Rujukan Laman

Open your privacy picture with pphoki

pphoki keeps your account, wallet and support data under a clear Privacy Policy, with Malaysia payment context such as Touch 'n Go, GrabPay, Boost dan FPX handled as…

Malaysia privacy scopeTouch 'n Go recordsGrabPay data contextCookie choicesBoost dan FPX records
pphoki Open your privacy picture with pphoki
CONTACT PATHS

Check your privacy contact routes

Privacy questions should reach a person who can trace your account record without exposing extra data.

Privacy chat Use live chat when you are signed in and need help with access, correction or cookie questions. Our team will verify your account first, then move sensitive privacy requests into a secure ticket when needed.
Privacy email Email [email protected] if you want a written record of your request. Include your account email and the request type, but keep card numbers, bank passwords and private codes out of the message.
Wallet data ticket Open a wallet ticket for a payment-data query involving Touch 'n Go, GrabPay, Boost dan FPX. Add the transaction reference and date so we can locate the record without asking for unrelated details.
ACCOUNT CARE

Browse the controls behind your data

Data controls work quietly in the background, but you should know what they do. We separate account identity, wallet history, cookie logs and support transcripts so a request can be handled by…

Data collection

We collect account details you provide, device signals needed for security, wallet references and support messages. Each category must relate to account access, fraud checks, service delivery, legal duties or your own privacy request.

Cookie controls

Cookies help remember language choice, session status and risk signals, while analytics tags show which privacy pages are being read. You can adjust browser settings, but some security cookies are needed for account access.

Account security

Account access is protected with password checks, session controls and alerts when activity looks unusual. We restrict staff access to personal data by role, and sensitive payment records are viewed only when a case requires it.

Retention rules

We keep records only for the period needed for account operation, dispute handling, fraud checks and legal duties. When that reason ends, data is deleted, anonymised or placed beyond routine staff access.

Limited sharing

We share data only with service providers, payment processors, fraud-prevention tools, advisers or authorities when needed. They receive the relevant record, not your full account file, unless law or a dispute requires more.

Change requests

You can ask us to correct details, send a copy of eligible records or delete data where the law allows. We may refuse requests that harm security, conflict with legal duties or affect another person.

Discover answers about your privacy rights

These answers focus only on Privacy Policy matters, including what we collect, why we keep it and how you can reach us. They are written for Malaysia in plain English, but they do not replace legal rights you may have under local law. If your account facts differ, our privacy team will answer from your actual record. Use them before you open an account or whenever your details change.

We collect the details you give during account opening, account checks, wallet activity, support chats and cookie sessions. That can include name, contact details, device data, payment references and messages you send to us.

Payment records help us match Touch 'n Go, GrabPay, Boost dan FPX transfers to your wallet, answer disputes and meet legal record duties. We do not publish wallet activity or use it as public profile content.

Yes, you can ask for a copy of eligible records or ask us to correct details that are wrong. We may need to verify your account first so we do not send data to the wrong person.

Cookies keep your session active, remember language choices, support security checks and help us measure whether privacy pages are working. You can manage cookies in your browser, although some are needed for account access.

We share data with payment processors, hosting services, fraud tools, advisers or authorities only when needed for account operation, security, disputes or legal duties. Each sharing step is kept narrower than the full account file where possible.

Retention depends on the record type and the reason it was collected. Wallet records, identity checks and support transcripts may follow different periods because disputes, fraud checks and legal duties do not end at the same time.

You can request deletion where local law permits and no active legal, security or payment reason requires retention. If we cannot delete everything, we will explain the record category and the reason it must remain.