Reference

How ipayung Handles Your Personal Data

This privacy policy explains exactly what we collect when you open an account with us, how we use that data to keep your wallet and payment activity secure, and what rights you hold over your own information.

Account data handled with careTouch 'n Go eWallet, Boost, GrabPay payment data protectedYour rights explained clearlyNo data sold to third partiesAvailable where local law permits
ipayung How ipayung Handles Your Personal Data
DATA SECURITY PRACTICES

How We Protect and Manage Your Information

Security is built into every layer of the account and payment flow. From the moment you link your Touch 'n Go eWallet or make a deposit via GrabPay, that transaction data passes through encrypted channels. We apply access controls, session monitoring and periodic security reviews to reduce exposure risk. Here is how each area of data handling works in practice.

Encrypted Data Transfer

All data exchanged between your device and our servers is protected by SSL encryption. This applies to account login, payment processing and any personal detail you submit through the platform.

Cookie Use and Preferences

We use session cookies to keep you logged in and analytics cookies to understand how the platform is used. You can adjust cookie preferences through your browser settings at any time.

Data Retention Periods

We keep account and transaction records for as long as your account is active and for a period afterwards as required by applicable law. Once retention periods pass, data is deleted or anonymised.

Account Verification Steps

Before we share or modify any personal data, we verify your identity through your registered email or a one-time code sent to your mobile number, so no one else can access your records.

REACH OUR TEAM

Contact Us About Your Privacy Rights

If you want to access, correct or delete the personal data we hold on your account, our support team handles privacy requests directly. Players in George Town and across Malaysia can reach us through live chat or email — we aim to respond to all data-related queries within two business days. Bring your registered account details when you write so we can verify your identity and action your request without delay.

Team online

Live Chat

Open live chat from your account dashboard. Our team will verify your identity before discussing any account or personal data details with you.

Email Support

Write to our support address with your registered email and account ID. We handle privacy requests, data access queries and correction requests by email.

Account Settings

Some data updates — like your contact number or linked eWallet — can be changed directly inside your account settings without contacting support.

Your Privacy Questions, Answered

These are the questions we get most often about how we handle your data. If your question is not covered here, our support team is the right place to follow up — either through live chat or by email with your account ID ready.

We collect your name, email address, contact number, and payment method details such as your linked Touch 'n Go eWallet or GrabPay account. Device and session data are also captured for security purposes.

We share data only with payment processors like those handling Boost or DuitNow transactions, fraud-prevention services, and authorities where the law requires it. We do not sell your data to advertisers.

Contact our support team via live chat or email using your registered account details. We will verify your identity and send you a copy of your stored personal data within two business days.

Yes. Submit a deletion request through live chat or email. We will remove your data subject to any retention obligations under applicable law, and confirm once the deletion is complete.

We retain account and transaction records while your account is active and for a further period required by applicable regulations. After that, records are deleted or anonymised.

We do not store full eWallet credentials on our servers. Payment data is processed through the relevant payment processor, and only the transaction reference and status are retained on our side.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.