Last updated: 9 July 2026
Adventure Waterpark Desaru Coast respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you visit our website, purchase tickets or products, submit an enquiry, communicate with us, participate in our promotions or otherwise interact with Adventure Waterpark Desaru Coast.
This Privacy Policy should be read together with any additional privacy notices or terms provided when you use a particular service.
1. About Us
For the purposes of this Privacy Policy, “Adventure Waterpark Desaru Coast”, “AWP”, “we”, “us” or “our” refers to:
TAR Riverwalk Sdn. Bhd.
Company Registration No.: 201101025133 (0953269-A)
Address: Lingkaran Samudera, Desaru Coast, 81930 Bandar Penawar, Johor, Malaysia
We are the data controller responsible for the personal data described in this Privacy Policy, except where another party is identified as being responsible for a particular service or transaction.
2. Personal Data We May Collect
Depending on how you interact with us, we may collect the following types of personal data:
Contact and identification information
- Full name
- Email address
- Telephone or mobile number
- Nationality, country of residence or preferred language
- Identification information where reasonably required for verification, annual passes, group bookings, promotions or legal compliance
Booking and transaction information
- Ticket, annual pass, cabana, package, event or group-booking details
- Visit date and booking reference
- Number and category of guests
- Purchase and payment status
- Billing information
- Promotional codes, vouchers or membership details
- Transaction history and customer service records
Payment card information may be processed directly by an appointed payment provider. We may not receive or store your complete payment card details.
Enquiry and communication information
- Messages submitted through our website
- Customer service enquiries, complaints and feedback
- Survey responses and reviews
- Communication preferences
- Records of correspondence with us
Visit and operational information
Where relevant to your visit, we may collect information relating to:
- Lost property
- Guest assistance requests
- Incidents, accidents or safety matters
- Accessibility or special assistance requests
- Dietary, allergy, health or mobility information that you voluntarily provide and that is reasonably required to assist you
Please avoid providing sensitive information unless it is necessary for us to assist you.
Lost Property Investigations
Personal data collected during lost property enquiries or investigations may be used to verify ownership, facilitate the return of property, investigate claims, maintain appropriate records and prevent fraudulent claims.
Medical and Emergency Information
Where medical, health or emergency information is voluntarily provided, it will only be used to assist guests, respond to emergencies, meet legal or regulatory obligations, and protect the health and safety of guests, employees and other persons.
Website and technical information
When you use our website, we may automatically collect:
- Internet Protocol address
- Browser and device type
- Operating system
- Website pages viewed
- Dates and times of access
- Referring website or advertising source
- Links, buttons and features used
- Cookie identifiers and similar technical data
Marketing and promotional information
We may collect:
- Your marketing preferences
- Participation in contests, giveaways or promotional campaigns
- Responses to advertisements and campaign communications
- Social media interactions relating to our official accounts
3. How We Collect Personal Data
We may collect personal data:
- Directly from you when you make a purchase, register, submit a form or contact us
- Through our website, booking engine, payment gateway or customer service channels
- Through authorised ticketing agents, travel partners, event organisers or corporate-booking representatives
- From another person making a booking on your behalf
- Through cookies, analytics tools and similar technologies
- During your visit to the waterpark
- Through publicly available sources or social media platforms where permitted by law
When you provide personal data relating to another person, you confirm that you are authorised to provide that information and have informed the person about the relevant use of their data.
4. How We Use Your Personal Data
We may process your personal data for the following purposes:
- To process, confirm and manage ticket or product purchases
- To manage annual passes, cabanas, packages, events and group bookings
- To verify bookings, identities, eligibility, discounts or promotional redemptions
- To respond to enquiries, complaints and customer service requests
- To provide information about your visit, booking, transaction or requested service
- To process refunds, amendments or other booking-related requests where applicable
- To administer contests, promotions, surveys or guest activities
- To manage safety, security, operational and emergency matters
- To improve our website, attractions, services and guest experience
- To conduct internal reporting, research and statistical analysis
- To detect or prevent fraud, misuse, security incidents and unlawful activity
- To protect our legal rights and the safety of guests, employees and other persons
- To comply with laws, regulations, court orders and requests from competent authorities
- To send marketing communications where you have provided consent or where otherwise permitted by law
We will only use personal data for purposes that are reasonably connected to the reason it was collected, unless another use is required or permitted by law.
5. Marketing Communications
Where you have agreed to receive marketing communications, we may send you information about:
- Tickets and annual passes
- Promotions and seasonal campaigns
- Events and activities
- Packages, offers and partner promotions
- News and updates from Adventure Waterpark Desaru Coast
You may withdraw your marketing consent at any time by:
- Selecting the unsubscribe option in an email
- Following the opt-out instructions in a message
- Contacting us using the details provided below
Withdrawing from marketing communications will not prevent us from sending essential service messages concerning an existing booking, purchase or enquiry.
