This Privacy Policy outlines the practices of AJobThing Sdn. Bhd. (acting as data controller, operating as “Maukerja”, referred to as “we”, “us”, or “our”) in the collection, use, maintenance, and disclosure of personal data collected from users (each, a “User”) of the website https://www.maukerja.my (“Site”). This policy is issued in compliance with the Personal Data Protection Act 2010 (Act 709) as amended by the Personal Data Protection (Amendment) Act 2024 (Act A1727). This policy applies to the Site and all products and services offered by Maukerja.

Maukerja is strictly for individuals aged 18 years and above. By using Maukerja, you confirm that you are 18 years of age or older. We do not knowingly collect personal data from persons under 18. If we become aware that a user is under 18, we will immediately terminate their account and delete their personal data without delay, in accordance with s.4 of the Personal Data Protection Act 2010 (Act 709).

Data Protection Officer (DPO)

In compliance with s.12A of the Personal Data Protection Act 2010 (Act 709) as amended by Act A1727 (2024), AJobThing Sdn. Bhd. has appointed a Data Protection Officer (DPO) responsible for overseeing our compliance with the Act. The appointment of our DPO has been notified to the Personal Data Protection Commissioner in accordance with the Act. You may contact our DPO for data protection queries, to exercise your rights, or to raise a complaint.

Your Privacy Rights

Maukerja collects information about you and uses this information to help you connect with employers and other job seekers and to provide other services to you. This policy describes how your information is collected and used and your choices with respect to your personal information.

Under the Personal Data Protection Act 2010 (Act 709) as amended by Act A1727 (2024), you have the following rights:

Information We Collect

We collect the personal information you choose to provide us, including name, email address, date of birth, telephone number, gender, profile photo, resume content, cover letters, job application responses, and any other information about the User when the User signs up to use our Services or website, and when the User uses the Services or website, as well as information related to how the User uses our Services or website; and aggregate data on content the User engages with.

We also collect non-personal information about you, which includes demographic information and how you use and interact with Maukerja. We may also acquire information about you from third parties to further personalise and enhance your experience, including from professional networking platforms (e.g., LinkedIn, Facebook, Google) where you actively use our social login feature or expressly connect your account to Maukerja, and from background verification service providers, engaged solely at an employer's request and only with your prior explicit consent, which will be obtained separately before any check is initiated.

Mandatory vs. Optional Information

• Mandatory (required to create an account): Full name, email address, and password. Failure to provide mandatory information will prevent account creation or access to core platform features.
• Optional (not required for platform access): Date of birth, telephone number, gender, profile photo, and resume details. Providing optional information helps us match you with more relevant job opportunities but is not required.

Where we collect your personal data from third-party sources, we will inform you of the source at or before the time of first use of that data, where it is practicable to do so.

Sensitive Personal Data

We treat the following categories as sensitive personal data requiring explicit consent and heightened protection under the Personal Data Protection Act 2010 (Act 709) as amended by Act A1727 (2024): physical or mental health information, biometric data (e.g., facial recognition data, fingerprint data), information relating to race or ethnic origin, religious beliefs, and criminal records. We do not currently collect biometric data. Should this change, we will seek your explicit consent and update this Policy accordingly before any such collection begins.

Information Sharing

With your separate and specific consent, we may share your personal data with third-party organisations to facilitate recruitment activities. Before sharing your profile or contact details with any third party beyond employers you directly apply to, we will request your explicit consent. You may grant or withdraw consent for third-party data sharing at any time through your Privacy Settings or by contacting our DPO at [email protected].

What Information May Be Shared:

• Contact details (e.g., phone number, email address).
• Application details (e.g., resume, cover letter, and supporting documents).
• Job-specific qualifications and responses.

Your information will be shared only when necessary to facilitate recruitment processes, enhance hiring efficiency, or ensure a comprehensive evaluation of your application.

Scope of this Policy

This policy applies to information we collect on sites and applications owned or controlled by Ricebowl or its affiliated companies (“Ricebowl”).

This policy does not apply to third-party websites, applications, or services that may be linked from our platform. We encourage you to review the privacy policies of those third parties.

How We Use Collected Information

We process your personal data only for the specific, explicit purposes set out below, in accordance with section 7(1)(b) of the Personal Data Protection Act 2010:

1. Account creation and management — to register, authenticate, and maintain your Maukerja account.
2. Job matching — to match your profile, qualifications, and preferences with relevant job opportunities on the Platform.
3. Application processing — to share your profile and resume with employers you directly apply to, and to facilitate communication between you and prospective employers.
4. Platform communications — to send you service-related messages such as application status updates, platform notifications, and important security alerts.
5. Analytics and platform improvement — to analyse aggregated usage data and improve the performance, features, and user experience of the Platform.
6. Fraud detection and security — to detect, investigate, and prevent fraudulent activity, abuse, and other security incidents on the Platform.
7. Legal compliance — to comply with applicable Malaysian laws, regulatory obligations, court orders, or lawful requests from government authorities.
8. Marketing and third-party sharing — only where you have given separate, explicit consent: (a) to send you personalised job alerts, career tips, and promotional communications via email, SMS, or in-app notification; and (b) to share your profile with selected third-party partners (e.g. background screening or skills assessment providers) to improve your employment prospects. You may withdraw either consent at any time in Settings → Notifications or by contacting us at [email protected].

