Reference

How waja66 Handles Your Personal Information

Your account with waja66 — from the moment you register to every deposit you make via Touch 'n Go eWallet, Boost or GrabPay — involves personal data we take seriously.

Account data handled with careLocal payment data protectedYour rights, clearly statedContact us to access or delete your data
waja66 How waja66 Handles Your Personal Information
DATA HANDLING STANDARDS

How We Protect and Manage Your Information

We apply SSL encryption to every session on waja66 — whether you are logging in, making a Touch 'n Go eWallet deposit or reviewing your account history. Beyond encryption in transit, account passwords are stored in a hashed format, meaning our own staff cannot read them. We also review access logs regularly to flag any sign-in patterns that do not match your usual device or location. Data retention is tied to account status: active accounts retain records for as long as you hold the account; closed accounts are subject to the minimum retention period required under applicable Malaysian regulations, after which personal data is deleted or anonymised.

Encryption on Every Session

SSL encryption covers all account activity — from login through to payment confirmation — so your data moves securely whether you use mobile or desktop.

Cookie and Tracking Transparency

We use session cookies to keep you logged in and analytics cookies to understand how pages perform. You can manage cookie preferences through your browser settings at any time.

Account Security Controls

OTP verification is required when you log in from a new device. If we detect an unfamiliar login pattern, we flag the session and prompt re-verification before account access continues.

Your Right to Request Changes

You may request a copy of your stored data, ask us to correct inaccurate details or request deletion of your account data. We process these through our support channels listed above.

PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to access the personal information we hold on your account, request a correction or ask us to delete your data, our support team handles these requests directly. You can reach us through live chat on the waja66 website, by email at the address listed in your account portal, or through the in-app messaging option available on mobile. We aim to acknowledge every privacy-related request within one working day and respond fully as quickly as your request allows.

Live Chat Reach us through the live chat widget on the waja66 site — available for account and data queries, including requests to access or update your personal information.
Email Support Send your privacy request by email to the address shown inside your account portal. Include your registered contact number so we can verify your identity before responding.
In-App Messaging Open the waja66 app on your phone and use the messaging option under Account Settings to submit a data request without leaving the mobile interface.

Common Questions About Your Privacy at waja66

Real questions about how your data is used, stored and protected — answered plainly so you know exactly where you stand.

We collect your name, email address, phone number and the payment details linked to your preferred method — such as your Touch 'n Go eWallet or GrabPay reference. We also log device and session data automatically.

We share data only with the payment processors needed to clear your transaction — for example, Boost or DuitNow — and only the minimum information required. We do not sell your data to advertisers or marketing lists.

Once your account is closed, we retain records for the minimum period required under applicable Malaysian regulations. After that, your personal data is deleted or anonymised in line with our retention schedule.

Yes. Contact our support team via live chat or email using the address in your account portal. Verify your identity with your registered phone number and we will prepare your data summary.

Session cookies keep your login active during a browsing session. Analytics cookies help us understand which pages perform well on mobile. You can disable non-essential cookies through your browser or device settings at any time.

Use in-app messaging or email support to flag the incorrect detail. We verify your identity first, then update the record and confirm the change to you — typically within a few working days.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.