COOKIE POLICY

Effective date: 22 July 2026

Last updated: 22 July 2026

This Cookie Policy explains how AGH GROUP HOLDINGS SDN. BHD., trading as MediGoMY (“MediGoMY”, “we”, “us” or “our”), uses cookies and similar technologies on medigomy.com and its related webpages, landing pages and digital services (collectively, the “Website”).

This Cookie Policy should be read together with our Privacy Policy, Website Terms of Service & Use and Medical Disclaimer.

1. What Are Cookies?

Cookies are small text files placed on or accessed from your computer, mobile device or other internet-connected device when you visit a website.

Cookies may allow a website to:

(a) recognise a device or browser;

(b) remember preferences;

(c) maintain a secure session;

(d) understand how the website is used;

(e) measure website performance;

(f) prevent fraud or misuse;

(g) measure advertising effectiveness; or

(h) provide relevant content.

Cookies do not ordinarily contain complete medical records. However, cookie identifiers and associated online information may constitute personal data when they identify, relate to or can reasonably be linked to an individual.

2. Similar Technologies

In addition to cookies, the Website may use similar technologies, including:

(a) pixels;

(b) tags;

(c) web beacons;

(d) local storage;

(e) session storage;

(f) software development kits;

(g) device identifiers;

(h) scripts;

(i) tracking URLs; and

(j) conversion-measurement technologies.

References to “cookies” in this Policy include these similar technologies where appropriate.

3. Who Is Responsible for Cookies?

AGH GROUP HOLDINGS SDN. BHD., trading as MediGoMY, is responsible for determining the purposes for which first-party cookies are used through the Website.

Authorised Website Operations Partners may assist with Website development, hosting, maintenance, security, SEO, SEM, analytics configuration, advertising administration, content management and consent-management functions.

Where a Website Operations Partner or another service provider uses cookies solely on MediGoMY’s instructions, it acts within the scope of its appointed service.

Some third-party providers may independently determine aspects of their cookie or data-processing activities. Their own privacy notices and cookie policies may apply to those independent activities.

4. First-Party and Third-Party Cookies

First-party cookies are set directly by MediGoMY or through the MediGoMY Website domain.

Third-party cookies are set by or on behalf of an external provider whose technology is used on the Website.

Third-party providers may include, where actually used:

(a) Website-hosting providers;

(b) security and fraud-prevention providers;

(c) consent-management providers;

(d) analytics providers;

(e) advertising or conversion-measurement providers;

(f) social-media platforms;

(g) video or content-embedding providers;

(h) customer-support providers;

(i) appointment or form providers; and

(j) payment providers.

The specific cookies and providers active on the Website should be displayed in the cookie preference centre where technically available.

5. Types of Cookies We May Use

5.1 Strictly Necessary Cookies

Strictly necessary cookies are required for the Website to operate or to provide a function expressly requested by the user.

They may be used to:

(a) load webpages;

(b) maintain Website security;

(c) prevent fraud or abuse;

(d) remember cookie-consent choices;

(e) maintain a session;

(f) balance Website traffic;

(g) enable forms to function;

(h) process a requested transaction; or

(i) provide essential accessibility features.

Because these cookies are necessary for the operation of the Website or delivery of a requested function, they cannot ordinarily be disabled through the cookie preference centre.

You may be able to block them through your browser, but parts of the Website may then fail to operate correctly.

5.2 Security Cookies

Security cookies may assist with:

(a) detecting suspicious activity;

(b) preventing unauthorised access;

(c) protecting forms;

(d) limiting automated abuse;

(e) maintaining system integrity; and

(f) investigating security incidents.

Security cookies will be treated as strictly necessary where they are genuinely required to protect the Website, users or information.

5.3 Functional Cookies

Functional cookies allow the Website to remember choices and provide enhanced functions.

They may remember:

(a) preferred language;

(b) region;

(c) accessibility settings;

(d) form preferences;

(e) interface choices; or

(f) other non-essential customisations.

If functional cookies are disabled, some enhanced Website functions may not operate as intended.

5.4 Analytics and Performance Cookies

Analytics and performance cookies help us understand how visitors use the Website.

They may collect information concerning:

(a) pages visited;

(b) time spent on a page;

(c) navigation paths;

(d) referral sources;

(e) browser and device type;

(f) approximate location;

(g) Website errors;

(h) loading performance;

(i) interactions with buttons or forms; and

(j) aggregated visitor statistics.

We use this information to evaluate and improve the Website, content and user experience.

Where consent is legally required, analytics and performance cookies will not be activated until you have provided the relevant consent.

5.5 Advertising and Conversion Cookies

Advertising and conversion cookies may be used, where applicable, to:

(a) measure whether an advertisement resulted in a Website visit;

(b) measure whether a form or booking process was completed;

(c) limit repeated advertising;

(d) understand general campaign performance;

(e) create aggregated advertising reports; or

(f) support audience or campaign management where legally permitted.

Where consent is legally required, advertising and conversion cookies will not be activated until you have provided the relevant consent.

