krute

PDPA Notice

Effective date: 21 July 2026

This Personal Data Protection Notice ("PDPA Notice") is issued by Krute in accordance with the Personal Data Protection Act 2010 (Act 709) of Malaysia.

Krute is an AI-powered Workforce Intelligence Platform operated as a software provider under collaboration with Agensi Pekerjaan Cosmosworks Sdn Bhd licensed Jabatan Tenaga Kerja (JTK).

By registering an account, submitting your personal information, or using www.krute.com.my, you acknowledge that you have read and understood this PDPA Notice and consent to the collection, processing, storage, use, and disclosure of your personal data as described below.

1. Collection of Personal Data

Krute may collect personal data directly from you when you:

  • Register an account
  • Upload your CV or resume
  • Submit job applications
  • Complete your profile
  • Apply for vacancies
  • Contact our support team
  • Register as an employer
  • Participate in assessments or verification processes

We may also receive information from:

  • Employers
  • Recruitment partners
  • Publicly available sources
  • Professional references (where authorised)
  • Government authorities where legally permitted

2. Categories of Personal Data

Depending on your use of the platform, we may collect:

Identity Information

  • Full Name
  • NRIC or Passport Number (where required)
  • Nationality
  • Date of Birth
  • Gender

Contact Information

  • Email Address
  • Mobile Number
  • Residential Address

Professional Information

  • Employment History
  • CV / Resume
  • Education
  • Qualifications
  • Certifications
  • Skills
  • Languages
  • Portfolio
  • Professional Licences

Employment Preferences

  • Preferred Position
  • Industry
  • Salary Expectations
  • Availability
  • Preferred Work Location
  • Employment Type

Employer Information

  • Company Name
  • Company Registration Number
  • Business Address
  • Contact Details
  • Authorised Representative Information

Technical Information

  • IP Address
  • Browser Information
  • Device Information
  • Login Records
  • Cookies
  • Platform Activity

3. Purpose of Processing

Your personal data is processed for the following purposes:

  • AI-powered talent matching
  • Recruitment and hiring activities
  • Employer verification
  • Candidate verification
  • Workforce intelligence analysis
  • Platform administration
  • User authentication
  • Customer support
  • Fraud prevention
  • Security monitoring
  • Legal and regulatory compliance
  • Platform improvement
  • Statistical reporting

4. AI-Powered Workforce Intelligence

Krute uses artificial intelligence to improve recruitment efficiency. Our AI may analyse:

  • Skills
  • Qualifications
  • Experience
  • Certifications
  • Industry background
  • Availability
  • Job requirements

These analyses are intended to assist with candidate matching and recruitment recommendations. Final hiring decisions remain the responsibility of employers.

5. Disclosure of Personal Data

Krute may disclose your personal data only where necessary to:

  • Verified employers
  • Recruitment partners authorised by you
  • Cloud service providers
  • AI technology providers
  • Payment processors
  • Identity verification providers
  • Government authorities
  • Regulatory agencies
  • Law enforcement agencies where required by law

Candidate contact information remains hidden until an employer purchases access to a candidate profile through the Krute platform.

Krute does not sell your personal data to third parties.

6. Cross-Border Data Transfers

Some of Krute's technology partners, cloud providers, or AI service providers may process data outside Malaysia.

Where cross-border transfers occur, Krute will take reasonable steps to ensure that your personal data receives protection comparable to that required under the Personal Data Protection Act 2010.

7. Data Security

Krute implements appropriate technical and organisational measures to protect personal data, including:

  • Encrypted communications
  • Secure cloud infrastructure
  • Access controls
  • Authentication mechanisms
  • Continuous monitoring
  • Regular security updates
  • Data backup procedures

While we strive to maintain the highest level of security, no internet transmission or electronic storage system can be guaranteed to be completely secure.

8. Data Retention

Personal data is retained only for as long as necessary to:

  • Provide our services
  • Meet contractual obligations
  • Comply with legal requirements
  • Resolve disputes
  • Protect Krute's legal interests

When personal data is no longer required, it will be securely deleted or anonymised where appropriate.

9. Your Rights Under the PDPA

Subject to the Personal Data Protection Act 2010, you may request to:

  • Access your personal data
  • Correct inaccurate or incomplete information
  • Update your profile
  • Withdraw consent (where legally applicable)
  • Request deletion of your account
  • Limit the processing of certain personal data

Certain requests may be subject to legal or regulatory limitations.

10. Cookies and Analytics

Krute uses cookies and similar technologies to:

  • Maintain user sessions
  • Improve website functionality
  • Analyse website traffic
  • Enhance user experience
  • Support platform security

Users may disable cookies through their browser settings, although some features of the platform may not function properly.

11. Third-Party Services

Krute may integrate with trusted third-party providers, including:

  • Cloud hosting services
  • Artificial intelligence providers
  • Payment gateways
  • Email services
  • Analytics platforms
  • Identity verification services

These providers process personal data in accordance with their own privacy practices and contractual obligations.

12. Foreign Worker Recruitment

Where Krute facilitates recruitment involving foreign workers, employers remain solely responsible for:

  • Work permit applications
  • Immigration approvals
  • Employment pass compliance
  • Labour law compliance

Krute processes relevant personal data only for recruitment purposes and does not guarantee work permit approvals.

13. Changes to This Notice

Krute may update this PDPA Notice from time to time to reflect changes in legal requirements or our business operations.

The latest version will always be published on www.krute.com.my.

Your continued use of the platform constitutes acceptance of the updated notice.

14. Contact Us

If you have any questions regarding this PDPA Notice or wish to exercise your rights under the Personal Data Protection Act 2010, please contact us:

Krute - Workforce Intelligence for Industrial Enterprises

Website: https://www.krute.com.my

Email: jobs@krute.com.my