Reference

How malaysia888 Handles Your Personal Data

When you open an account with us, we collect only what we need to run your account and process your payments — nothing more.

Account data protectedTouch 'n Go eWallet records handled securelyNo third-party data salesYour rights, clearly statedContact us to request changes
malaysia888 How malaysia888 Handles Your Personal Data
HOW WE PROTECT IT

Data Handling, Cookies and Account Security

We use SSL encryption across every page — at the cashier, in your account wallet, and during the OTP step when you log in. Access to stored personal data is restricted to staff who need it to operate your account or resolve a support case. Here is a clearer picture of each area we manage.

Cookie Use

We use session cookies to keep you logged in and analytics cookies to see which parts of the lobby you visit most. You can disable non-essential cookies in your browser settings without losing account access.

Payment Data

Your Touch 'n Go eWallet, Boost and GrabPay transaction references are stored only as long as needed to reconcile payouts and meet Malaysian financial record requirements. We do not store full wallet credentials.

Data Retention

Account data is kept while your account remains active and for the period required by applicable law after closure. Once that window closes, records are deleted or anonymised on a scheduled basis.

Your Access Rights

You can request a copy of the personal data we hold, ask us to correct inaccurate details, or ask us to delete your record where local law allows. Reach us via live chat or email to start the process.

REACH OUR TEAM

How to Contact Us About Your Privacy

If you have a question about your data, want to correct something on your account, or need to request deletion, our support team is the right place to start. We aim to respond to all data-related queries within a reasonable timeframe and will let you know if we need more details to action your request.

Live Chat Start a live chat session from the account page. Quickest path for urgent requests — our team can verify your identity and pull up your data record in the same session.
Email Support Send your data request or correction notice to our support email. Include your registered account name and the specific data point you are asking about for a faster response.
Account Help Centre Your account settings panel lets you update contact details, review linked payment methods like GrabPay or Boost, and download a summary of recent transactions directly.

Privacy Policy Questions Answered

These are the questions we get most often about how we handle personal data. If yours is not here, reach out via live chat and we will get back to you with a direct answer.

We collect your name, email address, phone number, and the payment method you register — such as Touch 'n Go eWallet, Boost or GrabPay. Device and session data is also logged for security purposes.

We share data only with the payment processors needed to complete your transactions — for example, the network handling your DuitNow or FPX transfer. We do not sell personal data to advertisers or unrelated third parties.

Your data is kept while your account is active and for the legally required period after it closes. Once that retention window ends, we delete or anonymise the record on a scheduled cycle.

Yes. Contact our support team via live chat or email, confirm your registered account details, and we will provide a summary of the personal data we hold. We aim to respond within a reasonable timeframe.

Start a live chat or send an email to support with the specific data point you want corrected or removed. Deletion requests are handled subject to what local law permits for active account records.

We store transaction references needed to verify deposits and process withdrawals. We do not store your full wallet credentials or PIN. Payment processors handle authentication on their own secure systems.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.