Rujukan Laman

How we handle your account data and payment information

We collect only what we need to run your account, process deposits through Touch 'n Go, GrabPay, Boost dan FPX, and verify withdrawals.

Encrypted storageNo third-party salesLocal payment railsClear retention windowsAccount access controls
44cuci How we handle your account data and payment information
PRIVACY CONTACT

Reach our data-protection team if you have questions or requests

If you want to see what personal information we hold, correct an error, withdraw marketing consent, or delete your account data where local law permits, reach out through live chat or email.

Live Chat Open the chat icon at the bottom right of any page and choose the Privacy Request topic. Our agents walk you through data access, correction, and deletion requests during support hours. You'll receive a case reference number and an estimated response time before the conversation ends.
Email Support Send your full name, registered email, and the nature of your request to our privacy team. We confirm receipt within twenty-four hours and deliver the requested information or action update within fifteen business days. Attach proof of identity if you're asking for account-linked data.
Account Settings Log in and visit the Privacy Centre tab under your profile. Toggle marketing preferences, download a JSON export of your transaction and login history, or submit a deletion request. Changes take effect immediately; exports arrive in your inbox within two hours during business days.
DATA PRACTICES

How we secure your information and respect your rights

Your password never travels in plain text, and payment credentials stay tokenised by the Touch 'n Go, GrabPay, Boost and FPX gateways. Session cookies expire after thirty minutes of inactivity.

Encryption standard

We encrypt account data at rest using AES-256 and transmit all pages over TLS 1.3. Payment tokens from Touch 'n Go, GrabPay, Boost dan FPX never touch our database in cleartext. Your password is hashed with bcrypt before storage, and we never reconstruct the original.

Cookie policy

We place a session cookie when you log in, storing only your account ID and language preference. Analytics cookies track page views to improve navigation. You can block third-party cookies in your browser without losing core account functions. Marketing cookies require explicit consent during registration.

Access controls

Two-factor authentication is available for withdrawals above a threshold you set. Our staff cannot see your full payment details; they request additional documents through a secure portal if a withdrawal triggers a compliance check. You receive an email alert whenever someone logs in from a new device.

Retention windows

Session logs are kept for ninety days, transaction records for seven years, and marketing opt-in history for three years after you withdraw consent. When you close your account we anonymise play history immediately and delete personal identifiers after the seven-year regulatory period ends.

Third-party sharing

We send transaction records to Touch 'n Go, GrabPay, Boost and FPX processors to complete deposits and withdrawals. Anti-money-laundering reports go to the relevant Malaysian authorities when required by law. We never sell your email, phone number, or betting patterns to marketing firms or data brokers.

Your rights

You can request a machine-readable copy of your account data, correct outdated information, object to direct marketing, or ask us to delete records that are not subject to a legal hold. Submit requests through the Privacy Centre in your account settings or email our data-protection contact with proof of identity.

Common questions about data collection and account security

We ask for your email, phone number, date of birth, and preferred payment method during sign-up. When you make your first withdrawal we request identity documents to meet anti-money-laundering rules. Device type and IP address are logged for fraud prevention but not shared externally.

We send a tokenised reference to the payment gateway when you deposit or withdraw; your card number or e-wallet credentials stay with the processor. We store only the last four digits and transaction timestamps in our ledger for account-history display and regulatory audits.

Yes. Log in and visit the Privacy Centre, then submit a deletion request. We anonymise play history immediately and remove personal identifiers after seven years to comply with financial-record laws. If you want faster erasure and local law permits it, contact support with your reasoning.

We share transaction records with Touch 'n Go, GrabPay, Boost and FPX to process deposits and withdrawals, and with Malaysian regulators when the law requires. We never sell your email, phone number, or betting patterns to marketing firms. Aggregate, anonymised statistics may appear in public reports.

Open any marketing email and click the unsubscribe link at the bottom, or log in and toggle marketing preferences in the Privacy Centre. Changes take effect within twenty-four hours. Transactional messages about deposits, withdrawals, and security alerts continue regardless of your marketing choice.

We place a session cookie to keep you logged in and a language-preference cookie. Analytics cookies track page views; you can block these in your browser without losing account functions. Marketing cookies require consent during registration and can be withdrawn anytime in your privacy settings.

Log in and visit the Privacy Centre under your profile, then click Export Data. You'll receive a JSON file in your inbox within two hours during business days, containing transaction history, login timestamps, and account settings. For a more detailed report contact support with proof of identity.