We do not intentionally send medical records, diagnoses, symptoms, treatment information or other information revealing an individual’s health condition to advertising platforms for targeted advertising.

 We do not use information revealing a person’s health condition to create targeted-advertising audiences.

Website pages, form names, URLs, button labels or tracking events should be configured so that advertising platforms do not receive information that directly reveals a user’s diagnosis, treatment or sensitive medical enquiry.

5.6 Social-Media Cookies

Where the Website includes social-media buttons, embedded content or similar functions, the relevant social-media provider may set cookies or receive information about the user’s interaction.

A social-media platform may associate that information with the user’s account if the user is logged in to that platform.

Those platforms may process information in accordance with their own privacy and cookie policies.

Users should not post medical details or medical records in public social-media comments.

5.7 Embedded Content Cookies

Videos, maps, appointment widgets, payment functions or other embedded third-party content may use cookies.

The relevant third party may receive information when the embedded content is loaded or used.

Where required, non-essential embedded content should remain blocked until the user provides the relevant cookie consent.

6. Session and Persistent Cookies

Session cookies generally expire when you close your browser.

Persistent cookies remain on your device for a specified period or until they are deleted.

The duration of a cookie depends on its purpose and configuration.

MediGoMY will seek to configure cookies so that they do not remain active longer than reasonably necessary for their stated purpose.

The specific duration of each active cookie should be shown in the cookie preference centre or cookie details table where technically available.

7. Information Collected Through Cookies

Depending on the cookies used and the user’s choices, cookie-related information may include:

(a) IP address;

(b) cookie identifier;

(c) device identifier;

(d) browser type;

(e) operating system;

(f) approximate location;

(g) language preference;

(h) referral source;

(i) pages viewed;

(j) date and time of access;

(k) Website interactions;

(l) advertising-campaign information;

(m) conversion events;

(n) security and error logs; and

(o) consent preferences.

We do not design cookies to store complete medical reports, medical images, passport copies or full payment-card details.

8. Sensitive Medical Information

The Website may allow users to enquire about medical coordination or upload medical records.

Cookie and analytics tools must not be intentionally configured to capture:

(a) medical-record contents;

(b) information typed into free-text medical fields;

(c) uploaded medical documents;

(d) diagnostic information;

(e) medication information;

(f) passport or identification documents;

(g) full payment-card information; or

(h) other sensitive information that is unnecessary for analytics or advertising.

MediGoMY will seek to avoid using sensitive medical information for analytics or advertising purposes.

If a third-party technology is found to be collecting sensitive information beyond its authorised purpose, MediGoMY may disable or reconfigure the relevant technology and take other appropriate steps.

9. Legal Basis and Consent

Strictly necessary cookies may be used where required to operate the Website, protect security or deliver a function requested by the user.

For non-essential cookies, such as optional analytics, functional or advertising cookies, MediGoMY will obtain consent where required by applicable law.

Consent must be:

(a) informed;

(b) specific;

(c) freely given where required;

(d) recorded where appropriate;

(e) capable of being withdrawn; and

(f) obtained before the relevant non-essential cookies are activated where prior consent is legally required.

Rejecting non-essential cookies will not prevent access to the Website’s core content, although certain optional functions may be unavailable.

10. Cookie Banner and Preference Centre

When you first visit the Website, you may be shown a cookie banner or consent-management interface.

Depending on applicable requirements, you may be able to:

(a) accept all optional cookies;

(b) reject all optional cookies;

(c) select individual cookie categories;

(d) review the specific cookies used;

(e) change your preferences; and

(f) withdraw consent.

The “Accept” and “Reject” choices should be presented in a reasonably clear and accessible manner.

Optional cookie categories must not be pre-selected where affirmative consent is required.

Your consent choice may itself be stored in a strictly necessary cookie so that the Website can remember your preference.

11. Changing or Withdrawing Your Consent

You may change or withdraw your cookie consent at any time through the “Cookie Settings”, “Manage Cookies” or similar link made available on the Website.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

After consent is withdrawn:

(a) the Website should stop setting the relevant optional cookies;

(b) existing cookies may need to be deleted through the consent tool or browser settings;

(c) third-party providers may retain information already collected in accordance with their applicable retention obligations; and

(d) a limited consent record may be retained to demonstrate and respect your choice.

12. Browser and Device Controls

Most browsers allow you to:

(a) view cookies;

(b) delete cookies;

(c) block all cookies;

(d) block third-party cookies;

(e) receive a warning before a cookie is set; or

(f) configure different settings for different websites.

Browser instructions vary between providers and versions.

Blocking all cookies may prevent parts of the Website from operating correctly, including security, forms, session management and consent-preference functions.

Browser settings do not necessarily replace the Website’s consent mechanism where affirmative consent is legally required.

13. Global Privacy Control and Similar Signals

Where required by applicable law and technically supported, MediGoMY may recognise Global Privacy Control or another legally valid browser-based privacy signal.

