Reference

How mx66 Handles Your Personal Information

When you open an account with us, you share information — and we take that seriously. This Privacy Policy sets out exactly what data we collect, why we collect it, how it is stored, and what rights you hold over it, including where local…

Account data kept secureLocal payment data protectedYour right to request accessClear data retention termsContact us to update your records
mx66 How mx66 Handles Your Personal Information
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you have a question about the data we hold, want to correct an entry, or need to understand how a specific transaction record was stored, our support team handles privacy requests directly. Whether you are reaching us from Kota Bharu or anywhere else in Malaysia, the same contact paths apply — and we aim to respond to data-related queries within the timeframe required under applicable law.

Live Chat Start a live chat session from the account dashboard. Identify your query as a privacy request and our team will escalate it to the right person within the session.
Email Support Send your data request to our support email address. Include your registered account name and the specific information you are asking about for a faster response.
Account Help Centre Log in to your account and navigate to Help — Privacy Request. Submit your query directly from within the account portal so we can verify your identity without extra steps.
HOW WE PROTECT YOU

Data Handling, Cookies and Account Security

Every piece of data connected to your mx66 account — from your contact details to your GrabPay deposit records — is stored using SSL encryption. We review our data-handling processes regularly and update them when our technical setup or applicable Malaysian law changes. Your account security depends on both our infrastructure and the steps you take, such as using a unique password and enabling any two-factor verification we support.

Cookies and Session Tracking

We use session cookies to keep your account active and analytics cookies to understand how the platform is used. You can adjust cookie preferences from your browser settings at any time without losing your account data.

Payment Data Retention

Transaction records linked to Touch 'n Go eWallet, Boost and GrabPay deposits are retained for the period required by applicable law. After that window closes, identifiable payment data is removed from active systems.

Account Security Practices

Your login credentials are stored in hashed form — we cannot read your password. If we detect unusual login activity on your account, we will send a verification prompt to your registered contact before access continues.

Requesting Data Changes

To correct, update or request deletion of personal information, contact support through live chat or email. We verify your identity first, then process the change within the legally required timeframe.

Common Questions About Your Privacy on mx66

These are the privacy questions we hear most often. If your question is not here, reach us through live chat or the account help centre and we will give you a direct answer specific to your account situation.

We collect your name, contact details, date of birth, and the payment method you connect — for example, your Touch 'n Go eWallet or Boost account reference. We do not store wallet PINs or full credentials.

Yes. Submit a data-access request through live chat or email, verify your identity, and we will provide a summary of the personal information linked to your account within the required timeframe.

We keep your account records and payment transaction history — including GrabPay and DuitNow transfers — for as long as applicable Malaysian law requires. After that retention period, identifiable data is removed.

We share data only with payment processors and identity-verification partners who need it to complete your transactions. Those partners are bound by data-protection obligations. We do not sell your data to advertisers.

Contact support via live chat or email, state that it is a privacy request, and confirm your registered account details. We process correction and deletion requests after verifying your identity.

Closing your account does not immediately erase all records. We retain certain data — such as transaction history — for the period required by law, then remove identifiable personal information from active storage.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.