Privacy Policy

This Privacy Policy explains how Agensi Pekerjaan Ajobthing Sdn Bhd (SSM No. 1036935K, EA Licence JTKSM 232C) (“we”, “us”, “our”), operator of the Maukerja job platform at maukerja.my and the Maukerja mobile app (“Platform”), collects, uses, discloses, and protects your personal data, in compliance with the Personal Data Protection Act 2010 (Act 709) as amended by the Personal Data Protection (Amendment) Act 2024 (Act A1727) (“PDPA”).

We also operate Ricebowl (ricebowl.my), a job platform serving the same purpose, and AJobThing (ajobthing.com), our platform for employers. Maukerja and Ricebowl are operated by the same company and share one jobseeker platform: your account, profile, and resume data are used across both brands, and employers hiring through our platform may find your profile via either brand.

The Platform is for persons aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has created an account, contact our DPO and we will delete the data.

Data Protection Officer (DPO)

In compliance with s.12A PDPA, we have appointed a Data Protection Officer, notified to the Personal Data Protection Commissioner. Contact for any data protection query, to exercise your rights, or to raise a complaint:

Information We Collect

1. Account data: name, email address, phone number, and password, collected when you register.
2. Profile and resume data you choose to provide: work experience, education, skills, languages, achievements, expected salary, photo, and resume files you upload. Some resume content may include your NRIC/passport name as you state it.
3. Application data: the jobs you apply to, your answers to employer screening questions, and your chat messages with employers on the Platform.
4. Career tools data: information you submit to our tools (Resume Drop, ATS Resume Checker, Letter Generator, AI Job Matcher), including resume files, employment history, and contact details. You can use some tools without a full account; the data is still protected by this policy.
5. Usage data: how you use and interact with the Platform, collected via cookies and similar technologies (see Cookies below).
6. Verification data: login OTPs and bot-protection signals (e.g., Cloudflare Turnstile).
7. Google sign-in data: if you register or log in with Google, we receive your name and email address from your Google account.

We collect personal data directly from you and from your use of the Platform. The only third-party source is Google sign-in, as described above.

Mandatory vs. Optional Information

• Mandatory (required to create an account): name, email address, and phone number. Without this data, we cannot provide the service.
• Optional: everything else. A fuller profile improves your job matches, but providing it is your choice.

Sensitive Personal Data

We do not ask for, and you should not include in your profile, data about your race, religion, health, or political opinions. If your resume contains such data, we treat it with the safeguards PDPA requires for sensitive personal data.

How We Use Your Data

1. Providing the service: your account, profile, job search, applications, and chat with employers.
2. Sharing your profile with employers. This is the core purpose of a job platform, and it works in three distinct ways:
   • When you apply for a job, your profile and resume go to that employer, for that role. Applying is your consent for that employer to assess you for that role.
   • Employer search. If “Show My Profile to Employers” is on, registered employers can find your profile through our search and AI recommendation tools. You can turn this off any time in Settings. This setting is ON by default for new accounts.
   • Resume Drop. If you use Resume Drop, you are asking us to distribute your resume to hiring employers on the Platform beyond specific applications. We only do this with your active, unticked-by-default consent at the point of upload.
3. AI-assisted features. Our job matching, resume checking, and letter generation tools process your resume and profile using automated systems, including AI models from third-party large-language-model providers. Where a decision or match materially affects you, you may request human review through the DPO. We tell you at the point of upload when a tool is AI-powered.
4. Background checks — only with separate consent. We or an employer will seek your explicit, separate consent before any background check is initiated. Using the Platform alone is not consent to background checks.
5. Service communications: transactional messages about your account, applications, and security, by email, in-app notification, or WhatsApp.
6. Marketing — only with your consent: job invitations, career tips, and Platform updates via email and WhatsApp. Consent is a separate, unticked checkbox at registration. Withdraw any time via Settings → Notifications or the DPO; withdrawal does not affect service communications.
7. Platform improvement and analytics, on aggregated or pseudonymised data where possible.
8. Safety and fraud prevention: verifying employers, protecting against scraping and fake accounts.
9. Legal compliance with Malaysian law and lawful requests from authorities.

The Career Tools, One by One

Each free career tool collects only what its row says, and your data goes only where its row says:

Every tool that collects a resume tells you at the point of upload that hiring employers can see your profile if you consent, and asks for that consent with a checkbox that is never pre-ticked. Tools marked “AI” process your data with automated systems; see Automated Decision-Making below. Where a tool is used without an account, the retention row for tool submissions applies (see Retention).

Who We May Disclose Your Data To

We do not sell your personal data.

If you enable the public resume feature (off by default), the parts of your profile listed at the point of enabling it become visible on the open web and to search engines, with your contact details hidden. Turn it off any time; the public link is disabled immediately.

Your Rights

Under the PDPA as amended, you have the following rights, exercisable via dataprivacy@ajobthing.com or your account settings:

If you are not satisfied with our response, you may complain to the Personal Data Protection Commissioner (JPDP).

Retention and Deletion

You can delete your account at any time: Settings → Manage Your Account → Delete. Deletion is processed automatically once you confirm the request in your account. After that:

Security

We implement appropriate technical and organisational measures:

• Encryption in transit and at rest
• Access controls
• Employer verification, including phone OTP
• Bot protection on registration and tools
• Gated access to candidate contact details
• Security assessments
• Staff training
• Incident response procedures

No internet transmission is 100% secure; we cannot guarantee absolute security.

Data Breach Notification

If a personal data breach occurs that is likely to cause significant harm or is of significant scale, we will notify the Personal Data Protection Commissioner as required by s.12B PDPA and the Data Breach Notification Guidelines. Where the breach is likely to cause you significant harm, we will also notify you directly, without unnecessary delay.

If you believe your Maukerja account is compromised, contact dataprivacy@ajobthing.com immediately.

International Data Transfers

Your data may be processed outside Malaysia where our service providers operate. We transfer personal data only with protections compliant with s.129 PDPA:

Cookies

We use cookies and similar technologies: essential (login, security — cannot be disabled), analytics, and preference cookies. Manage them via your browser settings or our cookie consent tool. Disabling some cookies may affect the Platform.

Automated Decision-Making and Profiling

Our AI matching and recommendation systems profile your skills and experience to suggest jobs to you and to suggest you to employers.

These systems do not make final hiring decisions; employers do.

You may object to profiling or request human review of any automated outcome that materially affects you, via the DPO.

Changes to This Policy

Material changes: we notify you by email and/or a prominent Platform notice at least 30 days before they take effect.

Non-material changes: we update the “Last Updated” date. Previous versions are available from dataprivacy@ajobthing.com.

Last Updated: 23 August 2026