Reference

How mrtm888 Handles Your Personal Information

When you open an account with us and fund it via Touch 'n Go eWallet, Boost, or GrabPay, you share certain personal details — and this page explains exactly what we collect, why we keep it, and how you can ask us to change…

No third-party data salesAccount data onlyYour rights, clearly statedContact us to request changes
mrtm888 How mrtm888 Handles Your Personal Information
HOW WE PROTECT IT

Data Handling, Cookies, Security and Retention

We keep your data within systems that apply access controls and encryption in transit. Account login uses a one-time PIN sent to your registered mobile number, so no one else can access your account even if they know your password. Our retention schedule removes inactive account data after the legally required holding period has passed — we do not keep records indefinitely.

Encrypted in Transit

All data moving between your device and our servers — including wallet transaction references from Touch 'n Go eWallet or Boost — travels over an encrypted connection.

Cookie Controls

Our site uses session cookies for login state and preference cookies for language settings. You can clear or block these in your browser; functional account cookies are required for the account pages to work.

Account Access Verification

Every login triggers a one-time PIN to your registered number. If you suspect unauthorised access, contact our live chat immediately and we will lock the account while we verify.

Defined Retention Period

We hold your account data only for as long as your account is active or as required by applicable financial regulations. Once that period ends, records are removed from our active systems.

PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to review what data we hold, correct an inaccuracy, or ask us to delete your account information, use any of the channels below. We aim to acknowledge your request within one business day and complete it as quickly as the verification process allows. Requests relating to payment data — for example, a transaction made via Boost or GrabPay — may require us to confirm your account identity before we can act.

Live Chat Start a live chat session from the account page. Describe your data request clearly so our team can pull the right records and respond without delays.
Email Support Send your privacy request by email with your registered contact number and a short description of what you need changed, reviewed or removed from our records.
Account Help Desk Log in, go to account settings, and use the help desk form. This routes your request directly to the team that manages data and account verification.

Common Questions About Our Privacy Policy

These are the questions our account holders ask most often about how we handle personal information. If your question is not covered here, use the live chat or email channel listed in the contact section above.

We collect your name, email, mobile number, and the payment method you use — such as your Touch 'n Go eWallet or Boost-linked number — along with transaction references needed to match deposits to your account.

We do not sell or share your personal data with third parties for marketing. Payment details pass only to the payment processor handling your specific transaction — for example, GrabPay or DuitNow — and no further.

Your data is held while your account is active and for the period required by applicable financial record-keeping rules. Once both conditions are met, records are removed from our active systems.

Yes. Submit a deletion request via live chat or email with your registered details. We will verify your identity first, then remove the data that is not subject to a mandatory retention obligation.

We use session cookies to keep you logged in and preference cookies to remember your language choice. You can block non-essential cookies in your browser settings; core account cookies are needed for the account pages to load correctly.

Transaction references from GrabPay, FPX or Maybank2u are stored solely to reconcile your account balance and resolve any deposit or withdrawal queries. They are not used for profiling or shared outside the processing chain.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.