Privacy Policy – Jobs Kreate

Last updated: 27 May 2026

Agensi Pekerjaan Jobs Kreate Sdn. Bhd. (Company No. 201901010535 (1319863-H), Recruitment Licence No. JTKSM 867B) (“Jobs Kreate”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy and Personal Data Protection Notice explains how we collect, use, process, disclose, transfer, store and protect personal data in connection with our recruitment, placement, employer-matching, candidate support, website and related services.

This Notice is intended to support compliance with the Personal Data Protection Act 2010 of Malaysia, as amended from time to time (“PDPA”).

By submitting your personal data to us, applying for a vacancy, communicating with us, using our website, or engaging our recruitment services, you acknowledge that you have read and understood this Notice.

Where required by law, we will seek your consent, including express consent for the processing of sensitive personal data.

1. Who this Notice applies to

This Notice applies to:

candidates and job applicants;
individuals who submit enquiries, resumes, documents or application forms;
placed candidates and former candidates;
referees, emergency contacts and representatives provided by candidates;
employers, clients, hiring partners, principals and business contacts;
suppliers, service providers and professional advisers; and
visitors to our website and digital platforms.

2. Personal data we collect

Depending on your relationship with us, we may collect and process the following types of personal data.

For candidates and job applicants, this may include:

full name;
contact details, including phone number, WhatsApp number, email address and address;
nationality, date of birth, gender and marital status;
identity card, passport, work permit, visa or travel document details;
photograph;
resume, CV, employment history, education history, skills, qualifications and certifications;
language ability, availability, salary expectations and job preferences;
references, referee details and background information;
interview notes, assessment results and application status;
documents required for recruitment, onboarding, employment, visa, travel, deployment or employer submission;
emergency contact details; and
any other information you provide to us during the recruitment process.

Where relevant to a specific role, employer requirement, overseas placement, cruise placement, visa process, deployment process, legal requirement or regulatory requirement, we may also collect sensitive or higher-risk information, such as:

medical, health or fitness-to-work information;
vaccination records or health declarations;
background screening information;
disciplinary, criminal record or conduct-related information, where lawfully required or relevant;
bank account or payment-related details for legitimate employment, reimbursement, payroll or administrative purposes; and
other information necessary for recruitment, placement, onboarding, travel, visa, employment or deployment.

For employers, clients, hiring partners and business contacts, we may collect:

name;
job title;
company name;
business contact details;
hiring requirements;
communications with us;
billing, administrative or contractual information; and
other information relevant to our business relationship.

For website visitors, we may collect:

IP address;
browser type;
device information;
pages viewed;
referring pages;
approximate location;
cookie identifiers;
website usage data; and
analytics information.

3. How we collect personal data

We may collect personal data directly from you when you:

apply for a job;
submit a resume, CV or application form;
upload, email, WhatsApp or provide documents to us;
contact us by phone, email, WhatsApp, website form, social media or other communication channels;
attend an interview, screening, briefing or assessment;
complete recruitment, onboarding, medical, visa, travel or deployment documents;
visit or interact with our website; or
otherwise engage our services.

We may also collect personal data from third parties, including:

referees and previous employers;
employers, clients, hiring partners, cruise operators, overseas principals and authorised agents;
job portals, recruitment platforms and publicly available professional profiles;
medical clinics, training providers, background screening providers and assessment providers;
visa, immigration, travel, logistics or deployment-related parties;
government bodies, regulators, labour authorities, immigration authorities, embassies or other competent authorities; and
service providers who support our website, systems, communications and operations.

If you provide personal data about another person, such as a referee, emergency contact or representative, you confirm that you have obtained their consent or have the right to provide their information to us.

4. Purposes for processing personal data

We may collect, use and process personal data for the following purposes:

to assess your suitability for vacancies;
to match you with local, overseas, cruise, hospitality, maritime, food and beverage, retail or other employment opportunities;
to communicate with you about applications, vacancies, interviews, documentation, offers, onboarding and placement progress;
to submit your profile, resume, CV, documents or relevant information to prospective employers, clients, cruise operators, overseas principals, authorised agents, hiring partners or their representatives;
to coordinate interviews, assessments, background checks, reference checks, medical checks, training, onboarding, visa, permit, travel, employment or deployment processes;
to verify the information and documents you provide to us;
to manage candidate records and application history;
to comply with legal, licensing, regulatory, immigration, employment, tax, audit and record-keeping requirements;
to manage relationships with employers, clients, suppliers, service providers and business partners;
to respond to enquiries, requests, complaints and data protection requests;
to prevent fraud, job scams, impersonation, misuse of our services or unlawful activity;
to operate, secure, maintain and improve our website, systems, communications and services;
to conduct internal administration, reporting, staff training, business planning and service improvement;
to send relevant vacancy updates, recruitment communications or service-related updates, where permitted by law or with your consent where required; and
for any other purpose that is reasonably related to the above or for which you have provided consent.

We do not sell your personal data.