Information you share in public areas of Ricebowl may be accessed, used, and stored by others around the world. We strive to provide a safe, secure environment by attempting to limit access to our database to legitimate users, but we cannot guarantee that unauthorized parties will not gain access. We also cannot control how authorized users store or transfer information you give to us, so you should not post sensitive information to Ricebowl.

Automated Decision-Making and Profiling

Maukerja uses automated systems and algorithms to match job seekers with relevant job opportunities, rank candidate profiles for employers, and personalise job recommendations on the Platform. These automated processes use data such as your skills, experience, job preferences, location, and platform activity to generate relevance scores and rankings.

These automated processes may affect which job listings you see and how prominently your profile appears to employers. They do not constitute fully automated decisions that produce legal or similarly significant effects without human involvement — all final hiring decisions are made by employers, not by Maukerja's systems.

You have the right to request a human review of any automated output that you believe has significantly affected your experience on the Platform. To make such a request, contact us at [email protected] with the subject line: “Automated Processing Review Request.”

International Data Transfers

Your personal data may be transferred to, processed in, or stored in countries outside Malaysia where our servers, service providers, and business partners are located. Where we transfer personal data outside Malaysia, we ensure adequate protection is in place as required by s.129 of the Personal Data Protection Act 2010 (Act 709 as amended). The specific safeguards we apply per destination are as follows:

We do not transfer your personal data to countries with inadequate data protection without first implementing appropriate safeguards. If you have questions about our international transfer mechanisms, contact us at [email protected].

How We Store Your Information

We store your information to make your interaction with Ricebowl more efficient, practical, and relevant. You may review, update, or delete the personal information you share with us at any time by accessing your account. When you delete your personal information, we will retain logs and non-personal information about you along with an archival copy of your information, which is not accessible by you or third parties on the Internet. If your personal information was previously accessed by others using Ricebowl, we are unable to delete the information from their systems. You may turn off cookies. This will adversely affect your use of Ricebowl.

Retention Schedule

We retain your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law:

Account Deletion

When you submit a deletion request, we will process it within 30 days. Your profile and personal data will be removed from the platform and deleted or anonymised within 90 days. We will retain an anonymised internal audit record for legal compliance and dispute resolution only — this record will not contain directly identifiable personal data and will be securely destroyed after a maximum of 7 years.

We will notify all registered employers and third-party processors who have received your data to delete it in accordance with their legal obligations under the PDPA. We cannot guarantee the deletion of data by employers who received it pursuant to your direct job applications, as those employers are independent data controllers. You may contact those employers directly to exercise your deletion rights, and we will provide you with their contact details upon request.

Data Accuracy and Integrity

We take reasonable steps to ensure that the personal data we hold is accurate, complete, and up-to-date. You are responsible for ensuring that the information you provide to us is accurate. You may update your personal data at any time through your account settings or by contacting us at [email protected].

Security of Your Personal Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and penetration testing
• Employee training on data protection and security
• Incident response and data breach management procedures
• Physical security measures for data centres and offices

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Breach Notification

In the event of a personal data breach that is likely to cause significant harm to affected individuals, we will notify the Personal Data Protection Commissioner and affected individuals as required under the PDPA.

If you believe your Ricebowl account has been compromised, please contact us immediately at [email protected].

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us:

• Essential cookies — required for the platform to function properly (e.g. session management, authentication).
• Analytics cookies — help us understand how users interact with our platform to improve our services.
• Preference cookies — remember your settings and preferences for a personalised experience.
• Third-party cookies — placed by our partners for analytics, advertising, and social media integration.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our platform.

Third party websites

Users may find advertising or other content on our Site that link to the sites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. We do not control the content or links that appear on these sites and are not responsible for the practices employed by websites linked to or from our Site. In addition, these sites or services, including their content and links, may be constantly changing. These sites and services may have their own privacy policies and customer service policies. Browsing and interaction on any other website, including websites which have a link to our Site, is subject to that website’s own terms and policies.

Changes to this privacy policy

Ricebowl has the discretion to update this privacy policy from time to time. We distinguish between two types of changes:

Material changes: We will notify you via email and/or a prominent notice on our platform at least 30 days before the changes take effect.

Non-material changes: We will update the "Last Updated" date at the top of this policy. We encourage you to review this page periodically.

Last Updated: April 2026. You can view previous versions of this policy by contacting us at [email protected].

Exercising Your Data Protection Rights

To exercise any of your rights under the Personal Data Protection Act 2010 (Act 709), follow the steps below:

1. Submit your request

   Email our DPO at [email protected] with subject line: “Data Subject Request — [Access / Correction / Withdrawal / Portability / Marketing Opt-Out]”

2. Include in your email

   Your full name, registered email address on Ricebowl, a description of the request, and any supporting documents for identity verification.

3. We respond within 21 days

   We will acknowledge your request within 7 days and provide a substantive response within 21 days from the date of receipt. If we require additional time, we will inform you.

4. Data Portability (s.43A)

   For data portability requests, we will provide your data in a structured, commonly used, and machine-readable format (e.g. CSV or JSON) within 21 days.

5. Fee

   We may charge a reasonable fee for access requests as permitted under the PDPA. We will inform you of any applicable fees before processing your request.

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner.

Contacting Us

If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this site, please contact us at: