Customer story
nPro DLP

Unreleased campaigns for Malaysia's biggest brands. Locked inside the agency.

Tom Manas Outdoor has run Kuala Lumpur's billboards since 1989. Now it runs nPro DLP on its own servers to keep client data from walking out the door.

Try it: free 30-day audit Read the story

nPro DLP exfiltration overview dashboard, figures blurred

nPro DLP overview. Figures blurred, not TMO's data.

“Under the amended PDPA, a serious personal data breach has to be reported within 72 hours. nPro DLP logs every blocked or flagged transfer on our own servers, so if something happens, we already have the record of what left and where.”

Imran IsmailGroup Managing Director, Tom Manas Outdoor

1989

KL's out-of-home pioneer

dashboard for every exit channel

100%

on premises, in Malaysia

data sent to an nPro cloud

The challenge

Advertising moved online. The data moved with it.

Digital screens are the fastest-growing part of outdoor advertising, and more of TMO's business now lives in files, logins and client accounts than on billboards. One file on a USB drive or one upload to a personal cloud could break a client contract.

22%growth in Malaysian digital ad spend, Q2 2025. Social media is close to half of it.

Unreleased campaigns

Creative and launch dates, weeks before going public

Personal data

Contest entries, event sign-ups, lead forms

72h

to report a serious personal data breach under the amended PDPA

Banking and energy clients expect supplier controls under the Cyber Security Act 2024

The solution

nPro DLP, deployed on TMO's own hardware

Every event, alert and log stays in Malaysia. One dashboard shows every channel.

USB & devices

Cloud uploads

Clipboard

Screen capture

Data discovery (monitor)

Printing (monitor)

The nPro DLP policy control panel. Product screenshot with figures removed, not TMO's data.

The results

Protected, provable, sovereign

Client data stays inside the agency

Campaign files and personal data can no longer leave through USB, personal cloud, clipboard or screenshots without being stopped.

Lower PDPA risk

A record of what happened, ready if an incident ever needs reporting. What the PDPA requires.

Ready for client reviews

Controls to show banking and energy clients in security questionnaires.

Data never leaves Malaysia

nPro runs on TMO's own servers, so its monitoring data does too. No cross-border transfer to justify.

What's leaving your organisation?

Find out in 30 days. Monitor mode only, nothing blocked, nothing leaves your network.

Book a free audit

Sources

MARKETECH APAC: Malaysia's digital advertising market in the first half of 2025 (22% growth in Q2 2025, social media share near 50%; data from MSA, MAA and MDA)
Mordor Intelligence: Malaysia OOH and DOOH market (DOOH the fastest-growing segment, 10.75% CAGR to 2031)
Malaysia's amended PDPA, explained for DPOs (72-hour breach notification)
Tom Manas Outdoor (company history and clients)

Published 21 October 2026. Tom Manas Outdoor's name and logo are used with permission.