Reference

How a66day Handles Your Personal Data

This Privacy Policy sets out exactly what data we collect when you open an account, make a deposit via Touch 'n Go eWallet, Boost or GrabPay, and use the lobby — and how we keep that data secure.

Account data protectedTouch 'n Go eWallet, Boost, GrabPay coveredNo third-party sale of your dataRetention period disclosedContact us to request changes
a66day How a66day Handles Your Personal Data
DATA HANDLING PRACTICE

How We Protect and Manage Your Information

Data security is built into the account flow, not added afterwards. Every connection between your device and the lobby runs over SSL encryption. Payment data from Touch 'n Go eWallet, Boost and GrabPay is handled by the respective payment processors under their own security standards — we receive only the confirmation needed to credit your account. Cookies on our site expire at session end unless you allow persistent login, which you can turn off in account settings at any time.

SSL Encryption

All data in transit between your device and our servers is encrypted. This covers login, account changes and every payment action you take in the lobby.

Payment Data Minimisation

We never store full wallet credentials. When you pay via Boost or GrabPay, only the transaction reference and amount reach our system — not your wallet PIN or card details.

Cookie Control

Session cookies keep your account active while you browse. You can review or clear cookie preferences through your browser settings without affecting your saved account details.

Data Retention Limit

We keep your records only for as long as your account is open plus any period required by applicable rules. After that, records are deleted or made anonymous.

REACH US DIRECTLY

How to Contact Us About Your Data

If you want to review what data we hold on your account, correct a detail, or ask us to delete your records, reach out through any of the channels below. We aim to acknowledge data requests within one business day and resolve them as quickly as the verification process allows. Providing your registered email address or contact number speeds things up considerably.

Team online

Live Chat

Start a chat session from the account page. Confirm your registered email so we can pull up your data record and process your request without delay.

Email Support

Write to our support address with your account username and the specific data action you need — access, correction or deletion. We respond in writing.

Account Settings

Some data corrections — display name, contact number, linked e-wallet — can be made directly inside your account settings without contacting support at all.

Common Questions About Your Privacy at a66day

Below are the questions we hear most often about how personal data works on this platform. If your question is not covered here, live chat or email support can help you with account-specific data requests directly.

We collect your name, email address, contact number and the payment identifier for your chosen method — such as your Touch 'n Go eWallet or Boost account reference. Session and device data is logged for security.

No full wallet credentials are stored with us. Payment processors handle the transaction; we receive only the confirmation reference and transaction amount needed to update your account balance.

Yes. Contact us via live chat or email with your registered account details, and we will provide a summary of the personal data we hold. We aim to respond within one business day.

Send a deletion request through live chat or email support. Once verified, we will remove or anonymise your data, subject to any retention period required by applicable financial compliance rules.

We do not sell, rent or share your data with outside parties for marketing. Data shared with payment processors like DuitNow or FPX is limited to what is needed to complete your transaction.

We hold data while your account is active and for any additional period required by applicable rules. Once both conditions are met, your records are deleted or anonymised without further notice.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.