Reference

What jumcuci918 Does With Your Information

This Privacy Policy sets out exactly what data we collect when you open an account, make a deposit via Touch 'n Go eWallet, Boost or GrabPay, and move around the platform.

Account data handled securelyLocal e-wallet activity coveredYour rights explained plainlyContact path for data requests
jumcuci918 What jumcuci918 Does With Your Information
HOW WE PROTECT IT

Data Handling, Cookies, Security and Retention

We apply SSL encryption across every page, including the deposit and withdrawal flows. Your account password is stored as a hashed value — we cannot read it, and neither can anyone else who accesses our database. Session tokens expire after inactivity so an unattended phone does not leave your account open. We review data retention periods periodically and delete records that no longer serve a clear purpose.

Cookie Use

We use session cookies to keep you logged in and preference cookies to remember your language and display settings. Analytics cookies help us see which pages load slowly on mobile so we can fix them.

Account Security

Two-step verification is available and we recommend enabling it. OTP codes are sent to your registered phone number each time a login is detected from an unrecognised device.

Data Retention

Transaction records linked to Touch 'n Go eWallet, Boost or GrabPay deposits are kept for as long as required to resolve disputes and meet applicable legal obligations, then deleted.

Third-Party Access

Our payment processors and fraud-detection partners receive only the minimum data needed to complete a transaction. They are not permitted to use your data for their own marketing.

REACH OUR PRIVACY TEAM

How to Raise a Data or Privacy Question

If you want to request a copy of your data, ask us to correct something or withdraw a consent you gave earlier, reach out through any of the channels below. We handle privacy requests separately from general account queries so your request goes to the right person without delay. Include your registered email and account username so we can locate your record quickly.

Live Chat Open the chat icon from any page while logged in. State that your query is a privacy or data request so it is routed to the right team member.
Email Support Send your data request to our support address. Include your registered email, the account username and a brief description of what you need changed or removed.
Account Settings Some preferences — like marketing opt-ins — can be adjusted directly inside your account settings without contacting us. Check the notification section first.

Common Questions About Your Privacy Rights

These are the privacy questions we hear most often from accounts in Malaysia. If yours is not here, contact us through live chat or email and we will respond with the specific answer for your account.

We hold your registration details (name, email, phone), transaction references for deposits and withdrawals, device session logs and any support conversations you have started with our team.

Yes. Send a data-access request via email or live chat with your registered email and username. We will compile the relevant records and share them with you directly.

Your Touch 'n Go eWallet, Boost or GrabPay transaction reference is shared only with the payment processor that handled the transfer. No other third party receives your e-wallet details.

Go to your account settings and turn off the marketing notifications toggle. You can also email us to opt out and we will update your preference within one business day.

We retain records for as long as required by applicable law and to resolve any open disputes. Once those obligations are met, your personal data is deleted from active systems.

A new device or browser triggers an OTP verification to your registered phone number. Your account data stays the same — only the session token is new, keeping the rest of your record intact.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.