Rujukan Laman

How dato99 Protects Your Personal Data

Your personal data belongs to you, and we take that seriously. This Privacy Policy explains exactly what we collect when you use your dato99 account, how we store…

Data encrypted at restNo third-party data salesYour rights, clearly statedTouch 'n Go & GrabPay data handled securelyContact us anytime to request changes

Explore the Lobby Read FAQ

Data We Collect and Why We Collect It

dato99 Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

When you open an account with us, we collect your name, email address, contact number, and payment identifiers associated with Touch 'n Go, GrabPay, Boost dan FPX transactions. This lets us verify your identity, process withdrawals accurately, and keep your account secure. We also collect device

1
identifiers and session data to detect unusual login activity. We do not collect data beyond what is necessary to run your account and comply with applicable local law in Malaysia. Transaction records are retained for the period required under Malaysian financial regulation, after which they are
2
securely deleted. You can request a copy of what we hold at any time by writing to our data team.

Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

PRIVACY CONTACT PATHS

How to Reach Our Data Team

If you want to access, correct, or delete your personal data, or if you have any concern about how we handle your information, our dedicated data…

HOW WE HANDLE DATA

Our Six Data Handling Commitments

We built our data practices around what Malaysian account holders actually need to know: what is stored, how long it stays, who can see it, and how to change or remove it.

Encryption at Rest and in Transit

All personal data stored on our servers, including payment references from Touch 'n Go, GrabPay, Boost dan FPX, is encrypted using current-standard protocols. Data moving between your device and our servers is protected by TLS at all times.

Cookie Usage and Opt-Out

We use strictly necessary cookies to keep your session active and analytics cookies to understand how the account dashboard is used. You can manage non-essential cookie preferences from the cookie settings panel in your account at any time.

Account Security Practices

Your account is protected by password hashing and two-factor authentication options. We log every login attempt so that if unusual activity is detected, you receive an alert and we can freeze the session before any change is made.

Data Retention Schedule

We keep account registration data for as long as your account remains active. Payment transaction records are retained for the period required under Malaysian financial regulation. Once the retention period expires, data is permanently deleted from our systems.

Who Can Access Your Data

Your data is accessible only to dato99 staff who need it to process your account or verify a withdrawal. We do not sell, rent, or share your personal data with third-party marketing companies under any circumstances.

Requesting Corrections or Deletion

You have the right to request a copy of all data we hold, ask us to correct inaccurate records, or request deletion where local law permits. Submit your request via live chat or email and we will respond within five working days.

Frequently Asked Questions About This Policy

Below are the questions our account holders ask most often about how we handle personal data. If your question is not covered here, reach out through live chat or email and our data team will respond directly.

We collect your name, email address, phone number, and the payment identifiers linked to Touch 'n Go, GrabPay, Boost dan FPX transactions. We also collect device and session data to protect your account from unauthorised access.

We keep your account data for as long as your account is active. Payment transaction records are kept for the period required under Malaysian financial regulation. When retention periods expire, data is permanently and securely deleted from our servers.

Yes. Submit a data access request through live chat or email using the contact details in your account settings. We will compile and send you a copy of all personal data we hold within five working days of receiving your request.

Contact our data team via live chat or email, describe the correction or deletion you need, and provide your registered email for verification. We will process the request within five working days and confirm once the change has been made.

No. We do not sell, rent, or share your personal data with third-party advertisers or marketing companies. Data is shared only with payment processors like Touch 'n Go, GrabPay, Boost dan FPX to the extent needed to complete your transactions.

We use strictly necessary cookies to maintain your session and optional analytics cookies to improve the account experience. You can review and change your cookie preferences at any time through the cookie settings panel inside your account dashboard.

Contact us immediately via live chat and select the 'Account Security' topic. We can freeze your session, review recent login records, and help you reset your credentials. We log all login attempts so we can investigate promptly.

How dato99 Protects Your Personal Data

How to Reach Our Data Team

Our Six Data Handling Commitments

Encryption at Rest and in Transit

Cookie Usage and Opt-Out

Account Security Practices

Data Retention Schedule

Who Can Access Your Data

Requesting Corrections or Deletion

Frequently Asked Questions About This Policy

01 What personal data does dato99 collect when I open an account?

02 How long does dato99 keep my personal data?

03 Can I request a copy of the data dato99 holds about me?

04 How do I ask dato99 to correct or delete my personal data?

05 Does dato99 share my data with third parties or advertisers?

06 How does dato99 handle cookies on my account?

07 What should I do if I suspect unauthorised access to my account?

Related Pages