Here's exactly how we handle what you share with us

When you screen someone through CheckDulu, you're trusting us with sensitive information theirs and yours. This page explains, in plain language, where our data comes from, how who to contact if you have any concerns.

How we protect your data

How we protect your data:

CheckDulu handles personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA). Here's what that looks like in practice.


CheckDulu handles personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA). Here's what that looks like in practice.


Your data is encrypted. Information is encrypted both while it's being sent to us and while it's stored on our systems.

Access is limited to those who need it. Only authorised staff involved in processing a report can view a candidate's details.

We collect only what's needed. You submit the name, ID and mobile number required to run a check, nothing more.

We don't sell your data. Information you submit is used only to generate your report. It is never sold or shared with advertisers.

Story Image

Where our records come from

We don't create or guess information about anyone. Every report is built from records that already exist in official, public sources across Malaysia.

Everything in one place.

Identity Verification

Matched against official identity records to confirm a person is who they say they are.

Everything in one place.

Civil Litigation

Sourced exclusively from publicly accessible official court registries to verify if a candidate is involved in documented civil proceedings.

Everything in one place.

Criminal Litigation

Sourced exclusively from publicly accessible official court registries to flag documented criminal court proceedings.

Everything in one place.

Academic Verification

Confirmed with the issuing colleges or universities.

Industrial Court

Industrial Court

Sourced exclusively from Industrial Court of Malaysia

Everything in one place.

Traffic Summons

Sourced from Road Transport Department

Everything in one place.

Regulatory Watchlist

Cross-checked against government and regulatory agency lists.

Everything in one place.

Travel Restrictions

Checked against immigration restriction orders.

Everything in one place.

Fraud & Scam Records

Drawn from reported fraud and scam databases.

Everything in one place.

Media News

Checked against national and regional news coverage.

Our Promises and Guaranteed

Consent, always, no exceptions

No candidate is screened without their e-signed consent, timestamped

Dispute = Free Reinvestigation

Candidate or client disputes a finding: we reinvestigate directly with the source, free, within 5 business days. If the finding was wrong, the report is corrected and reissued to everyone who received it.

Single-Purpose Data Use

We do not sell, broker, or reuse personal data for any purpose beyond the screen you paid for.

Our Promises and Guaranteed

Consent, always, no exceptions

No candidate is screened without their e-signed consent, timestamped

Dispute = Free Reinvestigation

Candidate or client disputes a finding: we reinvestigate directly with the source, free, within 5 business days. If the finding was wrong, the report is corrected and reissued to everyone who received it.

Single-Purpose Data Use

We do not sell, broker, or reuse personal data for any purpose beyond the screen you paid for.

Data Accuracy & Our Limitations

No screening service can hand you a perfect, complete picture of someone's history. Here's what we can promise you and where we need you to apply your own judgement.


No screening service can hand you a perfect, complete picture of someone's history. Here's what we can promise you and where we need you to apply your own judgement.


We report what official sources contain, not what's actually true

If a court record hasn't been digitised yet, or a case is still being processed, it won't show up even if it exists on paper somewhere.

Common names can create false matches

Many Malaysians share the same name. Where we can't confirm a match against an IC number, we flag it as a possible match, not a confirmed one always check the identifying details before you act on it.

We don't check everything

We're upfront about which categories we cover and which we don't. A clean report means "nothing found in the sources we checked" not a character reference.

A report is one input, not a verdict

Especially for hiring or high-trust decisions, pair it with your own reference checks and conversation with the candidate, rather than relying on it alone.

logo

Something doesn't feel right? Tell us.

If a report looks wrong, if you're unsure how your data is being used, or if something about your experience with CheckDulu concerns you, we want to hear about it directly.

logo

Something doesn't feel right? Tell us.

If a report looks wrong, if you're unsure how your data is being used, or if something about your experience with CheckDulu concerns you, we want to hear about it directly.