Reference

How 1imalaysia Handles Your Personal Data

When you open an account with us, we collect only the data we need to run your account, process your transactions, and keep your wallet activity secure.

Account data kept secureTouch 'n Go eWallet & Boost transaction privacyYour right to access your dataNo data sold to third partiesContact us to update or remove records
1imalaysia How 1imalaysia Handles Your Personal Data
DATA CONTACT PATHS

Reach Us About Your Privacy

If you want to access, correct, or delete the personal data we hold on your account, our support team handles these requests directly. Send your request through live chat or email and we will respond within the timeframe required by applicable law. Have your account details ready to speed up verification.

Team online

Live Chat

Open the chat widget in your account dashboard. Raise a data access or correction request and a support agent will confirm your identity before proceeding.

Email Support

Send your written request to our support address listed in your account settings. Include your registered email and the specific data action you are requesting.

Account Settings

Certain data fields — display name, contact number, linked GrabPay or Boost account — can be updated directly inside your account profile without contacting support.

DATA HANDLING STANDARDS

How We Protect and Manage Your Account Data

We apply a layered approach to data security — encryption at rest, secure token handling for payment rails, and session controls that log you out after a period of inactivity. Our internal access policy means only teams with a direct operational need can view your personal records. We review these controls regularly and update practices when payment provider requirements change.

Cookies and Session Data

Cookies keep your session active across devices. You can clear cookies through your browser settings, but doing so will require you to log back in on your next visit.

Payment Data Handling

When you deposit via Touch 'n Go eWallet or Boost, the transaction is processed through their own secure environment. We record the reference number and amount only — not your wallet PIN or credentials.

Account Security Controls

Login uses OTP verification tied to your registered mobile number. If we detect a new device or unusual location, we flag the session and may ask you to re-verify before access is granted.

Data Retention and Deletion

Active accounts retain full transaction and login history. If you close your account, we hold minimal records only as long as legal obligations require, then delete them.

Common Questions About Your Privacy on 1imalaysia

These are the questions we get asked most often about how your data is handled. If your question is not here, reach out through live chat or email — details are in the support section above.

We collect your name, email address, mobile number, and date of birth at registration. Payment identifiers — such as your linked Touch 'n Go eWallet or GrabPay reference — are added when you make your first transaction.

We share data only with payment processors — like the Boost or FPX gateway — strictly to clear your transaction. No marketing companies, data brokers, or advertisers receive your personal records.

Send a data access request through live chat or to our support email address found in your account settings. Confirm your identity and we will provide the records we hold on your account.

Yes. Submit a deletion request via live chat or email. Where legal or regulatory obligations do not require us to keep certain records, we will delete them within the period stated in our response.

Transactions are processed inside each provider's own secure environment. We store only the transaction reference and amount — your wallet PIN, card number, or bank credentials are never held on our systems.

Once you close your account, we retain only the minimum records required by law. When that retention period ends, your personal data is permanently deleted from our systems.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.