Reference

What gx88 Does With Your Personal Information

When you use gx88 — whether you're checking your account wallet, moving funds through Touch 'n Go eWallet, or browsing from Kota Bharu — certain information passes through our systems.

Account data handled with careLocal payment data: Touch 'n Go eWallet, Boost, GrabPayYour rights to access and correct dataClear retention and deletion termsContact path for privacy queries
gx88 What gx88 Does With Your Personal Information
PRIVACY CONTACT PATHS

How to Reach Us About a Privacy Matter

If you want to request a copy of your data, ask us to correct something on file, or raise a concern about how we've handled your information, our account support team is the right starting point. Reach us through live chat, email or the in-account help form — whichever works for you at that moment. We aim to acknowledge privacy requests within one working day and resolve straightforward queries promptly.

Live Chat Start a chat session from your account dashboard. Our support team handles privacy queries directly — no need to navigate through unrelated help topics first.
Email Support Send your data request or correction notice to our support email address, which is listed inside your account settings under the Help section.
In-Account Help Form Log in, open the Help tab and select Privacy Request. This routes your submission directly to the team responsible for data and account matters.
DATA HANDLING PRACTICES

How We Protect and Manage Your Account Data

Data protection at gx88 is not a checkbox — it shapes how we build account flows, store payment references and respond to access requests. The four areas below cover the parts of our data practice that matter most to you as an account holder.

Account Security

Your account is protected by password hashing and session-based authentication. We flag unusual login activity — such as a new device or unfamiliar location — and may prompt OTP verification before access is granted.

Cookie Use

We use session cookies to keep you logged in and preference cookies to remember your language and display settings. Analytics cookies help us understand which features are used most — you can adjust cookie settings in your browser at any time.

Data Retention

Account data is kept for as long as your account is active. If you close your account, we retain transaction records for the period required by applicable Malaysian financial regulations, then delete or anonymise remaining personal data.

Correction and Access Rights

You can view and update most of your personal details directly inside your account profile. For changes to identity-verified fields — such as your registered name or ID number — contact support with the relevant documentation.

Common Questions About Your Data and Privacy Rights

The questions below cover what we get asked most about how gx88 collects, uses and protects your personal information. If your question is not here, use the live chat or in-account help form to reach our team directly.

We collect your name, email address, phone number, date of birth and the payment method you use to fund your account — for example, Touch 'n Go eWallet or Boost. We also record your device type and session activity to monitor account security.

No. When you transact through Touch 'n Go eWallet, GrabPay or Boost, the payment is processed by the respective payment provider. We receive only a transaction reference number — never your wallet PIN or login credentials.

Yes. Submit a data access request through the in-account Help form or by emailing support. We will compile and send you a summary of the personal data we hold within a reasonable timeframe.

Standard details like your contact number or email can be updated directly in your account profile. For identity-verified fields — such as your registered name — contact support and provide the relevant documentation for review.

We keep your data while your account is active. After closure, transaction records are retained for the period required under applicable Malaysian regulations. Non-essential personal data is deleted or anonymised once that period ends.

We share data only where necessary — with payment processors to verify transactions or with security services to investigate suspicious account activity. We do not sell your data. Any third party we work with must handle data to the same standard we apply internally.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.