Reference

What klwinmy Does With Your Personal Information

Every account you open with us carries personal data — your name, contact details, and payment activity across Touch 'n Go eWallet, Boost, and GrabPay.

Data collected only for account and payment purposesNo third-party sale of your personal detailsTouch 'n Go eWallet, Boost, GrabPay activity handled securelyYou can request access or deletion at any timePolicy applies where local law permits
klwinmy What klwinmy Does With Your Personal Information
HOW WE PROTECT IT

Data Handling, Cookies, Security and Retention

Our approach to your data is built around four areas: what we store, how long we store it, how we protect it in transit and at rest, and how you can act on your rights. Each area is handled separately so that a change in one — say, you asking us to delete your marketing profile — does not disrupt your active account or your payment history where retention is legally required.

Cookies and Session Tracking

We use cookies to keep your session active and remember your payment method preference, such as Touch 'n Go eWallet or Boost. You can adjust cookie settings in your browser without losing your account access.

Account Security Practices

Login events are monitored for irregular patterns. If an unfamiliar device or location attempts access, we flag it before it reaches your account. OTP verification adds a second layer on sensitive actions.

Data Retention Schedule

Account registration data is held while your account is active. Transaction records linked to GrabPay, DuitNow or FPX transfers are retained for the period required by applicable law, then deleted.

Your Rights and How to Use Them

You can request a copy of your stored data, ask us to correct inaccurate details, or request deletion of non-essential records. Submit these requests through live chat or email; we respond within a reasonable timeframe.

PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you have a question about your personal data, want to update the details on your account, or need to raise a privacy concern, our support team handles these requests directly. You do not need to go through a form — contact us through any of the channels below and state your request clearly so we can act on it without delay.

Team online

Live Chat

Open the live chat window from your account page. Available for account, payment and privacy queries. Identify your request as a data matter so the right team picks it up.

Email Support

Send your data request or privacy question to our support email address. Include your registered account email and the nature of your request for a faster response.

Account Help Desk

For account verification issues, data correction or deletion requests, the account help desk handles these separately from general support to keep your case on record.

Common Questions About Your Privacy on klwinmy

These are the questions we actually get asked about data, cookies and account privacy. Each answer reflects how we handle things on this platform — not a generic template response.

We collect your name, email, phone number, device type and payment method details. If you use Touch 'n Go eWallet or Boost, the transaction reference is recorded but your full wallet credentials are never stored on our side.

We do not sell your data. Payment processors handling GrabPay, DuitNow or FPX transfers receive only what is needed to complete the transaction, under a binding data processing agreement.

Active account data is held while your account remains open. Once you close your account, non-essential data is deleted. Transaction records are kept for the period required by applicable financial compliance rules.

Yes. Contact us via live chat or email with your registered account email and request a data copy. We will compile your stored records and send them to your registered address within a reasonable timeframe.

Send a deletion request through live chat or the support email. We will remove non-essential records. Transaction data required by law will be retained for the mandatory period, then deleted as scheduled.

We use cookies for session management and payment preference memory, such as your last-used wallet. You can disable non-essential cookies in your browser settings; core account functionality continues to work.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.