Reference

How mamak88 Collects and Protects Your Personal Data

When you open an account with us, we collect only what we need to run your wallet, verify your identity and process transactions through Touch 'n Go eWallet, Boost and GrabPay.

Account data handled securelyLocal e-wallet transaction recordsYour right to request data accessClear data retention periodsDirect contact for privacy queries
mamak88 How mamak88 Collects and Protects Your Personal Data
DATA HANDLING PRACTICES

How We Secure and Manage Your Account Data

Data security at mamak88 is built around specific controls rather than broad assurances. SSL encryption covers every page where account or payment data moves. We apply two-factor authentication at login so that your account cannot be accessed from an unrecognised device without an OTP sent to your registered number. Retention periods are set by transaction type — payment records are kept for the period required under applicable financial and legal obligations, then deleted. Cookie data from your browser session is cleared on a rolling basis unless you have opted to stay logged in.

SSL Encryption

Every account page and payment flow runs over SSL. Your Touch 'n Go eWallet, Boost and GrabPay transaction data moves encrypted end to end, not in plain text.

OTP Account Access

Logging in from a new device triggers an OTP to your registered number. This step cannot be bypassed, which means a stolen password alone is not enough to access your account.

Data Retention Limits

We do not hold your data longer than legally required. Payment references tied to GrabPay, DuitNow or FPX are retained for reconciliation, then purged on a defined schedule.

Third-Party Sharing Limits

We share data only with payment processors and fraud partners, and only the minimum fields each partner needs. No marketing data sales. No profiling outside your own account.

PRIVACY CONTACT PATHS

How to Reach Us About Your Personal Data

If you want to access the data we hold on your account, request a correction or ask us to delete specific records, our support team handles privacy requests separately from general account queries. Reach out through any of the channels below and identify your request as a data privacy matter so it is routed correctly. We aim to acknowledge your request within one business day and provide a substantive response within the timeframe required by applicable law.

Team online

Live Chat

Start a chat session from within your account dashboard. Label your message as a privacy request and our team will escalate it to the right department.

Email Support

Send your request to our privacy contact address listed in the account settings page. Include your registered account username for faster verification.

Account Help Centre

Log in, navigate to Account Settings, then select Data and Privacy. From there you can submit a formal data access or deletion request directly.

Common Questions About Your Privacy Rights on mamak88

These are the questions our account holders ask most often about how their personal data is handled. If your question is not covered here, use the live chat or Account Settings path described above to contact us directly.

We collect your name, email address, phone number and account credentials at registration. Once you transact, we also record payment references from Touch 'n Go eWallet, Boost or GrabPay — but never your full wallet credentials or PIN.

Yes. Log in, go to Account Settings and select Data and Privacy, then submit a data access request. We acknowledge requests within one business day and respond within the period required by applicable Malaysian law.

No. We do not sell, rent or trade your personal data. We share minimum necessary fields with payment processors and fraud-screening partners only to complete your transactions and keep your account secure.

Payment references are kept for the period required under applicable financial regulations, then deleted on a defined schedule. We do not retain transaction data beyond what the law requires us to hold.

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You can manage cookie preferences through your browser settings. Disabling analytics cookies does not affect your ability to log in or transact.

Send a correction or deletion request via live chat or the Account Settings privacy form. Label it clearly as a data privacy request. We will confirm receipt and process it within the timeframe required under applicable law.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.