PDPA Notice
Effective date: 21 July 2026
This Personal Data Protection Notice ("PDPA Notice") is issued by Krute in accordance with the Personal Data Protection Act 2010 (Act 709) of Malaysia.
Krute is an AI-powered Workforce Intelligence Platform operated as a software provider under collaboration with Agensi Pekerjaan Cosmosworks Sdn Bhd licensed Jabatan Tenaga Kerja (JTK).
By registering an account, submitting your personal information, or using www.krute.com.my, you acknowledge that you have read and understood this PDPA Notice and consent to the collection, processing, storage, use, and disclosure of your personal data as described below.
1. Collection of Personal Data
Krute may collect personal data directly from you when you:
- Register an account
- Upload your CV or resume
- Submit job applications
- Complete your profile
- Apply for vacancies
- Contact our support team
- Register as an employer
- Participate in assessments or verification processes
We may also receive information from:
- Employers
- Recruitment partners
- Publicly available sources
- Professional references (where authorised)
- Government authorities where legally permitted
2. Categories of Personal Data
Depending on your use of the platform, we may collect:
Identity Information
- Full Name
- NRIC or Passport Number (where required)
- Nationality
- Date of Birth
- Gender
Contact Information
- Email Address
- Mobile Number
- Residential Address
Professional Information
- Employment History
- CV / Resume
- Education
- Qualifications
- Certifications
- Skills
- Languages
- Portfolio
- Professional Licences
Employment Preferences
- Preferred Position
- Industry
- Salary Expectations
- Availability
- Preferred Work Location
- Employment Type
Employer Information
- Company Name
- Company Registration Number
- Business Address
- Contact Details
- Authorised Representative Information
Technical Information
- IP Address
- Browser Information
- Device Information
- Login Records
- Cookies
- Platform Activity
3. Purpose of Processing
Your personal data is processed for the following purposes:
- AI-powered talent matching
- Recruitment and hiring activities
- Employer verification
- Candidate verification
- Workforce intelligence analysis
- Platform administration
- User authentication
- Customer support
- Fraud prevention
- Security monitoring
- Legal and regulatory compliance
- Platform improvement
- Statistical reporting
4. AI-Powered Workforce Intelligence
Krute uses artificial intelligence to improve recruitment efficiency. Our AI may analyse:
- Skills
- Qualifications
- Experience
- Certifications
- Industry background
- Availability
- Job requirements
These analyses are intended to assist with candidate matching and recruitment recommendations. Final hiring decisions remain the responsibility of employers.
5. Disclosure of Personal Data
Krute may disclose your personal data only where necessary to:
- Verified employers
- Recruitment partners authorised by you
- Cloud service providers
- AI technology providers
- Payment processors
- Identity verification providers
- Government authorities
- Regulatory agencies
- Law enforcement agencies where required by law
Candidate contact information remains hidden until an employer purchases access to a candidate profile through the Krute platform.
Krute does not sell your personal data to third parties.
6. Cross-Border Data Transfers
Some of Krute's technology partners, cloud providers, or AI service providers may process data outside Malaysia.
Where cross-border transfers occur, Krute will take reasonable steps to ensure that your personal data receives protection comparable to that required under the Personal Data Protection Act 2010.
7. Data Security
Krute implements appropriate technical and organisational measures to protect personal data, including:
- Encrypted communications
- Secure cloud infrastructure
- Access controls
- Authentication mechanisms
- Continuous monitoring
- Regular security updates
- Data backup procedures
While we strive to maintain the highest level of security, no internet transmission or electronic storage system can be guaranteed to be completely secure.
8. Data Retention
Personal data is retained only for as long as necessary to:
- Provide our services
- Meet contractual obligations
- Comply with legal requirements
- Resolve disputes
- Protect Krute's legal interests
When personal data is no longer required, it will be securely deleted or anonymised where appropriate.
9. Your Rights Under the PDPA
Subject to the Personal Data Protection Act 2010, you may request to:
- Access your personal data
- Correct inaccurate or incomplete information
- Update your profile
- Withdraw consent (where legally applicable)
- Request deletion of your account
- Limit the processing of certain personal data
Certain requests may be subject to legal or regulatory limitations.
10. Cookies and Analytics
Krute uses cookies and similar technologies to:
- Maintain user sessions
- Improve website functionality
- Analyse website traffic
- Enhance user experience
- Support platform security
Users may disable cookies through their browser settings, although some features of the platform may not function properly.
11. Third-Party Services
Krute may integrate with trusted third-party providers, including:
- Cloud hosting services
- Artificial intelligence providers
- Payment gateways
- Email services
- Analytics platforms
- Identity verification services
These providers process personal data in accordance with their own privacy practices and contractual obligations.
12. Foreign Worker Recruitment
Where Krute facilitates recruitment involving foreign workers, employers remain solely responsible for:
- Work permit applications
- Immigration approvals
- Employment pass compliance
- Labour law compliance
Krute processes relevant personal data only for recruitment purposes and does not guarantee work permit approvals.
13. Changes to This Notice
Krute may update this PDPA Notice from time to time to reflect changes in legal requirements or our business operations.
The latest version will always be published on www.krute.com.my.
Your continued use of the platform constitutes acceptance of the updated notice.
14. Contact Us
If you have any questions regarding this PDPA Notice or wish to exercise your rights under the Personal Data Protection Act 2010, please contact us:
Krute - Workforce Intelligence for Industrial Enterprises
Website: https://www.krute.com.my
Email: jobs@krute.com.my
