Rujukan Laman

Malaysia Privacy Policy for Your Account

Your account data, cookie choices and Malaysia payment records are set out here before you open your account, so you know what we collect and why.

Malaysia account dataCookie choicesTouch 'n Go recordsAccess request path
winbest Malaysia Privacy Policy for Your Account
REQUEST CHANNELS

Contact Routes for Privacy Requests

Privacy requests work smoother when they come from the same account details you used to join.

Logged-in help widget Send our support team your privacy request from the help widget after you log in. We use the account email, phone number or recent FPX receipt only to confirm that the request is yours.
Footer email path If you cannot access your account, write to the email address shown in the footer and include your username plus a reachable phone number. We may ask for a small matching detail before changing any record.
Cookie help chat For cookie or device questions, start a live chat and choose the privacy option. Our team can explain what is stored, why it is needed and how to adjust choices in your browser.
ACCOUNT SAFEGUARDS

Data Care Across Your Account

Privacy care is part of our account flow, not a separate afterthought. We document why data is collected, limit who can see it, and record changes that affect your profile or wallet…

Data we collect

We collect account details you give us, such as name, phone number, email and login records. We keep the set narrow, and we do not ask for data that is not tied to account operation or legal need.

Payment record use

Touch 'n Go, GrabPay, Boost dan FPX records may include reference numbers, payment time and wallet status. We use those details to reconcile your balance and answer payment questions linked to your account.

Cookie handling

Cookies help keep your session active, remember language choice and flag unusual sign-in behaviour. You can clear cookies in your browser, though some account functions may ask you to log in again.

Account access checks

We restrict staff access to privacy records by role, and sensitive changes require extra checks. If a sign-in pattern looks unusual, we may pause account access until you confirm the request.

Retention approach

Retention periods depend on record type, legal need and dispute status. When a record is no longer needed, we remove it from live systems or keep it in a limited archive.

Change requests

You may ask to access, correct or delete certain data where local law allows. We check identity first, then explain the outcome, any limits and the next step in clear language.

Malaysia Privacy Policy Questions

The questions below focus on account data, payment records, cookies and request rights under this Privacy Policy. They do not replace the full terms, but they give you the practical steps we use when you ask for access, correction, deletion or a copy. If law, security or dispute handling affects the outcome, we explain that directly in our reply.

We collect details you provide when opening and maintaining your account, such as name, phone number, email, login records and support messages. We also collect device and cookie data needed for access checks.

Payment privacy records help us match wallet activity with your account. They may include reference numbers, payment time, channel status and receipt details, but we use them only for account reconciliation, support and legal needs.

Yes, where local law permits, you can ask for a copy of account data linked to you. We first confirm identity, then send the response through a channel connected to your account.

You can ask us to correct outdated or inaccurate account details. For sensitive fields, we may request matching proof before making the change, especially where payment records or account access could be affected.

Some cookies keep your session active, remember choices and help us identify unusual access patterns. You can clear them in your browser, but certain account pages may ask you to log in again.

We keep records for as long as needed for account operation, legal duties, security checks or dispute handling. When the reason ends, we remove data from live systems or restrict it in archive storage.

When needed, limited staff, payment service partners, technical providers or legal authorities may receive relevant data. We share only what is required for the stated purpose and keep internal records of those actions.