Rujukan Laman

How 66bb Handles Your Personal Data

At 66bb, we take the handling of your personal data seriously — from the moment you open an account to every transaction you make via Touch 'n Go…

Data collected only as neededTouch 'n Go, GrabPay, Boost dan FPX transactions securedYour rights clearly explainedMalaysian accounts governed by local lawContact us anytime to request access
66bb How 66bb Handles Your Personal Data
REACH OUR PRIVACY TEAM

Contact Us About Your Data

Have a question about how we store your information, or want to submit a data access or deletion request? Our privacy support team is reachable through the channels below.

Privacy Email Send your data access, correction or deletion request to our dedicated privacy address. We log every request and confirm receipt within one business day so you always have a paper trail.
Live Chat Start a live chat session directly from your 66bb account dashboard. Our agents can verify your identity and escalate privacy concerns to the data team while you wait.
Help Centre The Help Centre hosts written answers to common privacy questions — from how long we keep login logs to how Touch 'n Go and GrabPay payment records are stored and whether you can request copies.
HOW WE PROTECT YOU

Browse Our Data Handling Practices

We have structured our internal processes around six key areas of data handling: what we collect, how cookies work on our platform, how your account credentials are secured…

Data We Collect

We collect the data you provide at registration — name, email, contact number — plus transaction records from Touch 'n…

Cookies and Tracking

Our platform uses session cookies to keep you logged in and analytics cookies to measure which pages load slowly on…

Account Security

Passwords are hashed using industry-standard algorithms and never stored in plain text.

Data Retention

Active account records are kept for as long as your account remains open.

Internal Access Controls

Only staff whose job function requires it can access identifiable account data.

Submitting a Rights Request

To request access to, correction of, or deletion of your personal data, send a written request via the privacy email…

What You Need to Know About Your Privacy

These are the questions we hear most from Malaysian account holders about how their data is managed at 66bb. If your question is not covered here, reach out via live chat or the privacy email and our team will respond within five business days.

We collect your name, email address, contact number, and the device information used at registration. Transaction data from Touch 'n Go, GrabPay, Boost dan FPX is also recorded to process payments and meet our obligations under Malaysian financial regulation.

We do not sell your data. We share only the minimum required with payment processors like Touch 'n Go and GrabPay to complete transactions, and with identity-verification services where local law requires it. All third parties are contractually bound to handle your data securely.

Send a written request to our privacy email address or raise it via live chat. We will verify your identity first, then compile and deliver your data within 21 days in a readable format, as required under the Personal Data Protection Act 2010.

You can request deletion of personal data that is no longer required for legal or regulatory purposes. Some records must be retained for the period specified under Malaysian financial regulation. We will tell you clearly which data can be deleted and which must be kept, and why.

Transaction records involving Touch 'n Go, GrabPay, Boost dan FPX and FPX are retained for the period required by Malaysian financial and anti-money-laundering regulations. After that mandatory window closes, records are securely deleted or anonymised.

We use session cookies to maintain your login state and analytics cookies to identify performance issues on the platform. Analytics cookies can be disabled in your browser settings without affecting your account access or payment functionality. Essential session cookies cannot be disabled while you are logged in.

Contact our privacy team via the dedicated email channel or live chat. If you are not satisfied with our response, you have the right under the PDPA to refer the matter to the Personal Data Protection Commissioner of Malaysia, where local law permits you to do so.