Reference

How we handle your account information

We collect what we need to run your account, process deposits from Touch 'n Go eWallet, Boost and GrabPay, and keep the platform secure. You control your profile, and you can ask us to update or remove data at any time.

Account securityData on requestCookie noticeRegional complianceContact paths
ibc4d How we handle your account information

How we protect what you share

We encrypt deposit and withdrawal data in transit, store passwords as salted hashes and restrict internal access to account records by role. Session cookies expire when you close the browser, and payment credentials never touch our servers—Touch 'n Go eWallet, Boost and GrabPay transactions happen in their own apps, and we only see confirmation codes.

Data encryption Every page uses HTTPS so login credentials, payment confirmations and profile updates travel encrypted. We store sensitive fields in encrypted database columns and rotate keys quarterly to keep access narrow.
Cookie policy We set a session cookie to keep you logged in and a language cookie to remember your display choice. No third-party advertising cookies run on the platform; you can delete all cookies in your browser settings without losing account data.
Account security We log login attempts by device and location so you can spot unfamiliar access in your activity feed. If we see a pattern that looks like credential sharing or brute-force login, we lock the account and send an unlock code to your registered email.
Retention and deletion Transaction records stay on file for the period local regulations require, then we archive them offline. When you request account closure we freeze the profile, wait for the statutory cooling-off window to pass, then purge personal identifiers and keep only anonymised financial logs.

Privacy questions and data requests

If you need to update your details, request a data export or ask how we use cookies, reach us through live chat, email or the contact form in your account dashboard. Include your registered email so we can verify ownership before we share account information.

Live chat Open the chat widget at the bottom right of any page and tell us what data request you need—update, export or deletion. We verify your account email before we process the request.
Email support Send your request to the support address shown in your account settings footer. Write your registered email in the subject line and describe the change or export you want; we reply within two business days.
Account dashboard Log in, open settings, then scroll to data and privacy. You can download a JSON export of your transaction history and profile fields, or submit a deletion request that we action after the cooling-off period.

Privacy policy questions

We ask for your email, phone number and payment method details so we can verify deposits from Touch 'n Go eWallet, Boost or GrabPay and send withdrawal confirmations. We also log your device type and IP address to keep the account secure.

Yes. Log in, open account settings and click the data export button. You will receive a JSON file with your profile fields, transaction history and login timestamps within two business days.

We keep deposit, withdrawal and game-round logs for the period local regulations require, then move them to encrypted offline storage. When the retention window ends we delete personal identifiers and keep only anonymised financial summaries.

No. Touch 'n Go eWallet, Boost and GrabPay transactions happen in their own apps; we only receive confirmation codes and timestamps. We do not sell or rent your data to advertisers or data brokers.

Contact support through live chat or email with your registered address and request closure. We freeze the account, wait for the cooling-off period local law requires, then purge all personal identifiers and keep only anonymised logs.

We set a session cookie to keep you logged in and a language cookie to remember your display choice. No advertising or tracking cookies run here. You can delete them in your browser settings anytime without losing account data.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.