Privacy Policy

Nine Gates Sdn Bhd ("Nine Gates", "we", "our", or "us") is committed to protecting your privacy and ensuring that your personal data is handled securely and responsibly. This Privacy Policy outlines how we collect, use, disclose, and protect your information in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and other applicable regional data protection laws.

1. Information We Collect

We may collect the following categories of personal data depending on your relationship with us (e.g., as a client, candidate, or website visitor):

• Identity & Contact Information: Name, email address, phone number, physical address, and job title.
• Professional Information (Candidates): Resumes/CVs, employment history, educational background, technical assessments, portfolio links, and reference details.
• Technical Data: IP address, browser type, device identifiers, and website usage data collected via cookies and analytics tools.
• Communication Data: Records of correspondence, meeting notes, and interview feedback.

2. How We Use Your Information

We strictly process personal data for legitimate business purposes, which include:

• Service Delivery: Facilitating IT Staff Augmentation, managed team deployments, and executive search services.
• Candidate Matching: Assessing candidate profiles against enterprise client requirements and arranging interviews.
• Client Management: Communicating project updates, managing contracts, and processing billing.
• Platform Improvement: Analyzing website traffic to enhance user experience and optimize our digital presence.
• Legal & Compliance: Fulfiring statutory obligations, defending legal claims, and ensuring compliance with regulatory frameworks (e.g., PDPA, BNM guidelines).

3. Data Sharing and Disclosure

Nine Gates does not sell or rent your personal data to third parties. We may disclose your data only in the following scenarios:

• To Enterprise Clients: Candidate profiles and technical assessment results are shared with prospective clients solely for recruitment and project deployment purposes, with prior consent.
• To Service Providers: Trusted third-party vendors (e.g., cloud hosting providers, assessment platforms) who assist in our business operations under strict confidentiality agreements.
• Legal Requirements: To law enforcement agencies, regulators, or courts when legally compelled to do so.

4. Data Security

We implement robust administrative, technical, and physical security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Our infrastructure aligns with ISO 27001 principles, ensuring enterprise-grade data protection. However, no internet transmission is entirely secure, and we cannot guarantee absolute security.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, or to comply with legal, tax, or accounting requirements. Unsuccessful candidate profiles may be retained in our talent pool for future opportunities unless a deletion request is made.

6. Your Rights

Under the PDPA and relevant regional laws, you hold certain rights regarding your personal data:

• The right to request access to your personal data.
• The right to request correction of inaccurate or incomplete data.
• The right to withdraw consent for data processing (subject to legal or contractual restrictions).
• The right to request deletion of your data from our systems.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer at: