Reference

Privacy Policy

We collect what we need to run your account, keep it secure and process payments through Touch 'n Go eWallet, Boost and GrabPay. This policy explains what we gather, how we use it and who you contact to request changes or ask questions.

Account data protectionPayment processingCookie disclosureContact paths for data requests
play66 Privacy Policy
PRIVACY CONTACT

Reach Us About Your Data

Questions about what we hold, requests to update or remove information, and concerns about data handling all go through the same support channels. Live chat gets you an answer during coverage hours; email works for detailed requests that need a paper trail.

Live Chat Open the chat widget in your account dashboard to speak with a support agent about data access, corrections or deletion requests. Coverage hours are shown in the widget header.
Email Support Send privacy questions and formal data requests to our support email address listed in the account contact section. Include your registered mobile number so we can verify your identity before responding.
Account Settings Review and update your email, mobile number and communication preferences directly in account settings. For data export or deletion requests, contact support with your request in writing.
DATA PRACTICES

How We Handle Privacy

Your account sits behind login credentials and session tokens that expire when you close the browser. Payment processing uses the security layer built into Touch 'n Go eWallet, Boost and GrabPay so card details never pass through our servers. We explain each practice below so you know what happens to your information.

Data Collection Scope

We gather only what account operation requires: email, mobile number, transaction history and session logs. Marketing consent is optional and you control it in account preferences. No browsing data leaves the platform.

Cookie Use

Cookies store your login token and language choice so you stay signed in and see the interface in English. We do not use tracking cookies for advertising. Clear your browser cookies to reset session state.

Account Security

Session tokens expire after inactivity and your password is hashed before storage. Two-factor codes sent to your mobile add a second verification layer when withdrawals are requested. IP logs help us spot unusual login patterns.

Data Retention and Deletion

Transaction records stay on file for the period Malaysia regulations require, then we anonymise them. To request full account deletion, contact support; we confirm your identity before processing and remove personal data within the timeframe local law allows.

Common Privacy Questions

These answers cover the data requests and privacy questions we hear most often. If your situation is not listed, reach out through live chat or email support.

We collect your email address, mobile number and identity verification details required under Malaysia regulations. Transaction history from Touch 'n Go eWallet, Boost or GrabPay deposits and withdrawals is stored to reconcile payouts and meet record-keeping rules.

Contact support via live chat or email with your registered mobile number. We verify your identity, then send a data export covering account details, transaction history and session logs within the timeframe local law requires.

Yes. Submit a deletion request through support and we remove personal data after confirming your identity. Transaction records required by Malaysia regulations stay anonymised for the mandatory retention period, then are purged from the system.

We do not sell or share personal information for marketing. Payment processors like Touch 'n Go eWallet, Boost and GrabPay handle transaction data under their own privacy policies. Regulatory disclosures follow local legal obligations only.

We use session cookies to keep you logged in and store your language preference. No advertising or third-party tracking cookies are deployed. You can clear cookies in your browser settings, but you will need to log in again.

Passwords are hashed before storage and session tokens expire after inactivity. Withdrawals trigger a two-factor code sent to your registered mobile. IP and device logs help us detect unauthorised login attempts and lock accounts if unusual patterns appear.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.