Rujukan Laman

How vwin99 Protects Your Personal Data

Your personal data belongs to you. At vwin99, we collect only what is necessary to run your account, process transactions through Touch 'n Go, GrabPay, Boost dan FPX…

Data collected only as neededTouch 'n Go, GrabPay, Boost dan FPX payment data handled securelyYour right to access, correct and deleteNo sale of personal data to third partiesAvailable where local law permits

Explore the Lobby Read FAQ

What Data We Collect and Why

vwin99 Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

When you open an account with us, we collect identifiers such as your name, email address and contact number, as well as transactional records tied to your chosen payment method — whether that is Touch 'n Go, GrabPay, Boost dan FPX, or any other supported rail.

1
We also log device identifiers, IP addresses and session activity to detect unusual access patterns and protect your account. Location signals help us determine whether the service is available where local law permits — for example, a session originating in Petaling Jaya is subject to Malaysian
2
data-protection obligations under the Personal Data Protection Act 2010. We do not collect more data than is necessary to fulfil these purposes, and we do not sell your data to advertisers or unaffiliated third parties.

Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

PRIVACY CONTACT PATHS

Reach Our Privacy Team Directly

If you need to submit a data-access request, correct inaccurate records, or ask us to erase data we hold about you, our dedicated privacy team is reachable through multiple channels.

Email Privacy Request Send a written data-access, correction or erasure request to our privacy inbox. Include your registered account email and the specific data you are enquiring about so we can locate your records quickly.

Live Chat Support Our live-chat agents are available around the clock to take initial privacy queries, escalate your request to the privacy team, and give you a reference number to track its progress.

In-Account Help Centre Log in and navigate to the Help Centre tab to submit a privacy ticket directly. Authenticated submissions allow us to verify your identity immediately, which speeds up resolution of data requests.

HOW WE HANDLE YOUR DATA

Six Pillars of Our Data Practice

Our data-handling practices are designed to be transparent and consistent. Each of the principles below reflects a concrete operational decision we have made about how personal information is stored, accessed and eventually…

Data Minimisation

We capture only the fields required to create your account, verify identity where required by local law, and process transactions via Touch 'n Go, GrabPay, Boost dan FPX. Surplus data is not retained.

Encrypted Storage

Account credentials and payment-method tokens are stored in encrypted form using industry-standard protocols. Decryption keys are kept separately from the data they protect and are rotated on a scheduled basis.

Cookie and Tracking Practice

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You can manage cookie preferences through your browser settings at any time without losing account access.

Retention Schedule

Active account data is retained for the duration of your relationship with us. On account closure, most personal data is deleted within ninety days, except records we are legally required to retain under applicable Malaysian financial-record obligations.

Third-Party Access Controls

Payment processors, fraud-screening services and cloud-infrastructure providers may access limited data subsets under strict contractual data-processing agreements. None of these parties is permitted to use your data for their own marketing.

Your Correction and Erasure Rights

You may request a full copy of the personal data we hold, ask us to correct any inaccuracy, or request erasure where no legal retention obligation applies. Submit requests via live chat or our email privacy channel.

Your Privacy Questions Answered

The questions below cover the scenarios we hear about most — from understanding what data sits on your account profile to finding out how to have it removed. If your question is not listed here, our live-chat team can direct you to the right privacy channel.

We hold your registration details (name, email, contact number), transactional history including payment-method identifiers for Touch 'n Go, GrabPay or Boost, device and session logs, and any correspondence you have sent to our support team.

Submit a written request through live chat or our privacy email address. Include your registered email so we can locate your records. We aim to deliver a structured data export within fourteen calendar days of verifying your identity.

Yes. Where no legal retention obligation applies, we will erase your personal data within ninety days of your verified erasure request. Data tied to financial transactions may need to be kept for the period required under Malaysian law.

We share limited data only with processors who directly support your account — payment gateways, fraud-screening tools and cloud infrastructure. These parties operate under signed data-processing agreements and may not use your data for any other purpose.

Payment-method identifiers are tokenised by the respective payment provider before they reach our servers. We store only the token reference, not your raw wallet credentials or bank account numbers, so sensitive financial details never sit in our database in plain form.

We use essential session cookies to maintain your logged-in state and analytics cookies to measure page performance. Analytics cookies can be disabled in your browser settings. Disabling essential cookies will prevent you from staying logged in across pages.

Reach our privacy team via the in-account Help Centre ticket form or by live chat. Reference your account email and describe the concern clearly. We will send a written acknowledgement within two business days and work toward resolution within fourteen days.

How vwin99 Protects Your Personal Data

Reach Our Privacy Team Directly

Six Pillars of Our Data Practice

Data Minimisation

Encrypted Storage

Cookie and Tracking Practice

Retention Schedule

Third-Party Access Controls

Your Correction and Erasure Rights

Your Privacy Questions Answered

01 What personal data does vwin99 hold about me?

02 How do I request a copy of my personal data?

03 Can I ask vwin99 to delete my account data?

04 Does vwin99 share my data with other companies?

05 How are my Touch 'n Go or GrabPay details stored?

06 What cookies does vwin99 use, and can I turn them off?

07 Who do I contact if I think my data has been handled incorrectly?

Related Pages