Reference

How duit888 Handles Your Personal Information

This Privacy Policy explains exactly what data we collect when you open an account, fund it through Touch 'n Go eWallet, Boost, or GrabPay, and use the platform — and what we do with that data.

No data sold to third partiesTouch 'n Go eWallet, Boost, GrabPay — payment data handled securelyYour account data is yours to accessContact us anytime to update or remove your details
duit888 How duit888 Handles Your Personal Information
HOW WE PROTECT YOU

Data Handling, Cookies, Security and Retention

We apply practical, layered measures to protect your account information at every stage — from the moment you fund your account to when you request a withdrawal. Here is how each layer works and what it means for your data.

Account Security

Your account is protected by password hashing and OTP verification steps at login. We flag logins from unrecognised devices and notify you by email so you can act quickly if something looks off.

Cookies and Session Data

We use session cookies to keep you logged in across pages and analytics cookies to understand which parts of the platform you use most. You can manage cookie preferences through your browser settings at any time.

Data Retention

We keep your account data for as long as your account is active and for the period required by applicable financial record-keeping rules. Once you request closure and the retention period passes, we delete your personal records.

Requesting Changes

To correct inaccurate details, update your registered contact number, or request a copy of the data we hold on you, reach out via live chat or email — we process these through a standard identity verification step before making any changes.

REACH OUR TEAM

Contact Us About Your Privacy Rights

If you want to access, correct, or request deletion of your personal data, our support team handles these requests directly. Reach us through live chat on the platform, by email, or via the account help section inside your profile. We aim to respond to data-related requests within a reasonable timeframe and will confirm receipt of your request before acting on it.

Team online

Live Chat

Start a live chat session from your account dashboard. Our team can verify your identity and log a data access or correction request on the spot.

Email Support

Send your privacy request to our support email address. Include your registered account name so we can locate your record and respond accurately.

Account Help Section

Log in, go to Account Settings, and select Help. From there you can submit a formal data inquiry without needing to contact support separately.

Your Privacy Questions, Plainly Answered

These are the questions we hear most often about how duit888 handles personal data. If yours is not here, our support team can answer it directly through live chat or email.

We collect your name, email address, contact number, and the payment reference details tied to your deposit method — such as your Touch 'n Go eWallet or Boost transaction ID — along with device and IP data for security purposes.

We store the transaction reference and method type (e.g. GrabPay, DuitNow) for record-keeping. We do not store your full e-wallet credentials — those stay within the respective payment provider's own secure environment.

Yes. Submit a data access request through live chat or our support email. After we verify your identity against your registered account, we will compile and share the relevant information with you.

Request account closure and data deletion via the Account Help section or by contacting support directly. We process the request after identity verification and fulfil deletion once the mandatory financial retention period has passed.

We only share data with payment processors like GrabPay, FPX, and Maybank2u — and only what is strictly needed to complete your transaction. We do not sell or rent your data to unrelated third parties.

Yes. Analytics cookies can be disabled through your browser's cookie settings. Disabling them does not affect your ability to log in or use your account — only our ability to track aggregate usage patterns is reduced.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.