AMRC LM Sdn. Bhd. ("we", "us", "our") operates the RTCC HR mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and protect personal data when employees use the App. We are committed to complying with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable international data protection standards.
RTCC HR is a private employee-management application intended exclusively for authorised employees of RTCC and its affiliated companies under AMRC Group. The App is not intended for use by the general public and access requires valid employee credentials issued by your employer.
Collected during employee onboarding and managed by your HR department:
The App requests fine and coarse location permissions to:
Location is captured only when you initiate an attendance action. The App does not track your location in the background.
The App requests camera permission to:
We use collected information solely for legitimate HR management purposes, including:
All personal data classified as Personally Identifiable Information (PII) is encrypted at rest using industry-standard AES-256 encryption before being stored in our database. Sensitive fields including NRIC, bank account numbers, statutory IDs, and family/dependent information are encrypted individually.
Access to your data is restricted to authorised HR personnel and your direct line managers based on role-based permissions. All access is logged and auditable.
All communication between the App and our servers occurs over HTTPS with TLS 1.2 or higher encryption.
Employee data is hosted on secure servers located in Malaysia. We do not transfer your personal data outside Malaysia without explicit consent or legal basis.
We do not sell, rent, or trade your personal data with third parties. Personal data may only be disclosed:
We retain employee personal data for the duration of your employment and for a period thereafter as required by Malaysian employment law, tax law, and statutory record-keeping obligations (typically 7 years). After this period, data is securely deleted or anonymised.
Under the PDPA 2010, you have the right to:
The App is intended for use by employees aged 18 years and above. We do not knowingly collect personal data from individuals under 18 years of age.
The App uses Firebase Cloud Messaging (FCM) to deliver push notifications for approvals, leave updates, payroll notifications, and company announcements. You may disable notifications via your device settings.
We may update this Privacy Policy from time to time. Any material changes will be communicated through the App or via email at least 14 days before taking effect. The "Last Updated" date at the top of this policy will reflect the most recent revision.