Rujukan Laman

How We Handle Your Account Information

When you open an account with us, we collect the details needed to run your wallet, verify withdrawals and keep your sessions secure.

Data collection noticeYour access rightsWithdrawal verificationAccount security practicesContact privacy team
toto4b How We Handle Your Account Information
CONTACT US

Reach Our Privacy Team for Data Requests

If you want to see what data we hold, correct an error, or ask about deletion, reach our privacy team through the channels below. We respond to access requests within fourteen days and will walk you through what we can provide under Malaysian privacy law.

Team online

Email privacy team

Send your data request to our privacy inbox with your registered email and account ID. We'll verify your identity and reply with the information you're entitled to see, or guide you through the correction or deletion process where applicable under local regulations.

Live chat for urgent queries

Open the chat widget in your account dashboard if you need immediate help with a data concern or suspect unauthorised access. Our team will escalate privacy matters to the right department and keep you updated on the resolution timeline.

Account settings portal

Log in to your account and visit the privacy section to update your marketing preferences, review the data we've collected, or submit a formal access request. The portal tracks your request status so you can see when we've responded.

DATA PROTECTION

How We Secure and Manage Your Information

We encrypt your data at every stage, from the moment you enter your Touch 'n Go wallet details to the time we store your transaction history.

Encryption standards

All data moving between your device and our servers travels over TLS connections, and sensitive fields like payment tokens are…

Cookie policy

We place session cookies to keep you logged in and functional cookies to remember your language and layout preferences.

Account security practices

We monitor login patterns and flag unusual access attempts, like a session from a new device or location.

Data retention periods

Transaction records are kept for the minimum period required by Malaysian financial regulations, typically five years from the date of…

Your access rights

You can request a copy of the personal data we hold, ask us to correct inaccuracies, or request deletion of…

Updates to this policy

We review this privacy policy annually and whenever Malaysian data-protection regulations change.

Privacy Policy Questions You May Have

Below are the questions we hear most often about data collection, your rights, and how we handle privacy requests. If you need more detail, reach our privacy team through the contact channels listed above.

We collect your email, phone number, and payment details for Touch 'n Go, GrabPay, Boost dan FPX when you open an account. This information verifies your identity, processes deposits and withdrawals, and lets us contact you about your account.

Log in to your account, visit the privacy section in settings, and submit a data access request. We'll send you a report within fourteen days showing the personal information we hold and how it's been used.

You can request account closure and data deletion by contacting our privacy team. We'll delete marketing records and session logs immediately, but transactional data must be retained for the period required by Malaysian financial regulations before permanent removal.

We do not sell or share your personal data for marketing purposes. Payment processors receive only the details needed to complete deposits and withdrawals, and we may disclose information to Malaysian authorities if required by law.

Transaction records are kept for the minimum period prescribed by Malaysian financial law, typically five years from the date of the transaction. After that period, records are securely deleted unless a legal obligation requires longer retention.

If we detect unauthorised access to your personal information, we'll notify you by email within seventy-two hours and explain what data was affected. We'll also report the incident to Malaysian regulators and take immediate steps to secure our systems.

Go to your account settings and open the privacy section. You can toggle promotional emails and SMS notifications on or off anytime. Changes take effect immediately, and you'll still receive transactional messages about deposits, withdrawals and account security.