Reference

How wangi88 Handles Your Personal Information

When you open an account with wangi88, we collect only the data we need to run your account, process your deposits via Touch 'n Go eWallet, Boost or GrabPay, and keep your session secure.

Data collected only as neededLocal payment context: Touch 'n Go eWallet, Boost, GrabPayYour rights, clearly explainedContact path for data requests
wangi88 How wangi88 Handles Your Personal Information
HOW WE PROTECT YOUR DATA

Data Handling, Cookies and Account Security

We use a combination of technical controls and access policies to keep your information safe. Your account password is stored in hashed form — we never see the plain text. Session tokens expire after a period of inactivity, so leaving your account idle on a shared device does not leave it permanently open. We keep transaction records, including your Touch 'n Go eWallet and GrabPay deposit history, for as long as required to operate your account and meet any applicable record-keeping obligations. Once that period passes, data is deleted or anonymised.

Cookies and Tracking

We use cookies to keep you logged in and to remember your lobby preferences. You can clear cookies through your mobile browser settings, though doing so will log you out.

Account Security Controls

Every login triggers an OTP to your registered mobile number. If you notice a login you did not make, contact us immediately through live chat for an account freeze.

Data Retention

Account and transaction data — including Boost and DuitNow records — is kept for as long as your account is active and for any period required after closure by applicable rules.

Who Has Access

Internal access to your personal data is limited to staff who need it to process your account, handle a support request or investigate a security event on your account.

DATA REQUEST CHANNELS

How to Reach Us About Your Privacy

If you want to access, correct or delete the personal data we hold on your account, reach us through any of the channels below. For account-specific requests — such as updating your registered mobile number or requesting a data export — our live chat is the quickest route. Email works well for written records. We aim to acknowledge every privacy-related request within one working day and resolve it as soon as we have verified your identity.

Live Chat Available from inside your account dashboard. Start a chat session and select the privacy or account category to reach the right team quickly.
Email Support Send your request to our support address with your registered account email in the subject line. Useful for written data-access or deletion requests.
Account Verification Path Before we action any data change, we verify your identity via your registered mobile number OTP. This step protects your account from unauthorised requests.

Common Questions About Your Privacy at wangi88

These are the questions we hear most often from account holders in Malaysia about how their data is collected, stored and managed. If your question is not covered here, reach us through live chat or email and we will respond as soon as your identity is verified.

We collect your name, email address, mobile number and a password you choose. We also log your IP address and device type at registration for security purposes.

We store only the transaction reference and amount confirmed by the payment gateway. Your e-wallet login credentials and PIN are never visible to or stored by us.

Yes. Send a data-access request via email or live chat using your registered account email. We verify your identity by OTP before releasing any account data export.

Contact us through live chat or email, confirm your identity via OTP, and request account closure with data deletion. Some records may be retained as required by applicable rules.

We do not sell or share your personal data for third-party marketing. Payment processors handling GrabPay, DuitNow or FPX transfers receive only what they need to clear your transaction.

Records are kept for as long as your account is active and for any post-closure period required by applicable record-keeping obligations, after which data is deleted or anonymised.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.