Personal Data Protection Notice
Issued under section 7 of Malaysia's Personal Data Protection Act 2010 (PDPA 2010).
1. Data user
This Notice is issued by Agensi Pekerjaan Affluent RF Sdn. Bhd. (SSM No. 1099483-W) — trading as KerjaSpot — a JTKSM-licensed private employment agency (Lesen No. JTKSM 545, Category B) with its registered address at No. 42A, Jalan Gaya 1, Taman Gaya, 81800 Ulu Tiram, Johor, Malaysia. We are the "data user" of any personal data you provide to us.
2. Personal data we collect
- Identifying details: name, WhatsApp number, email, location in Malaysia.
- Employment-related details: skills, work preferences, hours available, prior experience.
- Communications you exchange with us via WhatsApp, email, or phone.
- Technical data such as IP address and browser type from your visit to our site.
3. Purposes of processing
- To assess your suitability and match you with verified employer opportunities.
- To contact you about matches, follow-ups, and service updates.
- To verify identity, prevent fraud, and comply with our JTKSM obligations.
- To improve our service and produce aggregated, non-identifying analytics.
4. Disclosure of personal data
We disclose your personal data only to: (a) verified employer partners you have consented to be matched with; (b) service providers acting on our instructions under written confidentiality terms; and (c) regulators, courts, or law enforcement where required by Malaysian law. We do not sell or rent your data.
5. Source of your personal data
We collect personal data directly from you through our website forms, WhatsApp conversations, and other communications. We may also receive data from employer partners (e.g., feedback on your match) and from publicly available sources where appropriate.
6. Your rights under PDPA 2010
- Access: request a copy of the personal data we hold about you.
- Correction: ask us to correct inaccurate or incomplete data.
- Withdrawal of consent: withdraw consent to further processing (note: this may end our ability to match you).
- Limit processing: ask us to restrict how we use your data for direct marketing.
- Lodge a complaint: with us first, and then with the Personal Data Protection Department (JPDP) if unresolved.
7. Consequences of not providing data
If you choose not to provide the personal data we request, we may be unable to match you with opportunities or provide the service you have requested.
8. Security and retention
We use TLS encryption in transit, access controls, and reasonable technical and organisational measures to protect your data. We retain personal data only for as long as needed for the purposes set out above, plus any retention required by law.
9. How to contact us
To exercise any of your PDPA rights, or to ask a question about this Notice:
- Email: inquiry@kerjaspot.world
- Subject: "PDPA Request"
We aim to respond within 21 days as required by the PDPA.