Privacy Policy & PDPA Notice

In compliance with the Personal Data Protection Act 2010 (Act 709) of Malaysia · Last Updated: September 2026

1. Overview & Data Controller

Kita Krew ("we", "us", or "our") is committed to safeguarding personal data in accordance with the Malaysian Personal Data Protection Act 2010 ("PDPA"). This Privacy Notice informs users (both Event Crew and Recruiters) about how personal data is collected, processed, shared, and protected when accessing our platform.

2. Personal Data We Collect

From Event Crew:

  • Identity & Contact: Full Name, Identity Card (NRIC) number, phone number, general location.
  • Emergency Contact: Name, relationship, and contact number.
  • Financial & Tax: Bank Name, Bank Account Number, Tax Identification Number (TIN).
  • Event Logistics & Fit: Occupation status, programme of study (for students), T-shirt size, height, weight, mode of transportation, profile picture, and comcard/portfolio document.

From Recruiters:

  • Person-in-charge (PIC) Name, role, contact phone number, company email.
  • Company legal name, SSM registration number, registered business address, business type, and optional website.

3. Purposes of Processing

  • To verify identity, age eligibility, and company SSM registration.
  • To facilitate event staffing, evaluate job applications, and coordinate on-site logistics (e.g. T-shirt sizing, transportation availability).
  • To display verified payout destinations (bank account number and holder details) to recruiters for direct compensation transfer.
  • To record attendance and maintain tax/payment worksheets in accordance with statutory record-keeping requirements.
  • To transmit critical in-app and web-push notifications regarding job selections, updates, and payouts.

4. Disclosure to Third Parties

We do not sell personal data. Personal data is disclosed strictly on a need-to-know basis:

  • To Recruiters: When crew apply for an opening, the recruiter can review the crew profile (name, phone, comcard, sizes, general location). Upon job acceptance, banking details are revealed to enable direct bank-in payout.
  • Legal & Regulatory: If required by law, court order, or governmental authorities (such as LHDN or Royal Malaysia Police).

5. Data Retention & Security

We implement strict administrative, technical, and physical security measures to prevent unauthorised access, modification, or disclosure. In accordance with Malaysian tax and commercial legislation, transaction and payment audit logs are retained for a minimum of 7 years.

6. Your Rights & Access Requests

Under the PDPA 2010, you have the right to request access to and correction of your personal data, or withdraw consent to future processing (which may impact account accessibility). Profile details can also be directly updated in the Profile section.

For inquiries or data subject requests, please contact our Data Protection Officer (DPO) at dpo@kitakrew.com.