5. Sensitive personal data

Some recruitment, overseas placement, cruise placement, visa, medical, onboarding or deployment processes may require us to process sensitive personal data.

Sensitive personal data may include information relating to your health, medical condition, fitness-to-work status, vaccination status, background screening, conduct, or other information treated as sensitive under applicable law.

We will only process sensitive personal data where:

you have given express consent;
it is necessary for the recruitment, employment, medical, visa, travel, deployment or onboarding process;
it is required or permitted by law;
it is necessary to protect your vital interests or the vital interests of another person;
it is necessary for legal claims or compliance purposes; or
another lawful basis applies under the PDPA or applicable law.

You may refuse to provide sensitive personal data. However, if the information is required for a specific vacancy, employer requirement, medical clearance, visa process, cruise placement, overseas deployment, employment requirement or legal obligation, we may not be able to proceed with your application or placement.

6. Disclosure of personal data

We may disclose personal data where necessary or appropriate for the purposes described in this Notice.

This may include disclosure to:

prospective employers, clients and hiring partners;
cruise operators, hotel groups, overseas principals, authorised recruitment partners and their representatives;
manning agents, visa agents, immigration support providers, travel providers and deployment partners;
government departments, regulators, labour authorities, immigration authorities, embassies, port authorities, law enforcement bodies and other competent authorities;
medical clinics, healthcare providers, training providers, certification bodies, testing providers, background screening providers and reference checkers;
payroll, banking, finance, insurance or reimbursement-related parties, where relevant;
website hosting providers, IT vendors, cloud storage providers, CRM providers, email platforms, WhatsApp or business messaging tools, analytics providers and other technology service providers;
professional advisers, auditors, lawyers, consultants and insurers;
our employees, officers, authorised representatives and internal teams who need access for legitimate business purposes; and
any other party where required or permitted by law, regulation, court order, contractual obligation or lawful request.

We take reasonable steps to ensure that third parties who process personal data for us handle it appropriately, securely and only for authorised purposes.

7. Overseas and cross-border transfers

Jobs Kreate recruits for local and overseas roles, including cruise, hospitality, maritime and other international opportunities. As a result, your personal data may be transferred to, stored in, accessed from or processed outside Malaysia.

This may include transfers to:

overseas employers;
cruise operators;
hotel groups;
overseas principals;
authorised recruitment or manning agents;
visa, immigration or embassy-related parties;
medical, training or certification providers;
travel and deployment partners;
cloud, hosting, email, analytics, communication or technology service providers; and
authorities or organisations involved in recruitment, onboarding, employment, travel, visa or deployment processes.

The purpose of such transfers may include employer submission, interview coordination, job matching, reference checking, background screening, medical clearance, visa processing, travel arrangements, onboarding, deployment, employment administration, legal compliance and record-keeping.

Where we rely on consent for cross-border transfer, we will seek and record your consent where required. Where applicable, we may also rely on other lawful grounds, such as contract necessity, legal obligation, compliance requirements, legitimate recruitment or operational purposes, or other grounds permitted by law.

We will take reasonable steps to ensure that cross-border transfers are carried out with appropriate safeguards where practicable.

8. Mandatory and optional personal data

Some personal data is necessary for us to provide recruitment, placement, documentation, employer submission, visa, medical, onboarding or deployment services.

If you do not provide information that is necessary for a particular process, we may be unable to:

assess your application;
submit your profile to an employer or hiring partner;
arrange interviews or assessments;
proceed with visa, travel, onboarding or deployment arrangements;
verify your documents or qualifications;
comply with legal or regulatory requirements; or
continue assisting you with a particular opportunity.

Optional information may help us improve job matching or communication, but you may choose not to provide it unless it becomes necessary for a specific role or process.

9. Accuracy and data integrity

You are responsible for ensuring that the personal data you provide to us is accurate, complete, not misleading and up to date.

Please inform us promptly if your contact details, passport details, documents, qualifications, employment status, medical or fitness status, availability or other relevant information changes.

We may take reasonable steps to verify personal data where necessary for recruitment, compliance, employer submission, visa, travel, onboarding or deployment purposes.

10. Retention of personal data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including recruitment, placement, employer submission, legal, licensing, regulatory, audit, tax, immigration, dispute-resolution and business record purposes.

Our retention approach may include the following:

enquiry and website contact records may be retained for as long as necessary to respond to the enquiry and maintain business records;
candidate profiles, resumes and application records may be retained so that we can consider you for current and future vacancies, unless you request deletion and we are not legally required to retain them;
records relating to placed candidates may be retained for legal, licensing, employer, immigration, audit, tax, contractual and dispute-resolution purposes;
medical, fitness-to-work, visa, passport, travel and deployment-related documents may be retained only for as long as necessary for the relevant placement, compliance, legal or record-keeping purpose;
financial, bank, payroll or reimbursement-related records may be retained for accounting, tax, audit, legal or compliance purposes;
marketing or vacancy-alert records may be retained until you unsubscribe, withdraw consent or request that we stop sending such communications; and
website analytics data may be retained in accordance with our analytics settings and operational requirements.

