Reference

How woy99 Handles Your Personal Information

This Privacy Policy sets out exactly what data we collect when you use your woy99 account, how we use it, and what rights you have over it.

Account data protectionTouch 'n Go eWallet & Boost payment recordsYour right to access or remove dataCookie and device tracking clarityDirect contact for data requests
woy99 How woy99 Handles Your Personal Information
HOW WE PROTECT IT

Data Handling, Cookies and Account Security

We apply access controls and encryption to your stored account data. Session tokens expire after inactivity so that a logged-out phone screen does not leave your account open. We keep data only for as long as it is needed for account operation or to meet legal obligations under Malaysian law.

Cookie Use

We use session cookies to keep you logged in across page loads and analytics cookies to understand how pages perform. You can disable non-essential cookies from your browser settings at any time.

Payment Data Security

Transaction references from Touch 'n Go eWallet, Boost and GrabPay are stored in encrypted form. We never share your payment details with third parties outside of fraud checks required by the payment provider.

Data Retention

Account records are kept while your account is active. If you close your account, we retain transaction logs only for the period required by applicable Malaysian regulations, then delete them.

Requesting Changes

You can request correction or removal of personal data by contacting support via live chat or email. We aim to complete valid requests within a reasonable timeframe and will confirm once done.

REACH OUR TEAM

How to Contact Us About Your Privacy

Have a question about the data we hold on your account, or want to update the contact details tied to your Touch 'n Go eWallet deposits? Our support team handles privacy requests directly. Reach out through any of the channels below and we will respond with the specific data point or action you need.

Team online

Live Chat

Start a chat session from your account dashboard. Identify yourself with your registered email and we will pull your data record for review or deletion requests.

Email Support

Send your privacy request to our support email. Include your account username and the specific data category — payment records, device logs, or account details — so we can respond accurately.

Account Settings

Some data preferences — like marketing opt-outs and linked payment methods such as Boost or GrabPay — can be updated directly inside your account settings without contacting support.

Common Questions About Your Data Rights

These are the questions we hear most often about how woy99 handles personal information. If something specific to your account is not covered here, our support team can walk you through the exact data point you are asking about.

We collect your name, email address, phone number and the payment method you link — such as Touch 'n Go eWallet or Boost. Device identifiers and session logs are also captured at login.

Yes. Contact our support team via live chat or email, confirm your registered account details, and we will provide a summary of the personal data categories we hold for you.

We do not sell your data. Payment references from GrabPay, Boost or DuitNow transfers are shared only where a payment provider requires it for fraud prevention or transaction verification.

Send a deletion request through live chat or email. We will remove personal data that is not subject to a retention requirement under Malaysian law and confirm completion to you directly.

Session cookies keep your login active while you browse. Analytics cookies help us see which pages load correctly on mobile. You can block non-essential cookies from your browser settings without losing account access.

We deactivate your account and delete profile data. Transaction logs, including FPX and Touch 'n Go eWallet records, are retained only for the period required by applicable Malaysian regulations, then removed.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.