Rujukan Laman

How We Handle Your Personal Information

When you open an account and make deposits via Touch 'n Go, GrabPay, Boost or FPX, we collect the details needed to verify your identity, process transactions and…

Consent-based collectionSecure storageAccess on requestRetention limitsContact path open
Browse The Lobby Read FAQ
819kiss How We Handle Your Personal Information
PRIVACY CONTACT

Reach Us About Your Data

If you want to see what personal information we hold, ask us to correct an error, request deletion or withdraw consent, use the contact paths below. Include your registered email or account ID so we can verify ownership before releasing any details.

Team online

Live chat

Open the chat widget in the lobby footer and choose the privacy topic from the menu. An agent will ask for your registered email, then walk you through the request form. Most inquiries about data access or correction are answered within one business day.

Email

Send your data request to the privacy address shown in the account settings page. Write your full name, registered email and account ID in the subject line, then describe what you need — view your data, correct a field or delete your account. We reply within 48 hours with next steps.

Account settings

Log in and navigate to the privacy section under account settings. You can download a copy of your transaction history, payment details and profile data in JSON format. If you want to delete specific fields or close your account, follow the guided form; we confirm deletion by email once complete.

DATA PRACTICES

What We Do to Protect Your Information

We encrypt personal data at rest and in transit, restrict internal access to authorised staff only, and log every query against your account.

What we collect

When you register we ask for your full name, email, date of birth and phone number. At first deposit we request identity documents to meet verification rules. Payment processors share transaction IDs, amounts and timestamps. We also log device type, IP address and session duration to detect unusual access patterns.

Why we need it

Identity checks prevent duplicate accounts and underage registration. Payment records let us reconcile deposits, process withdrawals and respond to disputes. Device and location data flag login attempts from unexpected places, so we can freeze the account and contact you before funds are moved.

Who sees it

Customer support agents see your profile and transaction history when you open a ticket. Payment processors receive only the fields they need to complete a deposit or withdrawal. We do not share email lists, phone numbers or browsing habits with marketing partners, and we never sell personal data.

How long we keep it

Active account data stays on file as long as you keep the account open. After you close your account or request deletion, we erase personal identifiers within 30 days and retain only anonymised transaction records for seven years to meet audit and tax rules in Malaysia.

Cookies and tracking

We set a session cookie when you log in so you stay authenticated as you move between the lobby, wallet and support pages. A fraud-detection cookie flags unusual device fingerprints. We do not use advertising cookies or third-party analytics that track you across other sites.

Your rights

You can request a copy of your data, ask us to correct errors, withdraw consent for optional features like promotional emails, or delete your account entirely. Use the contact paths in the support section above. We respond within 48 hours and complete most requests within five business days.

Privacy Policy FAQ

Yes. Log in, go to account settings and click the privacy section. You can download a JSON file with your profile, transaction history and payment details. If you need a human-readable summary, contact support and we will email it within 48 hours.

We erase your name, email, phone number and identity documents within 30 days. Anonymised transaction logs stay on file for seven years to meet audit rules, but those records cannot be traced back to you once personal identifiers are deleted.

We pass only the fields each processor needs. Touch 'n Go, GrabPay, Boost and FPX each receive your account ID, transaction amount and timestamp. They do not get your date of birth, identity documents or browsing history unless their own compliance rules require it.

Open any email we sent, scroll to the footer and click unsubscribe. You can also log in, go to account settings and turn off the promotional toggle. Either way takes effect within 24 hours. Account security messages and withdrawal confirmations still come through.

No. Transaction records are part of the audit trail we must keep under financial rules in Malaysia. You can close your account and request full deletion, which removes personal identifiers and leaves only anonymised logs, but individual transactions cannot be erased selectively.

We set a session cookie to keep you logged in and a fraud-detection cookie to flag unusual devices. Blocking the session cookie will log you out after each page; blocking the fraud cookie may trigger extra verification steps. We do not use advertising or third-party tracking cookies.

We reply within 48 hours to confirm we received your request. Most access and correction requests are completed within five business days. Account deletion takes up to 30 days because we verify ownership, freeze the wallet and notify payment processors before erasing personal identifiers.

Related Pages

819kiss Malaysia Cleopatra Treasure Bowl Register FAQ