When personal data is no longer required, we will take reasonable steps to delete, anonymise, archive or securely dispose of it in accordance with our internal procedures and applicable requirements.

11. Security of personal data

We take reasonable physical, technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unauthorised disclosure, alteration or destruction.

These measures may include, where appropriate:

restricted access to candidate files and sensitive documents;
password protection and access controls;
secure document handling and storage;
confidentiality obligations for staff and authorised representatives;
controlled sharing of documents with employers, agents and service providers;
secure communication and file-transfer practices where practicable;
internal data protection awareness;
vendor and service provider controls;
system monitoring, backup and security measures; and
escalation procedures for suspected data incidents.

However, no method of transmission, communication or storage is completely secure. While we take data protection seriously, we cannot guarantee absolute security.

12. Cookies, Google Analytics and website tracking

Our website may use cookies, Google Tag Manager, Google Analytics and similar technologies to operate the website, understand visitor behaviour, measure website performance, improve our content, support security and improve our services.

These technologies may collect information such as:

IP address;
browser type;
device type;
pages viewed;
time spent on the website;
referring pages;
approximate location;
cookie identifiers; and
website interaction data.

You can control or disable cookies through your browser settings. Some website features may not function properly if cookies are disabled.

We do not knowingly send personally identifiable candidate information such as names, identity card numbers, passport numbers, phone numbers, email addresses, resumes or medical information to Google Analytics.

If we introduce additional advertising, remarketing, social media pixels or tracking technologies in the future, we may update this Notice and provide additional information or choices where appropriate.

13. Recruitment communications and marketing

We may contact you about vacancies, applications, interviews, documentation, placement progress, employer requirements, onboarding, deployment or other service-related matters.

We may also send vacancy alerts, recruitment updates, newsletters or promotional communications where permitted by law or where you have provided consent.

You may opt out of marketing or promotional communications at any time by contacting us or using any unsubscribe method provided. However, we may still contact you about active applications, placement matters, legal requirements, documentation, safety, fraud prevention or service-related matters.

14. Your PDPA rights

Subject to the PDPA and applicable exceptions, you may have the right to:

request access to personal data we hold about you;
request correction of personal data that is inaccurate, incomplete, misleading or not up to date;
withdraw consent where processing is based on consent;
request that we limit or stop certain processing;
prevent processing that is likely to cause damage or distress, where applicable;
opt out of direct marketing communications;
request information about how your personal data has been used or disclosed; and
exercise any other rights available under applicable data protection laws.

We may need to verify your identity before processing your request. We may also ask for additional information to help us locate the relevant data or understand your request.

Please note that certain requests may be subject to legal, regulatory, contractual, operational or record-keeping limitations.

15. Complaints and data protection requests

If you have questions, concerns, requests or complaints about how we handle personal data, please contact us using the details below.

You may also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your personal data has been processed in breach of the PDPA.

16. No candidate registration or upfront placement fees

Jobs Kreate does not collect registration fees or upfront placement fees from candidates for applying for jobs through our official channels.

Please be alert to job scams, fake recruiters, impersonation attempts and unofficial payment requests.

If anyone claims to represent Jobs Kreate and asks you to transfer money, pay a personal account, buy vouchers, make unofficial payments or pay fees before an application can proceed, please verify the request with us through our official contact channels before taking any action.

17. Third-party websites and platforms

Our website, job posts and communications may contain links to third-party websites, platforms, forms, job portals, social media pages, employer websites or external services.

We are not responsible for the privacy practices, content or security of third-party websites or platforms. Please review their privacy notices before providing personal data to them.

18. Minors

Our recruitment services are intended for individuals who are legally eligible to work.

We do not knowingly collect personal data from children or underage individuals except where permitted by law and with appropriate consent where required. If you believe that a child or underage individual has provided personal data to us, please contact us so that we can take appropriate action.

19. Updates to this Notice

We may update this Notice from time to time to reflect changes in our services, recruitment processes, legal requirements, technology, website tools or business operations.

The latest version will be published on this page with the updated date. We encourage you to review this page periodically.

20. Bahasa Malaysia version

This Notice may be made available in Bahasa Malaysia. If there is any inconsistency between language versions, the version that best reflects the requirements of applicable Malaysian law shall apply, unless otherwise required by law.

21. Contact us

For privacy, PDPA, personal data access, correction, withdrawal, complaint or scam-verification requests, please contact:

Agensi Pekerjaan Jobs Kreate Sdn. Bhd.
Company No. 201901010535 (1319863-H)
Recruitment Licence No. JTKSM 867B

Level 6, Menara Darussalam
12 Jalan Pinang
50450 Kuala Lumpur
Malaysia

Email: enquiry@jobskreate.com
WhatsApp / Tel: +60 12-832 3681

Please mark privacy-related requests as: “Privacy / PDPA Request”.