Reference

How aa00 Handles Your Personal Data

This Privacy Policy covers what we collect when you use aa00, how we use it, and who we share it with — from your account registration details to the payment methods you connect, including Touch 'n Go eWallet, Boost, and GrabPay.

Account & Identity DataTouch 'n Go eWallet, Boost, GrabPay ActivityDevice & Session DataRetention & Deletion RightsDirect Contact for Data Requests
aa00 How aa00 Handles Your Personal Data
DATA SECURITY PRACTICES

How We Protect and Manage Your Data

Our approach to data protection covers four areas: how we secure data in transit and at rest, how long we keep it, what cookies we use and why, and how you can contact us to exercise your rights. Players in Kuantan and across Malaysia access their account on mobile — so our security measures cover both app-style browser sessions and returning-user flows on any device.

Data Handling & Storage

Account data and payment records — including Touch 'n Go eWallet and Boost transaction logs — are stored on encrypted servers. Access is restricted to authorised personnel with a verified operational need.

Cookies & Session Tracking

We use session cookies to keep you signed in across page loads and analytics cookies to see how the account area performs on mobile. You can adjust cookie preferences in your browser settings at any time.

Account Security & Verification

When your account is accessed from a new device or location, our system sends a verification step — typically an OTP to your registered number — before granting full session access.

Retention & Your Rights

We keep your data while your account is active. After closure, we retain records only as long as required by applicable law. To request a copy or deletion of your data, contact our support team directly.

DATA REQUESTS & CONTACT

Reach Us About Your Privacy

If you want to access, update, or remove your personal data, our support team handles these requests directly. Send your query through live chat or email and we will respond to verify your identity before processing any changes to your account data.

Live Chat Open the chat window from your account dashboard to reach our support team. Data access and correction requests are handled through the same channel — no separate form needed.
Email Support Send your privacy or data request to our support email. Include your registered account details so we can verify ownership before making any changes to your record.
Account Settings Some data — like your contact number or linked e-wallet — can be updated directly in account settings. For full data access reports or deletion requests, contact support directly.

What You Asked About Your Privacy

These are the questions we hear most often about how aa00 handles personal data — covering your rights, what we store, and how to act on a request.

We collect your name, contact details, and the payment method you link — such as Touch 'n Go eWallet, Boost, or GrabPay — along with device and session data to secure your account access.

Yes. Contact our support team via live chat or email with your registered account details. We will verify your identity first, then provide the data we hold on your account.

Send a deletion request to support with your account details. We will process it after identity verification and retain only what applicable law requires us to keep after account closure.

We share data only with payment processors — like those handling your GrabPay or Touch 'n Go eWallet transactions — and with verification services required under applicable law. We do not sell your data.

Your data is kept while your account is active. After you close it, we retain records only for the period required by applicable law, after which your data is deleted or anonymised.

Contact our support team immediately via live chat. We will review your account activity, trigger a security check, and guide you through resetting your credentials and linked e-wallet details.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.