Reference

How aa67 Handles Your Personal Information

When you open an account with us or move money through Touch 'n Go eWallet, Boost, or GrabPay, we collect certain details to make that work.

Account data kept secureTouch 'n Go eWallet, Boost, GrabPay transaction recordsNo data sold to third partiesYour rights, clearly stated
aa67 How aa67 Handles Your Personal Information
DATA HANDLING PRACTICE

How We Protect and Manage Your Information

Cookies and Session Tracking

We use session cookies to keep you logged in and analytics cookies to understand how the platform is used. You can manage cookie preferences from your device browser settings at any time.

Account Security

Every login triggers an OTP check sent to your registered mobile number. If a login attempt comes from an unfamiliar device, we flag it and require additional verification before access is granted.

Data Retention

We hold your account records for as long as your account is active and for any period required by applicable law in Malaysia after closure. Payment records linked to Touch 'n Go eWallet or Boost are retained per payment processor requirements.

Requesting Changes

You can request a copy of your data, ask us to correct inaccurate details, or request deletion of your account. We respond to verified requests through the same channel you used to contact us.

REACH THE PRIVACY TEAM

How to Contact Us About Your Data

Team online

Live Chat

Open the live chat window inside your account. For data-related questions, select 'Account & Privacy' from the topic menu so our team routes your message correctly.

Email Support

Send a written data request to our support address. Include your registered contact detail and the specific action you are requesting — access, correction or deletion.

Account Settings

Some changes — like updating your contact number or linked e-wallet — can be made directly inside your account settings without contacting support at all.

Common Questions About Your Privacy Rights

If you have a question about how we handle your data that is not covered below, contact us through live chat or email and reference 'Privacy Request' in your message so it reaches the right team quickly.

We collect your name, contact details, device identifiers and the payment method you register — such as Touch 'n Go eWallet, Boost, or GrabPay — along with transaction references generated each time you deposit or withdraw.

We share data only with payment processors — like those handling your GrabPay or Boost transactions — and only to complete that specific transaction. We do not sell or rent personal data to marketing lists or unrelated third parties.

Contact us via live chat or email, select the privacy topic, and confirm your registered account details. We process verified data access requests and deliver results through the same contact channel you used.

Yes. Submit a deletion request through live chat or email. We will remove your account data subject to any legal retention obligations under Malaysian law that require us to keep certain payment or identity records for a set period.

Every login uses a one-time PIN sent to your registered mobile number. An unfamiliar device triggers additional verification before the session opens. We recommend keeping your registered number up to date in account settings.

Yes — the same data practices apply whether you access the platform from Johor Bahru, Shah Alam, or anywhere else in Malaysia where access is permitted under local law. Eligibility depends on your local jurisdiction.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.