Rujukan Laman

How moh88 Protects Your Personal Data

At moh88, we take the handling of your personal data seriously — this page explains exactly what we collect, why we collect it, and how we keep it…

Data collected with your consentStored securely on encrypted serversShared only where required by lawYou can request access or deletionApplies to all Malaysian accounts
moh88 How moh88 Protects Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you have questions about how your data is handled, want to request a copy of what we hold, or need to raise a data concern, our support team is available around…

Live Chat Start a live chat session directly from your moh88 account dashboard. Our privacy support agents are available 24 hours a day to handle data enquiries and access requests in real time.
Email Support Send a detailed written request to our data team via email. We acknowledge all privacy-related emails within one business day and provide a full written response once your identity is verified.
In-Account Form Log in to your moh88 account and submit a privacy request using the dedicated form under Account Settings. This creates an auditable record so we can track your request from submission to resolution.
DATA HANDLING STANDARDS

How We Manage and Secure Your Data

From the moment you open an account, your data moves through encrypted channels and is subject to strict internal access controls.

Encryption at Rest and in Transit

All personal data — including payment references from Touch 'n Go, GrabPay, Boost dan FPX — is encrypted using AES-256 at rest and TLS 1.3 in transit. No unencrypted copies are stored anywhere on our infrastructure.

Cookie Use and Consent

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You can adjust cookie preferences at any time through the consent panel accessible from every page footer.

Account Security Controls

Your account is protected by password hashing, two-factor authentication options and automatic session expiry after a period of inactivity. Unusual login patterns trigger an account alert sent to your registered contact details.

Data Retention Schedule

We retain account data for as long as your account remains active and for a period thereafter as required under Malaysian financial record-keeping obligations. Once retention periods lapse, data is deleted or anonymised on a scheduled basis.

Requesting Access or Changes

You have the right to request a copy of the personal data we hold about you, to correct inaccuracies or to ask for deletion where permitted by law. Requests are processed within 14 working days of identity verification.

Third-Party Processors

Where we engage third-party processors — such as payment gateways for Touch 'n Go or FPX — we ensure they are contractually bound to the same data-protection standards that apply across our own systems.

Common Questions About Your Privacy at moh88

These questions reflect what Malaysian account holders most commonly ask about their data rights. If something is not covered here, our support team can clarify any aspect of this policy through live chat or email within one business day.

We collect your name, email address, phone number and any payment identifiers you use — such as a Touch 'n Go wallet reference or FPX bank details — along with account activity logs generated during normal use of the platform.

We do not sell your data. We share it only with payment processors like GrabPay or Boost who need it to complete transactions, and with authorities where Malaysian law requires disclosure. All processors are bound by data-protection agreements.

We keep your data for the period required under applicable Malaysian financial and regulatory record-keeping rules. Once that retention window closes, your data is either permanently deleted or anonymised so it can no longer be linked to you.

Yes. Submit a data access request through our in-account form or via email. After we verify your identity, we will send you a complete copy of the personal data we hold within 14 working days, at no charge.

Send a deletion request through our support channels. We will process it within 14 working days where deletion is permitted by law. Some data may be retained to meet legal obligations, and we will tell you clearly if that applies to your request.

We use session cookies for account access and analytics cookies to improve the platform. You can view and manage your cookie preferences at any time via the consent panel in the footer — changes take effect immediately and are saved to your browser.

Payment references from Touch 'n Go, GrabPay, Boost dan FPX are transmitted over TLS 1.3 and stored encrypted. We do not store full card numbers or full wallet credentials — only the transaction reference needed to reconcile your account balance.