Reference

What You Need to Know Before You Start

Our legal terms set out the rules that govern your account on to888, including how we handle your data, what conditions apply to your wallet activity, and how disputes are resolved.

Account Terms & ConditionsPrivacy & Data HandlingCookie PolicyJurisdiction-Dependent AccessContact & Dispute Channels
to888 What You Need to Know Before You Start
DATA & ACCOUNT SECURITY

How We Protect Your Data and Account

Your account security sits at the centre of how we operate. Every login is protected by OTP verification sent to your registered mobile number, and all data exchanged between your device and our servers travels over SSL encryption. Payment records tied to Touch 'n Go eWallet, Boost, or GrabPay are stored in encrypted form and are never shared with unrelated third parties. If you suspect unauthorised access, use the account lock option in your profile settings immediately.

SSL Encryption

All data between your device and our platform is encrypted in transit. This covers account logins, payment confirmations via GrabPay or Boost, and your profile details.

OTP Account Verification

Every login and withdrawal triggers an OTP to your registered mobile number. This step prevents unauthorised access even if your password is compromised.

Cookie Policy

We use session cookies to keep you logged in across pages and analytics cookies to understand how the platform is used. You can manage cookie preferences from your browser settings.

Data Retention & Deletion

We hold your account data while your account is active. After closure, we keep a minimal compliance record as required by law, then delete the rest on a scheduled basis.

LEGAL CONTACT PATHS

Reach Us About Legal and Account Queries

For any question about our terms, a data access request, or a formal dispute, you can reach us through the channels below. We aim to acknowledge legal and data-related requests within two business days. Keep your registered account email or mobile number ready — it helps us locate your record quickly and respond with the right detail.

Team online

Live Chat

Reach our account team directly through the live chat window. For legal queries, state 'legal request' at the start so we route you to the right person immediately.

Email Support

Send formal data requests or written legal enquiries to our support address listed in the account help section. Include your registered email for faster matching.

Account Help Centre

The help centre under your account dashboard covers common policy questions — terms of use, data retention, and how to update your registered contact details.

Common Questions About Our Terms and Policies

These are the questions we hear most often when it comes to account rights, data handling, and how our terms work in practice. If your question is not here, live chat or email will get you a direct answer.

Yes. Send a written data access request through email support or live chat. Include your registered account email and we will compile your record and respond within two business days.

After closure, we retain only the minimum data required by law — transaction history and identity verification records. The rest is deleted on a scheduled cycle once the retention period ends.

We do not sell or share your payment data. Records from Touch 'n Go eWallet, Boost, GrabPay or FPX transactions are used only to process your account transactions and meet compliance obligations.

Access depends on local law and is available where that law permits. You confirm eligibility when you accept our terms at account opening. Check the applicable rules in your region before proceeding.

We notify you of material term changes at the contact address registered to your account. Minor clarifications may be updated on this page without a separate notification — so it is worth checking periodically.

Log into your account and update contact details directly in your profile settings. For identity document corrections, contact live chat with the relevant document and our verification team will assist you.
Reference

Legal

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.