Rujukan Laman

How w99y Handles Your Personal Data

At w99y, your personal data belongs to you — we collect only what is necessary to run your account, process transactions through Touch 'n Go, GrabPay, Boost dan…

Data dikumpul dengan tujuan jelasTransaksi Touch 'n Go, GrabPay & FPX dilindungiHak akses data anda terjaminDasar dikemas kini apabila perlu
w99y How w99y Handles Your Personal Data
HUBUNGI PASUKAN PRIVASI

Reach Our Privacy Team Directly

If you want to access, correct, or delete data we hold about your account, our privacy team is ready to help.

E-mel Privasi Send your data request or query to our dedicated privacy address at [email protected]. We respond to all written requests within two business days and confirm every action taken on your data.
Live Chat Our support agents are available around the clock via live chat on w99.today. For privacy matters, ask to be connected to a data-handling specialist who can log your request directly in our system.
Borang Dalam Akaun Log in to your w99y account, navigate to Settings, then Privacy, and submit a data-access or deletion request through the secure in-account form. Requests submitted this way are tracked automatically.
CARA KAMI MELINDUNGI DATA

Browse How We Protect Your Account Data

Data security at w99y is built on concrete practices, not vague assurances. From the moment you open an account to each Touch 'n Go or GrabPay transaction, your information travels through encrypted…

Penyulitan Data

All data in transit between your device and w99y servers is protected by TLS 1.2 or higher. Payment details tied to Touch 'n Go, GrabPay, Boost dan FPX are tokenised so raw card or wallet numbers are never stored on our servers.

Pengurusan Kuki

We use session cookies to keep you logged in and analytics cookies to understand how pages load on your device. You can adjust cookie preferences at any time through the cookie banner or your browser settings without affecting your account access.

Keselamatan Akaun

Your account is protected by password hashing and optional two-factor authentication via SMS or an authenticator app. Any login from an unrecognised device triggers an email alert so you are notified immediately of account activity.

Tempoh Penyimpanan

We retain transaction records and account data for the minimum period required under the PDPA and anti-money-laundering regulations. Once that period expires, data is either permanently deleted or anonymised so it can no longer be linked to you.

Perkongsian Data Pihak Ketiga

We share data only with payment processors handling your Touch 'n Go, GrabPay, Boost dan FPX transactions, identity-verification partners, and regulators where required by Malaysian law. We do not sell or rent your personal data to advertisers or marketing firms.

Permintaan Perubahan Data

You may request to view, correct, or delete personal data we hold about your account at any time. Submit your request via e-mel, live chat, or the in-account form and we will process it within 14 days, confirming every change in writing.

Switch Through Common Privacy Questions

The questions below cover the most common concerns about how w99y collects, uses, and protects your data. If your question is not listed here, reach out through live chat or e-mel and our privacy team will get back to you within two business days.

We collect your name, email address, phone number, date of birth, and the payment-method identifiers linked to Touch 'n Go, GrabPay, Boost or FPX. We also log device identifiers and IP addresses for security and fraud-prevention purposes.

Payment data is tokenised before it reaches our servers, meaning we store a secure reference code rather than your raw wallet or account number. Transactions flow through TLS-encrypted channels and are processed by PCI-compliant payment partners.

Yes. Submit a data-access request via [email protected], live chat, or the in-account Privacy form. We will compile and send you a copy of your personal data within 14 days of receiving a verified request.

We retain account and transaction records for the minimum period required by the PDPA and applicable anti-money-laundering rules. Once that retention window closes, your data is securely deleted or anonymised.

We share data only with payment processors, identity-verification providers, and regulators as required by Malaysian law. Any cross-border transfer is governed by contractual safeguards that meet PDPA standards. We do not sell your data.

Log in and use the Settings → Privacy form, or e-mel us at [email protected]. We will acknowledge your request within two business days and complete the correction or deletion within 14 days, confirming the outcome in writing.

We use essential session cookies to keep your account session active and analytics cookies to monitor page performance. Analytics cookies can be disabled through the cookie banner or your browser settings without affecting your ability to log in or transact.