Last updated: May 13, 2026
1. Introduction
This Privacy Policy explains how QBox Code Software Services (“we”, “us”, “our”), the owner and operator of MalaysiaWorking.com (“Platform”), collects, uses, stores, shares, and protects your personal information when you access or use the Platform.
We are committed to protecting your privacy and handling your personal data transparently and responsibly. This Policy is written to comply with applicable data protection laws including India’s Digital Personal Data Protection Act, 2023 (DPDPA), Malaysia’s Personal Data Protection Act, 2010 (PDPA), and where applicable, the General Data Protection Regulation (GDPR) of the European Union.
By using the Platform, you consent to the practices described in this Privacy Policy.
2. Data Controller
The data controller for personal information collected through MalaysiaWorking.com is:
QBox Code Software Services India
Contact: privacy@malaysiaworking.com
3. What Personal Data We Collect
We collect the following categories of personal data depending on how you use the Platform:
3.1 Data you provide directly
- Identity data: Full name
- Contact data: Email address, phone number or WhatsApp number
- Location data: Country of residence, nationality
- Professional data: Job title, industry, years of experience, employer details (when submitted in forms)
- Financial data: Investment range, income bracket, paid-up capital (when submitted in calculator or lead forms — we do not collect bank account or card details)
- Immigration data: Visa type sought, relocation timeline, family situation
- Form responses: All data submitted in any lead form, calculator, or contact form on the Platform
3.2 Data collected automatically
- Usage data: Pages visited, time spent, links clicked, search queries
- Device data: IP address, browser type, operating system, device identifiers
- Cookie data: As described in our Cookie Policy
3.3 Data from third parties
- Job listing data: Where job listings are aggregated from third-party sources, we receive basic listing metadata
- Analytics data: Aggregated, anonymised usage data from analytics services
4. How We Use Your Personal Data
We use your personal data for the following purposes:
| Purpose | Legal basis |
|---|---|
| To connect you with relevant partner consultants based on your submitted enquiry | Consent (form submission) |
| To redirect job applicants to employer application pages | Consent (form submission) |
| To send you acknowledgement emails after form submission | Legitimate interest / Consent |
| To improve Platform content, tools, and user experience | Legitimate interest |
| To analyse usage patterns and optimise the Platform | Legitimate interest |
| To comply with legal obligations | Legal obligation |
| To prevent fraud and misuse | Legitimate interest |
| To communicate with you about your enquiry or account | Contract performance |
We do not use your personal data for automated decision-making or profiling in a way that produces significant legal effects for you.
5. Sharing Your Personal Data
5.1 With partner consultants
When you submit a lead form on the Platform, your contact details and form responses are shared with a maximum of two (2) verified partner consultants whose specialisation matches your enquiry. By submitting a lead form, you consent to this sharing.
Partner consultants are required under our Partner Terms to use your data only for responding to your enquiry and to comply with applicable data protection laws.
5.2 With service providers
We share personal data with trusted third-party service providers who help us operate the Platform, including:
- Email and communication services
- Analytics providers (data is anonymised or pseudonymised where possible)
- Payment processors (for partner transactions — we do not process payment data from users)
- Web hosting providers
All service providers are contractually required to process your data only on our instructions and to implement appropriate security measures.
5.3 Legal requirements
We may disclose your personal data where required by applicable law, court order, or government authority, or where necessary to protect the rights, property, or safety of MalaysiaWorking, its users, or the public.
5.4 Business transfers
In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such transfer where required by law.
5.5 We do not sell your data
We do not sell, rent, or commercially trade your personal data to third parties for their own marketing purposes.
6. International Data Transfers
MalaysiaWorking.com is operated by QBox Code Software Services, based in India. Personal data you submit may be stored and processed in India and/or on servers operated by our service providers in other countries. When data is transferred internationally, we ensure appropriate safeguards are in place including standard contractual clauses or equivalent protections as required by applicable law.
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law, whichever is longer:
| Data type | Retention period |
|---|---|
| Lead form submissions | 12 months from submission |
| Job application redirects (name and email) | 6 months from submission |
| Account data | Duration of active account + 12 months |
| Analytics data | Up to 26 months (anonymised) |
| Communications | 24 months |
After the applicable retention period, personal data is securely deleted or anonymised.
8. Your Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
- Right to access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data in certain circumstances
- Right to restriction: Request that we limit the processing of your data
- Right to data portability: Request your data in a portable, machine-readable format
- Right to object: Object to processing based on legitimate interest
- Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing
To exercise any of these rights, email us at privacy@malaysiaworking.com with the subject line “Data Rights Request.” We will respond within 30 days. We may request identity verification before processing your request.
9. Security
We implement reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These include encrypted data transmission (HTTPS), access controls, and regular security reviews.
However, no method of data transmission or storage is completely secure. We cannot guarantee absolute security and accept no liability for breaches beyond our reasonable control.
10. Children’s Privacy
The Platform is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately at privacy@malaysiaworking.com and we will delete it promptly.
11. Third-Party Websites
The Platform contains links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any external sites you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via a notice on the Platform or by email where required. The “Last updated” date at the top of this Policy reflects the most recent revision. Continued use of the Platform after any update constitutes acceptance of the revised Policy.