Common questions about data rights, retention and contact paths
Use the policy contact channels above—live chat, email, or the account dashboard form—and ask for a data-access report. We verify your identity, pull your account profile, transaction history, audit logs, and cookie records, then send the assembled file to your registered email within five business days.
You can request deletion through the policy channels above. We honor it once we confirm no outstanding dispute, regulatory hold, or security investigation applies to your account. If local regulation requires us to retain transaction records for a set period, we anonymize your profile and contact details while keeping only the minimum data law mandates.
When you deposit or withdraw via Touch 'n Go, GrabPay, Boost or FPX, we pass your account reference and transaction amount to the certified processor. The processor handles your e-wallet PIN, bank credentials, or card number directly—we never see or store that sensitive payment information on our side.
We retain transaction records for the period local regulation requires, typically five years from your last deposit or withdrawal. After that period we either anonymize the records for aggregated analytics or delete them entirely. You can request early deletion through the policy channels above, subject to regulatory and security checks.
Only team members with a legitimate reason—verifying a withdrawal, responding to your support ticket, or investigating a disputed transaction—can open your account record, and every access is logged in the audit trail you can request through the policy channels above. System administrators cannot see plaintext passwords or payment credentials because we encrypt them at registration.
Log in, open privacy settings in your account dashboard, and toggle each tracker category. Essential cookies keep your session active and payment forms working; analytics and personalization trackers can be switched off without breaking the lobby. Your choices apply across devices as long as you stay logged in.
We post the revised version on this page and send an email to every active account holder, highlighting the changes that affect your data rights or how we handle your information. You can review the update, adjust your privacy settings, or submit a deletion request if the new policy does not align with your expectations.
