Reference

How chage88 Handles Your Personal Information

This Privacy Policy sets out exactly what data we collect when you open an account, make a deposit, or contact our support team — and how we protect it.

Account data protectionTouch 'n Go eWallet transaction privacyBoost & GrabPay payment recordsYour right to access and correct dataClear data retention periods
chage88 How chage88 Handles Your Personal Information
DATA HANDLING PRACTICE

How We Protect and Manage Your Information

Our data handling is built around four practical areas: how we secure what we store, how long we keep it, how cookies work on our platform, and what your rights are. Each area has a real process behind it — not just a policy statement. Here is how each one works in practice.

Account Security

Your account uses encrypted login with OTP verification. Any login from an unrecognised device triggers an additional check before access is granted to your wallet or transaction history.

Cookies and Session Data

We use session cookies to keep you logged in and preference cookies to remember your language and payment method. You can clear these from your browser settings at any time without losing your account.

Data Retention

Transaction records — including Touch 'n Go eWallet and GrabPay deposits — are retained for the period required to comply with applicable local law. After that period, account data is deleted or anonymised.

Your Rights Over Your Data

You may request a copy of the personal data we hold, ask us to correct inaccuracies, or request deletion where local law permits. We will confirm receipt and process your request through the support channels above.

PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to access, correct, or request deletion of your personal data, you can reach our account support team through any of the channels below. We aim to respond to all data-related requests within a reasonable timeframe. Have your registered email address ready when you write in — it helps us verify your identity before we action anything on your account.

Live Chat Start a live chat session from the account dashboard. Available for data queries, account corrections and privacy-related requests from your registered account.
Email Support Send your data access or deletion request to our support email. Include your registered email address and the specific data you are asking about for faster handling.
Account Help Centre Log into your account and visit the Help section to submit a privacy request directly. This creates a tracked ticket so you can follow the status of your request.

Common Questions About Your Privacy on chage88

These are the questions we hear most often from account holders about how their data is handled. Each answer reflects what actually happens on our platform — not a generic template response.

We collect your name, email address, contact number and the payment method you register with — such as Touch 'n Go eWallet or Boost. We also log your device type and IP address for security purposes.

Payment details are shared only with the processor completing your transaction — for example, Touch 'n Go eWallet or GrabPay. We do not sell or share your payment data for marketing purposes.

Log into your account and use the Help Centre to submit a data access request, or email our support team directly. Include your registered email so we can verify your identity before responding.

You can request deletion of your personal data where local law in Malaysia permits. Some transaction records may be retained for the period required by applicable regulations before full deletion is applied.

We retain transaction and account data for the period required under applicable local law. Once that period passes, your data is deleted or anonymised so it can no longer be linked back to you.

We use session and preference cookies to keep your account running smoothly. You can disable non-essential cookies from your browser settings — this will not affect your ability to log in or make deposits.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.