Reference

What to888 Collects and Why It Matters to You

When you open an account with us, we collect only what we need to keep your account running and your transactions secure — nothing more.

Account data kept securelyLocal payment transaction recordsCookie and session data disclosedYour right to access or deleteDirect contact path for requests
to888 What to888 Collects and Why It Matters to You
HOW WE PROTECT IT

Our Approach to Data Handling, Cookies and Account Security

We take four areas seriously when it comes to your data: how we secure it in transit, how cookies work on our platform, how long we keep things, and who you talk to when something needs fixing. Each area below explains our actual practice — not a generic policy statement.

Encryption in Transit

All data exchanged between your device and our servers — including Touch 'n Go eWallet and GrabPay transaction references — travels over SSL-encrypted connections. We do not transmit account data over unencrypted channels.

Cookies and Session Tracking

We use session cookies to keep you logged in across pages and analytics cookies to understand how the mobile platform is used. You can block non-essential cookies through your browser settings; this will not prevent you from logging in.

Retention and Deletion

We keep your account data while your account is active. Once you request closure, we remove personally identifiable records within the timeframe local law requires, retaining only what we are legally obliged to keep.

Who Handles Your Request

Data requests are handled by our account team, not an automated system. When you write in from Subang Jaya or anywhere else in Malaysia, a real team member reviews your request against your account before any changes are made.

REACH US DIRECTLY

How to Contact Us About Your Personal Data

If you want to review what data we hold, ask us to correct something, or request that your account be closed and your records removed, reach out through any of the channels below. We aim to acknowledge your request within one working day and complete it within the timeframe required under applicable local law. For account-level queries — such as verifying which payment references are attached to your account — live chat is the fastest path.

Team online

Live Chat

Start a live chat session from the account menu. Available during platform operating hours for account data queries, correction requests and deletion submissions.

Email Support

Send your data request to our support address found in the account settings page. Include your registered mobile number so we can verify your identity before responding.

Account Settings

Some data — like your display name, contact number and linked payment method — can be updated directly inside your account profile without contacting support.

Privacy Policy Questions We Get Asked Most

The questions below cover what Malaysia account holders most commonly ask about their data rights, how payment information is stored, and what happens when they want us to act on their records.

No. When you pay via Touch 'n Go eWallet or Boost, the transaction is processed by the payment provider. We receive only a transaction reference and amount — never your wallet credentials or PIN.

Yes. Submit a data access request through live chat or email. We will compile and share the records attached to your account, typically within the timeframe required under applicable local law.

Contact our support team via live chat or email with your registered mobile number. We will close your account and remove personally identifiable data, keeping only what local law requires us to retain.

We share data only with payment processors — such as those handling GrabPay and DuitNow transactions — and only to the extent needed to complete your transaction. We do not sell your data to marketing companies.

Inactive accounts are not automatically deleted. If you want your records removed, submit a deletion request. We will process it and confirm once your data has been cleared from our active systems.

We use session cookies for login continuity and analytics cookies to see how the mobile platform performs. You can disable non-essential cookies in your browser; your login and account access will still work normally.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.