text message, push notifications, in-app alerts, direct mail, and social media.

If you are a Hilton Honors member, you may change the communications you receive from us by logging on to your online account and managing your subscriptions; by writing to us (and including your email address) at Hilton Data Protection Officer, 7930 Jones Branch Drive, McLean, VA 22102, USA; or by emailing us at DataProtectionOffice@hilton.com.

If you prefer not to receive email marketing materials from us, you may opt-out at any time by using the unsubscribe function in any email you receive from us or by clicking this link: https://secure.hilton.com/en/hhonors/optout/unsubscribe.jhtml?listid=0, by writing to us (and including your email address) at Hilton Data Protection Officer, 7930 Jones Branch Drive, McLean, VA 22102, USA, or by emailing us at DataProtectionOffice@hilton.com. Opt-out requests can take up to ten business days to be effective.

To opt out of text messages, tell the hotel front desk that you do not want to receive text messages from the hotel or reply “STOP” to the message you received.

You may control whether our mobile apps send you push notifications by changing your notification settings on your mobile device. If we engage in sending you in-app messages, we will allow control for those in our apps' settings.

DATA RETENTION PERIODS

We may modify this Statement from time to time. When we make material changes to this Statement we will post a link to the revised Statement on the homepage of our site. You can tell when this Statement was last updated by looking at the date at the top of the Statement. Any changes to our Statement will become effective upon posting of the revised Statement on the site. Use of the site, any of our products and services, and/or providing consent to the updated Statement following such changes constitutes your acceptance of the revised Statement then in effect.

CONTACT INFORMATION FOR QUESTIONS OR CONCERNS

If you have any questions or concerns, please contact us by sending an email to DataProtectionOffice@hilton.com, by sending a letter to Hilton Data Protection Officer, 7930 Jones Branch Drive, McLean, VA 22102, or by calling our toll-free number: (800) 413-7470.