Reference

How aladdin99vip Handles Your Personal Information

This Privacy Policy sets out exactly what data we collect when you open an account or make a deposit via Touch 'n Go eWallet, Boost, or GrabPay — and how we keep that data safe.

Account data protectionTouch 'n Go eWallet privacyBoost & GrabPay data handlingYour rights, clearly statedContact path for data requests
aladdin99vip How aladdin99vip Handles Your Personal Information
HOW WE PROTECT YOU

Security Practices Behind Your Account

Every piece of account data we hold sits behind encryption at rest and in transit. Our payment flows — whether you tap through Touch 'n Go eWallet, scan with Boost, or confirm via GrabPay — pass through secure tokenised channels so your full wallet credentials are never stored on our servers. Session tokens expire automatically after inactivity, and any new device login triggers a one-time verification step before the account opens.

SSL Encryption

All data exchanged between your device and our servers is encrypted via SSL. This covers login, account updates, and every payment confirmation you submit through the deposit flow.

Cookie Policy

We use functional cookies to keep your session alive and analytics cookies to understand how the lobby is used. You can manage cookie preferences through your browser settings at any time.

Account Verification

Before we action any data change or withdrawal request, we confirm your identity through a one-time code sent to your registered contact. This step cannot be bypassed.

Data Retention

We keep your account records for as long as your account is active or as required by applicable law. Closed accounts are anonymised after the mandatory retention window closes.

DATA REQUEST CONTACT

How to Reach Us About Your Privacy

You have the right to ask us what data we hold, request a correction, or ask for deletion. Reach out through any of the channels below and our account support team will respond to privacy-related queries. Where a request involves payment data tied to Touch 'n Go eWallet, Boost, or GrabPay, we may need to verify your identity before processing the change — this is a standard security step to protect your account.

Team online

Live Chat

Reach account support directly through the live chat window on site. For data or privacy queries, select the account help category when you open the chat.

Email Support

Send your data access or deletion request by email. Include your registered account name and the specific data you are asking about so we can locate your records quickly.

Account Help Centre

The Help Centre under your account dashboard covers common privacy questions. Submit a ticket there for anything that requires a written record of your request.

Common Questions About Your Data Rights

These are the questions we hear most often from account holders about how their data is stored, who can access it, and what steps to take if something needs to change. If your question is not covered here, the live chat team handles privacy queries directly.

We collect your name, email, contact number, and the payment method you link — Touch 'n Go eWallet, Boost, GrabPay, or a bank option. Device and session data is also logged automatically for security purposes.

No. Payment credentials pass through tokenised processor channels during the transaction. We record a transaction reference and status, not your full wallet number or PIN.

Yes. Send a data access request via email or the Help Centre ticket system. Include your registered account name and we will respond with the details we hold on file.

Submit a deletion request through live chat or email. We will verify your identity first, then remove or anonymise your records. Some data may be retained where law requires it.

We share data only with payment processors — such as those handling GrabPay or DuitNow transfers — strictly to complete transactions you start. We do not sell data to marketers or unrelated third parties.

Records are kept for the period required by applicable law in regions where the service operates. Once that window passes, your data is deleted or anonymised in full.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.