6. Cookies and Similar Technologies
Our website may use cookies, pixels, tags and similar technologies to:
- Enable essential website functions
- Remember preferences
- Maintain website security
- Understand how visitors use the website
- Measure website and campaign performance
- Improve content and user experience
- Deliver or measure relevant advertising, where permitted
Some cookies are placed by third-party service providers, including analytics, advertising, booking, payment or embedded-content providers.
You may control certain cookies through your browser settings or any cookie-management tool made available on our website. Disabling cookies may affect the availability or performance of certain website features.
7. Disclosure of Personal Data
We may disclose personal data to parties that reasonably require it to provide services to us or to you, including:
- Our related companies and affiliated businesses
- Website hosting and technology providers
- Booking-engine and ticketing providers
- Payment processors and financial institutions
- Email, messaging and customer-service providers
- Marketing, advertising and analytics providers
- Event organisers, travel partners and authorised agents
- Professional advisers, auditors and insurers
- Security, medical, emergency and operational service providers
- Government agencies, regulators, courts and law-enforcement authorities where required or permitted by law
- A purchaser, investor or successor in connection with a proposed or completed business transaction
These parties may only use personal data for the relevant service, transaction or lawful purpose, subject to applicable contractual and legal requirements.
We do not sell your personal data.
8. Third-Party Websites and Services
Our website may link to external websites, booking platforms, payment services, maps, social media platforms or other third-party services.
These third parties operate independently and may collect personal data under their own privacy policies. We encourage you to review their policies before submitting personal data.
We are not responsible for the privacy practices, security or content of external services that we do not control.
9. Cross-Border Processing
Some of our service providers or technology systems may process or store personal data outside Malaysia.
Where personal data is transferred internationally, we will take reasonable steps to ensure that the transfer is made in accordance with applicable law and that appropriate safeguards are in place.
10. Data Security
We use reasonable administrative, technical and physical measures to protect personal data against:
- Unauthorised access
- Accidental loss
- Improper use
- Unauthorised alteration
- Disclosure or destruction
Access to personal data is limited to persons who reasonably require it for legitimate business or legal purposes.
While we implement reasonable administrative, technical and physical security measures, no electronic transmission, internet-based service or data storage system is completely secure. Accordingly, we cannot guarantee the absolute security of personal data.
11. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, comply with legal, accounting, taxation or regulatory requirements, resolve disputes, enforce our agreements, or protect our legitimate business interests.
When personal data is no longer required, we will securely delete, anonymise or destroy it in accordance with our internal retention policies and applicable law.
12. Children’s Personal Data
Our website and services may be used by families and children. Where personal data relating to a child is required, it should be provided by or with the consent of the child’s parent or legal guardian.
Parents and guardians should supervise children when they use our website or submit information online.
Should we become aware that a child’s personal data was collected without appropriate authorisation, we will take reasonable steps to address the matter.
13. Photography and Video at the Waterpark
CCTV operates continuously throughout selected areas of the waterpark for security, safety, operational monitoring, incident investigation, loss prevention and crime prevention purposes.
Photography and video recording may also take place within the waterpark for operational, documentation, promotional or marketing purposes.
Where images or recordings are captured specifically for identifiable promotional or commercial use, additional notice or consent will be obtained where reasonably practicable and where required by applicable law.
Guests may contact us before their visit if they have specific concerns regarding photography or video recording.
14. Your Rights
Subject to applicable law and any permitted exceptions, you may request to:
- Access personal data held about you
- Correct inaccurate or incomplete personal data
- Withdraw consent for certain processing
- Stop receiving direct marketing communications
- Ask questions about how your personal data is processed
We may request information to verify your identity before acting on a request.
Certain information may need to be retained where required for legal, security, transactional or operational purposes.
15. Changes to This Privacy Policy
We may amend this Privacy Policy from time to time to reflect changes in our practices, services, technology or legal requirements.
The updated version will be posted on this page together with a revised “Last updated” date. We encourage you to review this page periodically.
16. Contact Us
For questions, requests or concerns relating to this Privacy Policy or your personal data, please contact:
Adventure Waterpark Desaru Coast
Email: customer.care@adventurewaterpark.com.my
Telephone: +607-878 3800
Address: Lingkaran Samudera, Desaru Coast, 81930 Bandar Penawar, Johor, Malaysia
Please include sufficient information for us to understand and respond to your request.