A “Do Not Track” browser setting is not interpreted consistently across all websites and providers.

Where a signal is not technically supported or legally determinative, users should manage their choices through the Website’s cookie preference centre.

14. Third-Party Providers

Third-party providers may collect or receive information through technologies used on the Website.

Depending on the actual technology and arrangement, a third-party provider may act as:

(a) a data processor acting on MediGoMY’s instructions;

(b) an independent data controller for its own processing; or

(c) a joint controller where the applicable legal requirements are met.

MediGoMY does not control all independent processing carried out by third parties.

Users should review the privacy and cookie policies of the relevant provider.

The use of a third-party provider does not authorise that provider to use medical records or sensitive medical information for its own targeted-advertising purposes.

15. International Data Transfers

Some cookie, analytics, hosting, advertising or technology providers may process information outside Malaysia.

Where cookie-related personal data is transferred outside Malaysia, MediGoMY will seek to comply with applicable cross-border transfer requirements.

Depending on the circumstances, safeguards may include:

(a) user consent;

(b) contractual protections;

(c) recipient due diligence;

(d) transfer-risk assessments;

(e) security measures;

(f) data minimisation; and

(g) other mechanisms permitted by applicable law.

Additional information concerning international transfers is available in the Privacy Policy.

16. Data Retention

Cookie-related information will be retained only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, security, accounting or dispute-resolution requirements.

Retention periods may differ according to:

(a) the cookie category;

(b) the provider;

(c) the purpose of the cookie;

(d) security requirements;

(e) consent-record requirements; and

(f) the provider’s independent retention obligations.

Cookie durations and retention settings should be reviewed periodically.

When information is no longer reasonably required, MediGoMY will seek to delete, anonymise or allow it to expire, subject to backup and legal-retention requirements.

17. Security

MediGoMY will take reasonable technical and organisational measures appropriate to the nature of the cookie-related information it handles.

However, no internet transmission, browser technology, Website or electronic-storage system can be guaranteed to be completely secure.

Users are responsible for maintaining the security of their own browser, device, network and account.

18. Children

The Website is principally intended for adults and is not designed to encourage children to use it independently.

MediGoMY does not knowingly use cookie information to create advertising profiles of children.

Where MediGoMY becomes aware that non-essential cookie information has been collected from a child without the required authority or consent, it will take reasonable steps to address the issue in accordance with applicable law.

19. No Sale of Personal Data

MediGoMY does not sell personal data collected through cookies.

MediGoMY does not sell health or medical information.

MediGoMY does not disclose health or medical information to advertising providers for their own targeted-advertising purposes.

The use of advertising or analytics providers for limited measurement services does not authorise those providers to use sensitive medical information for unrelated purposes.

20. Website Operations Partners

Website Operations Partners may assist with installing, configuring, testing, maintaining or removing cookie and consent-management technologies.

A Website Operations Partner:

(a) acts only within its authorised scope;

(b) does not determine MediGoMY’s medical-service purposes merely because it performs Website work;

(c) is not responsible for the independent processing of an advertising, analytics or social-media provider that it does not control;

(d) may rely on information and instructions supplied by MediGoMY unless it actually knows that the relevant instruction is unlawful; and

(e) remains responsible for legal obligations directly applicable to its own conduct.

No Website Operations Partner becomes a healthcare provider merely because it configures Website analytics, advertising, consent or technical systems.

21. Cookie Audit and Updates

The cookies used by a Website may change when Website functions, providers or configurations change.

MediGoMY should conduct periodic cookie scans or audits to identify:

(a) active cookies;

(b) cookie providers;

(c) cookie purposes;

(d) cookie durations;

(e) whether a cookie is essential or optional;

(f) whether prior consent is required; and

(g) whether the cookie may receive sensitive information.

Where a new non-essential technology is introduced, the cookie preference centre and this Policy should be updated before or when the technology is activated.

22. Changes to This Cookie Policy

MediGoMY may update this Cookie Policy from time to time to reflect:

(a) changes to the Website;

(b) changes to cookie technologies;

(c) changes to service providers;

(d) legal or regulatory developments; or

(e) changes to MediGoMY’s practices.

The updated version will be published on the Website with its revised “Last updated” date.

Where a change materially affects consent choices, MediGoMY may display the cookie banner again or request renewed consent where required.

23. Contact Details

If you have questions about this Cookie Policy or the Website’s use of cookies, please contact:

AGH GROUP HOLDINGS SDN. BHD.
Trading as MediGoMY

Website: medigomy.com
Email: Asiagenesishealth@gmail.com

24. Cookie Details

The specific cookies currently active on the Website should be displayed in the cookie preference centre or in a regularly updated cookie table containing:

(a) cookie name;

(b) provider;

(c) category;

(d) purpose;

(e) first-party or third-party status;

(f) duration; and

(g) whether the cookie is enabled only after consent.

If the cookie preference centre and this Policy contain different technical details, the most recent verified cookie scan and preference-centre record should be used to correct the discrepancy.

Need Help?