Data Processing Agreement

Bahasa Malaysia

The customer is controller of employee data and Jana Mega Global, operator of GajiLa Pro, is processor. We process data only to provide, secure and support the service, on documented customer instructions or as required by law.

The customer is responsible for lawful collection, notices, accuracy, user access and data minimisation. We apply confidentiality, tenant isolation, Row Level Security, role controls, TLS, logging and server-only credentials.

The customer authorises necessary subprocessors listed on our Subprocessor List. We assist with data-subject requests and notify the customer without undue delay after confirming a personal data breach involving customer data.

On termination, data may be exported and will be deleted or anonymised subject to backups, disputes and legal retention. This DPA is governed by Malaysian law and forms part of the Terms of Service.