We believe firmly that MAC address does not satisfy the definition of ‘personal data’ as stated in PDPA 2010, which states that ‘personal data is any information that relates directly or indirectly to a data subject, who is identified or identifiable from that information’.
Yes, MAC address is linked to individual consumer devices, either as a consistent Wi-Fi identifier. If there was a commercially-available database of MAC addresses, it is possible that such a database could be used to identify users. We are not aware of any such MAC address look-up database in the world, much less in Malaysia. Thus, it is not possible to associate a MAC address to a personal identity. At no point is a name, phone number, or any other personal information collected.
(source: http://www.futureofprivacy.org/2014/03/27/mac-addresses-and-de-identification/)