Reference

How o00 Handles Your Personal Information

We built this policy to be readable, not just legal. It tells you exactly what we collect when you use your account, fund it via Touch 'n Go eWallet, Boost, or GrabPay, and how we keep that data secure.

Account data protectionLocal payment privacyCookie controlsYour access rightsData retention limits
o00 How o00 Handles Your Personal Information
DATA HANDLING DETAIL

How We Protect and Manage Your Information

Security and transparency are not afterthoughts in how we run your account. Each area below reflects a specific practice we apply consistently — from the moment you log in on mobile to the point a withdrawal clears back to your wallet.

Account Security

Login sessions are protected with OTP verification. If a new device attempts access, a confirmation step is required before the account opens — no silent logins from unknown browsers.

Cookie Controls

We use functional cookies to keep your session alive and analytics cookies to understand lobby usage. You can adjust cookie preferences from your account settings at any time.

Payment Data Handling

Payment details for Touch 'n Go eWallet, Boost, and GrabPay are passed directly to the payment processor over an encrypted connection. We do not store your full wallet credentials on our servers.

Data Retention

We hold transaction records for the duration required by the applicable jurisdiction. Non-essential session data is cleared on a rolling schedule; you can request a full account data export through your profile page.

PRIVACY CONTACT PATHS

Reach Us About Your Data

If you have questions about what we hold, want to correct your details, or need to request deletion, there are three direct ways to reach our team. We aim to respond to privacy-related requests within the timeframe required under applicable local law — no runaround, no generic replies.

Team online

Live Chat

Start a chat session from inside your account. Privacy requests raised through live chat are flagged to our data team, not just general support.

Email

Send your request to our dedicated privacy address listed in your account settings. Include your registered contact detail so we can verify your identity.

Account Portal

Log in, head to your account settings, and use the data-request section to submit access or deletion requests directly without contacting support.

Common Questions About Your Data at o00

These are the questions we hear most often about how your information is stored, shared, and controlled. If yours is not here, reach us through live chat or the email address in your account settings.

We collect your name, email address, contact number, and your preferred payment method. If you fund your account via Touch 'n Go eWallet or Boost, the transaction reference is logged but your full wallet credentials are not stored.

Yes. Log into your account, go to the data-request section in your profile settings, and submit a data access request. We will compile and deliver what we hold within the timeframe local law requires.

Only where it is needed to deliver the service — payment processors for GrabPay, FPX, or DuitNow transfers, for example. We do not sell your data or share it for third-party marketing purposes.

Transaction records are kept for the period required by the jurisdiction your account falls under. Non-essential data like expired session cookies is cleared on a rolling schedule before that point.

Submit a deletion request through the account portal or by emailing our privacy address in your settings. Some records cannot be deleted immediately due to legal retention rules, but we will confirm exactly what stays and why.

Yes — we log IP address, device type, and session timestamps to detect unusual access. This is a security measure, not profiling. You can see active sessions under your account security tab and end any you do not recognise.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.