Reference

How deluxe77 Handles Your Personal Data

When you open an account with us, we collect only what we need to run your account and process your payments via Touch 'n Go eWallet, Boost, or GrabPay.

Account data handled with careLocal payment data protectedYour access rights explainedContact path for data requests
deluxe77 How deluxe77 Handles Your Personal Data
REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

If you have a question about how your data is handled, want to correct something on your account, or need to submit a formal data request, our support team is the right starting point. You can reach us through live chat on the site, by email, or through the in-account help centre. We aim to respond to all data-related enquiries within a reasonable timeframe and will confirm receipt of your request.

Team online

Live Chat

Start a live chat session from the account page. Describe your data concern and our team will log it and respond directly in the same session or by follow-up.

Email Support

Send your data request or privacy question to our support email. Include your registered account name so we can locate your records without delay.

In-Account Help Centre

Log in and navigate to the Help section. Submit a ticket under the Account and Data category — it routes directly to the team handling privacy matters.

DATA HANDLING STANDARDS

How We Protect and Manage Your Information

Data security is built into how your account works, not bolted on afterwards. From the moment you verify your account to every deposit you make via local wallet, we apply consistent controls across the account lifecycle. Here is what that looks like in practice.

Account Security

Your account login uses OTP verification to confirm it is you. Sessions are monitored for unusual access patterns, and suspicious activity triggers an automatic account review before any action is taken.

Cookie Controls

We use session cookies to keep you logged in and functional cookies to remember your wallet preference — such as Touch 'n Go eWallet or Boost. You can adjust cookie settings from your browser at any time.

Data Retention

Account records are kept while your account is active and for a defined period after closure for audit purposes. Payment references tied to GrabPay, DuitNow or FPX transactions are retained in line with financial record-keeping requirements.

Your Access Rights

You have the right to request a copy of the data we hold about you, ask us to correct inaccurate details, or request deletion where the law allows. Submit any of these through our support channels.

Common Questions About Your Data and This Policy

These are the questions we hear most from our account holders in Malaysia about how their personal information is handled. If your question is not here, contact our support team directly.

We collect your name, email address, phone number and a password hash. No payment credentials are stored at registration — those are only captured when you make a deposit.

We store the transaction reference number to match your deposit to your account. We do not store your full wallet login, PIN or linked card details from Touch 'n Go eWallet or Boost.

Access is restricted to staff directly involved in processing your payments or resolving a support ticket. General staff do not have access to your full account or payment history.

Log in and raise a ticket under Account and Data in the Help Centre, or send a request via our support email with your registered account name. We will confirm receipt and provide your data within a reasonable timeframe.

Yes. You can request deletion of your personal data by contacting our support team. We will process the request where local law permits and inform you if any data must be kept for audit or compliance reasons.

We share only the minimum required with payment processors such as DuitNow, FPX and GrabPay to complete transactions. We do not sell or trade your personal data to any outside party.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.