Privacy Notice
Version 2026-06-25
Bahasa Malaysia · Data Processing Agreement
1. Roles
GajiLa Pro is operated by Jana Mega Global. We act as controller for account, support and billing information. The customer is controller for employee information uploaded to the service, while we process it on the customer's documented instructions.
2. Data and purposes
We process user identity and contact details, organisation information, and employee identity, employment, payroll, bank, statutory, tax, leave, claim and deduction data. We use it to authenticate users, calculate payroll, produce statutory documents, provide reports, process billing, secure the service, support customers and comply with law.
3. Processors and international transfers
Infrastructure, hosting, authentication and payment providers may process data where required to deliver the service, including outside Malaysia. We use contractual and technical safeguards and do not sell personal data for marketing. See our Subprocessor List.
4. Security and retention
Controls include authentication, tenant isolation, Row Level Security, role-based access, TLS and server-only credentials. Data is retained while the service is required and then exported, restricted, deleted or anonymised subject to tax, employment, dispute, backup and legal obligations.
5. Rights and incidents
Individuals may request access, correction, restriction or deletion where applicable. Employee requests should normally be directed to their employer as controller. We assess security incidents and notify authorities and affected individuals where legally required.
6. Contact
Privacy enquiries: privacy@gajila.my.