Reference

How vag88 Handles Your Personal Information

This page sets out exactly what data we collect when you open an account with vag88, how we use it, and what rights you have over it.

Account data collected at registrationPayment data — Touch 'n Go eWallet, Boost, GrabPayCookie and device activityYour right to access or delete dataHow to contact us about privacy
vag88 How vag88 Handles Your Personal Information
PRIVACY CONTACT

Reach Us About Your Privacy Rights

Live Chat The quickest path to a privacy request is our live chat. Start a conversation directly from your account dashboard and our team will handle data queries in the same session where possible.
Email Support For written data access or deletion requests, email us through the address listed in your account settings. We acknowledge every request and aim to respond within the timeframe required by applicable rules.
Account Settings Some privacy actions — like updating your contact details or reviewing your linked payment methods such as GrabPay or Boost — can be handled directly inside your account settings without contacting support.
HOW WE PROTECT IT

Data Handling Practices You Can Check

We apply a few concrete practices across every account, from Alor Setar to Kuching. SSL encryption covers all data in transit. Account logins use a one-time PIN sent to your registered mobile number as a second verification step. Payment records tied to Touch 'n Go eWallet, Boost or GrabPay are stored only as long as required by applicable financial and legal obligations, after which they are deleted from active systems. You are entitled to ask us what we hold, request corrections, or ask for deletion where the law allows it.

SSL Encryption

All data transmitted between your device and our platform travels over SSL-encrypted connections. This applies to account logins, payment confirmations and live session activity across mobile and desktop.

Cookie Controls

We use first-party cookies to maintain your session and remember preferences. You can adjust cookie permissions through your browser settings at any time, though some account functions require session cookies to work.

Retention Policy

We hold your account and payment data only as long as required by applicable Malaysian legal obligations or as needed to resolve open account queries. Once the retention period ends, data is deleted from active storage.

Access Requests

You can request a copy of the personal data we hold about your account. Submit a request via live chat or email and we will process it in line with the timeframe set by applicable data rules.

Questions About Your Data and Privacy Rights

Here are the questions we hear most often about how your data is managed on vag88. If yours is not covered here, our live chat team can help directly.

We collect your name, mobile number, email address and account credentials. If you deposit via Touch 'n Go eWallet, Boost or GrabPay, we also store the transaction reference linked to your account.

We share data only where needed to process payments, verify identity or meet legal obligations in Malaysia. We do not sell your data to advertisers or unrelated third parties.

Start a live chat from your account dashboard or email us through the address in account settings. We will confirm receipt and provide your data summary within the timeframe set by applicable rules.

Yes. Where local law permits deletion, submit a request via live chat or email. We will review it and advise on what can be removed, noting that some records must be kept for legal compliance.

We store only the transaction reference from Touch 'n Go eWallet, Boost or GrabPay payments — never your wallet credentials or PIN. All payment data in transit is covered by SSL encryption.

We retain account and transaction data for as long as required by applicable Malaysian financial and legal obligations. Once that period ends, the data is deleted from our active systems.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.