Reference

Privacy Policy – How We Handle Your Data

Your account data, payment records, and session activity stay protected under this privacy policy. We collect only what we need to run your wallet, verify deposits, and keep the lobby secure for Malaysia players.

Malaysia account holdersTouch 'n Go eWallet, Boost, GrabPay recordsSession and game activityLive casino and slots
rebate99a Privacy Policy – How We Handle Your Data
PRIVACY CONTACT

Reach Our Data Team

Questions about your stored data, deletion requests, or account-security concerns go to the contact paths below. Live chat handles urgent login or payment queries during the hours shown in the lobby footer, while email works for detailed privacy requests that need our data officer's review.

Team online

Live Chat

Open the chat bubble in the bottom-right corner of any lobby page. The team answers account-data questions and can escalate deletion requests to the data officer during support hours.

Email Support

Send privacy requests, data-export inquiries, or cookie questions to the support address listed in the lobby footer. Include your registered mobile number so we can verify your account and respond securely.

Account Settings

The Privacy section under account settings lets you toggle marketing emails, review session history, and download a summary of stored payment records without contacting support.

SECURITY MEASURES

How We Protect What We Collect

Data handling, encryption, retention schedules, and your rights to access or delete records all fall under this privacy framework. We built these measures around the payment flow Malaysia players actually use—Touch 'n Go eWallet, Boost, GrabPay—and the account-security checks that keep the lobby safe.

Encrypted Transfers

Payment data moves over TLS-secured connections, and tokenization keeps full card numbers off our servers. When you send ringgit from your Touch 'n Go eWallet or Boost app, the transaction reference reaches us encrypted so no third party can intercept account details.

Session Security

Each login creates a session token with a limited lifespan; after thirty minutes of inactivity the lobby asks you to confirm your PIN again. Device fingerprints and IP checks flag logins from unfamiliar locations so we can send a verification code before granting access.

Data Retention

Transaction logs stay on file for the period required by payment-processor audits and anti-fraud rules—typically two years—then move to cold storage. Marketing-preference records and session logs for inactive accounts are purged after eighteen months unless local law demands longer retention.

Your Access Rights

Request a data export through account settings or email support to receive a summary of stored records. Deletion requests for closed accounts are processed within thirty days, though payment logs tied to regulatory holds may remain archived until the hold expires.

Privacy Policy FAQ

We collect your mobile number, email address, and chosen payment method to link your wallet and verify deposits. Session logs capture your IP, device type, and browser so we can troubleshoot login issues and detect unusual activity.

Transaction logs stay on file for two years to meet payment-processor audit requirements and anti-fraud monitoring. After that period records move to cold storage, and inactive-account data is purged after eighteen months unless local law requires longer retention.

Yes. Go to the Privacy section under account settings and click Download Data Summary, or email support with your registered mobile number. We send the export within seven business days as a secure PDF.

We share payment-transaction data with Touch 'n Go eWallet, Boost, GrabPay, and other processors you choose, and with fraud-monitoring services that flag suspicious deposits. We do not sell contact lists or session data to marketing brokers.

Open account settings, find the Privacy or Notifications tab, and toggle Email Promotions to off. The change takes effect immediately, though you will still receive transaction confirmations and security alerts required for account operation.

When you request account closure through support, marketing-preference records and session logs are deleted within thirty days. Payment logs tied to regulatory holds or pending withdrawals remain archived until the hold clears, then follow the standard retention schedule.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.