Reference

How twc888 Handles Your Personal Information

When you open an account with us, we collect only what we need to run your account, process your payments and keep your sessions secure.

Account data handled with careLocal payments: Touch 'n Go eWallet, Boost, GrabPayYou can request data access or removalNo data sold to third partiesAvailable where local law permits
twc888 How twc888 Handles Your Personal Information
DATA HANDLING PRACTICES

How We Protect and Manage What You Share

Your data security is not an afterthought. We apply layered controls across account access, payment processing and session management so that what you share with us stays within the boundaries you agreed to when you opened your account. The sections below cover the four areas we hear about most from account holders.

Cookies and Session Tracking

We use session cookies to keep you logged in and analytics cookies to see which account pages are slow to load. You can clear cookies from your mobile browser at any time without losing your account data.

Payment Data Retention

Transaction records linked to Touch 'n Go eWallet, Boost or GrabPay deposits are kept for the period required by applicable financial rules, then deleted or anonymised. We never retain your full wallet PIN or card number.

Account Access Security

Each login triggers a one-time passcode sent to your registered number. If we detect a login from an unfamiliar device, we pause the session and ask you to verify via OTP before the account opens.

Requesting Changes or Deletion

Submit a written request via live chat or email with your account name and the specific data concerned. We aim to confirm receipt within one working day and complete the action within the period local law requires.

REACH OUR PRIVACY TEAM

Contact Us About Your Data Rights

If you have a question about how your personal information is stored, want to update your account details, or need to submit a data deletion request, our support team handles privacy matters through the channels below. Responses to data-related requests are handled separately from general account queries and are treated with higher priority.

Live Chat Start a live chat session from the account menu. Identify your query as a privacy or data request so our team routes it to the right person without delay.
Email Support Send a detailed data request or deletion enquiry by email. Include your registered account name and the type of data concerned so we can act quickly.
Account Settings Some data changes — such as updating your contact number or linked e-wallet — can be made directly inside your account settings without contacting support.

What You Asked About This Privacy Policy

These are the data and privacy questions we receive most often from account holders in Malaysia. If your question is not covered here, reach us through live chat and ask for the privacy team specifically.

We store your registration details, contact number, transaction references for deposits and withdrawals, and session logs. We do not store wallet PINs, full payment credentials or ID document images beyond the verification step.

We share data only with payment processors — Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX — and only the minimum needed to complete your transaction. We do not sell your data to advertisers or third-party marketers.

Start a live chat session, identify it as a data access request, and confirm your registered account name. We will compile and send your data record within the timeframe required under applicable local data rules.

Yes. Send a deletion request through live chat or email with your account name. We will remove your personal record once any outstanding balance is settled and any legally required retention period has passed.

Session cookies keep you logged in across pages. Analytics cookies record which features are slow on your device — no personal identity is attached to these logs. Clear cookies from your browser settings at any time without affecting your account balance.

If we update this policy in a way that affects how your data is used, we will notify you via the email address on your account before the change takes effect. Continued use of your account after that date means you have acknowledged the update.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.