Rujukan Laman

How We Handle Your Information

We collect only what we need to run your account, process deposits through Touch 'n Go, GrabPay, Boost dan FPX, and keep your gaming sessions secure.

Data minimisationSecure account accessYour rights explainedContact us anytimeClear retention policy
bbni4d How We Handle Your Information
REACH OUR TEAM

Privacy Questions? We're Here

If you want to review the data we hold, update a detail, or request deletion, our support team handles every privacy query with the same priority as a technical issue.

Live Chat Open the chat bubble in the bottom-right corner of any page and ask for the privacy team. An agent will confirm your identity, explain what data we hold, and start any requested action — correction, export, or deletion — right there in the conversation. Average response time is under two minutes during business hours.
Email Support Send your privacy request to our dedicated address and include your registered email and account username. We verify ownership, then send a detailed reply within one business day. For deletion requests we confirm the action by email once complete, usually within seven business days from your original message.
Help Centre Our privacy section covers the most common questions: how to download a copy of your data, how to update your email or phone number, how to turn off marketing messages, and how to close your account permanently. Each article includes screenshots of the exact account-settings page you need, so you can complete most tasks yourself without waiting for a reply.
BEHIND THE SCENES

How We Protect What You Share

Every login, deposit, and withdrawal passes through encrypted channels; session tokens expire after thirty minutes of inactivity; and we salt and hash passwords so even our own database administrators cannot read them.

Encryption Everywhere

Your password never travels in plain text, and your payment details move directly from your device to our licensed processor without touching our application servers. We use TLS 1.3 to secure the connection and tokenise card data so that even if someone intercepts the traffic, they see only a meaningless reference string.

Cookie Control

We set three types: essential cookies that keep you logged in, analytics cookies that show us which pages load slowly, and preference cookies that remember your language choice. You can block the non-essential ones through your browser settings, though some features — like staying logged in across tabs — will stop working if you do.

Account Security

Turn on two-factor authentication in your account settings and every login will ask for a code from your phone. If someone guesses your password, they still cannot get past the second layer. We also send an email alert whenever a new device logs in, so you know immediately if something looks wrong.

Data Retention

Active-account records stay live as long as you keep playing. Close your account and we archive your data for the period required by Malaysian financial and gaming regulations — typically six years — then delete everything except anonymised transaction logs used for auditing. You can request earlier deletion if local law allows it; we review each case individually.

Third-Party Sharing

We share data only when necessary: payment processors need your name and email to clear a withdrawal, and regulators may request transaction histories during an audit. We never sell your information to marketers, and every third party signs a contract that binds them to the same privacy standards we follow ourselves.

Your Rights

Request a copy of your data and we send a JSON file containing every record we hold — account details, session logs, deposit history, and support tickets. Ask us to correct an error and we update it within one business day. Request deletion and we close your account, archive the minimum required by law, and erase the rest within fourteen days.

Privacy & Data FAQ

We ask for your full name, email address, phone number, date of birth, and payment details. This lets us verify your identity, process deposits through Touch 'n Go, GrabPay, Boost dan FPX, and comply with Malaysian financial regulations. We also log your IP address and device type to detect unusual login patterns and keep your account secure.

We archive closed-account records for six years to meet regulatory requirements, then delete everything except anonymised transaction logs used for internal audits. If you want earlier deletion, contact our privacy team — we review each request against local legal obligations and approve it when possible.

Yes. Email our support team or ask through live chat, and we send a structured file containing your account details, session logs, deposit and withdrawal history, support tickets, and any notes from our fraud-prevention team. Most requests are fulfilled within three business days; complex accounts may take up to seven.

Only when required. Payment processors need your name and transaction amount to clear deposits and withdrawals; regulators may request records during an audit; and fraud-prevention services check your IP and device fingerprint against known abuse patterns. We never sell your data to advertisers or share it for marketing purposes outside our own platform.

Essential cookies keep you logged in and remember your language preference; analytics cookies track which pages are slow so we can optimise them; and preference cookies save your favourite game filters. You can block non-essential cookies in your browser settings, though some convenience features will stop working if you do.

Log in, open account settings, and edit the field directly. We send a confirmation code to the new contact method before saving the change, so you stay in control even if someone else accesses your device. The update takes effect immediately once you enter the code.

We notify affected users within seventy-two hours, explain exactly what data was exposed, and outline the steps we are taking to secure the system. We also report the incident to Malaysian regulators as required by local data-protection law. Our encryption and tokenisation layers minimise the risk that stolen data can be read or used.