Rujukan Laman

Privacy Policy for your mbahtoto account

mbahtoto keeps your account, wallet and lobby privacy choices on one page, including how we collect sign-in data, cookie signals and payment records tied to Touch 'n Go…

Account dataCookie choicesMalaysia contactsTouch 'n Go context
mbahtoto Privacy Policy for your mbahtoto account
CONTACT ROUTES

Reach us about privacy matters

Privacy questions should reach the team that can read account logs, payment references and device records without asking you to repeat private details in a public space.

Live chat privacy desk Open live chat and ask for privacy help. We may request your account ID, recent login time or payment reference, then move sensitive follow-up to a safer channel when needed.
Email data team Send privacy requests by email when you need a written record. Include your registered phone or email, the request type and any local payment reference that helps us confirm ownership.
Account centre request Use the account centre for profile corrections, cookie preference changes and wallet detail checks. Signed-in requests help us verify you faster and reduce the amount of extra data we ask for.
ACCOUNT SAFETY

How we handle your account data

We treat privacy as part of account operation, not a separate promise hidden at the bottom of the site.

Collection mapping

We map data to the action that created it, such as account opening, sign-in, wallet use or support contact. That helps us avoid asking for details we do not need.

Cookie control

Cookies remember sessions, language choices and risk signals. You can adjust browser settings, but some cookies are needed for sign-in, account protection and keeping wallet pages working correctly.

Payment records

Touch 'n Go, GrabPay, Boost dan FPX references help us match deposits, confirm withdrawals and handle disputes. We store payment records separately from public-facing profile details.

Access security

We use sign-in logs, device signals and verification checks to protect your account. If access looks unusual, we may pause account changes until ownership is confirmed.

Retention checks

Some records are kept while your account is active, while finance and security records may remain longer where required. When retention no longer applies, we remove or anonymise data.

Correction requests

You can ask us to correct profile details, update contact data or check payment references linked to your account. We may verify identity before making privacy-related changes.

Privacy questions before you join

Before you open an account, you may want to know what happens to your details after a form is submitted, a cookie is accepted or a payment reference is created. These answers explain the privacy parts that usually matter first: collection, sharing, retention, access, correction and contact paths. If your question depends on your account history, contact us after signing in so we can answer against your records.

We collect details needed to create and protect your account, such as contact data, sign-in records, device signals and wallet references. We also store support messages when you contact us.

Local payment references help us match deposits, verify withdrawals, answer disputes and trace wallet activity. We keep the record tied to your account rather than showing it across public site areas.

Yes. Send the correction through the account centre, live chat or email. We may ask for account identifiers or recent activity details before changing data that affects access or wallet records.

We share limited data with service providers that help with payments, identity checks, security, hosting and support tools. They receive only what is needed for the task they perform.

Retention depends on the record type. Account data usually stays while your account remains active, while finance, security and dispute records may stay longer where law or risk controls require it.

Contact us by email or live chat and explain that the request is privacy-related. We will ask for limited verification details before discussing data, profile changes or payment references.

Cookies keep sessions active, remember preferences and help detect risky access. You can manage many cookies through your browser, but disabling required cookies may affect sign-in and wallet pages.