Reference

How magie8 Handles What You Share With Us

When you open an account or top up via Touch 'n Go eWallet, Boost, or GrabPay, you share data with us — and this page tells you exactly what we collect, why we keep it, and what you can do about it.

Account data collected at registrationWallet transaction records kept securelyCookie and device data disclosed hereYour right to request data access or deletionContact our team to raise any privacy concern
magie8 How magie8 Handles What You Share With Us
HOW WE PROTECT IT

Data Handling, Cookies and Account Security

Your data sits behind SSL encryption from the moment you submit it. We apply session controls on every login, and any unusual access attempt — such as a login from an unrecognised device — triggers a verification step before we allow entry. We do not retain payment credentials like full card numbers or wallet PINs; when you pay via Touch 'n Go eWallet or GrabPay, the authentication happens inside those respective apps and we only receive a transaction confirmation.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You can manage cookie preferences in your browser settings at any time.

Data Retention

Account records are kept for as long as your account is active and for a period after closure as required by applicable law. Inactive accounts are flagged for review on a rolling basis.

Third-Party Sharing

We share data only with payment processors handling your Boost, GrabPay or DuitNow transactions, and with service providers who help run the platform under strict data agreements.

Your Access Rights

You may request a copy of your personal data, ask us to correct inaccurate records, or request deletion where no legal hold applies. We aim to respond within a reasonable timeframe.

REACH US DIRECTLY

How to Contact Us About Your Privacy

If you want to review, correct, or remove any personal data we hold on your account, reach out through any of the channels below. Our team handles data requests alongside general account and wallet queries, so name your request clearly — for example, 'data access request' or 'delete my account records' — and we will route it to the right person without delay.

Live Chat Open the chat widget on any page while logged in. State your request clearly and our team will confirm receipt and next steps.
Email Support Send your privacy or data request to our support email. Include your registered account name so we can locate your records quickly.
Account Help Centre Log into your account, head to the Help section, and submit a ticket tagged as a privacy or data query for a written response trail.

What You Are Likely Asking About Your Data

These are the data and privacy questions we hear most from account holders in Malaysia. If your question is not covered here, our support team can take a direct request through live chat or email.

We collect your name, email address, date of birth and contact number at registration. Once you make a deposit, transaction records linked to your chosen payment method — such as Touch 'n Go eWallet or FPX — are also stored.

Only with payment processors handling specific transactions, such as a Boost or GrabPay reconciliation, and with platform service providers bound by data agreements. We do not sell your data to marketing networks or unrelated third parties.

Contact our support team via live chat or email, clearly state 'data access request', and include your registered account name. We will locate your records and provide a summary within a reasonable timeframe.

Yes. Submit a deletion request through live chat or the Help Centre. Where no legal retention obligation applies to those records, we will remove them. We will confirm in writing once the deletion is complete.

We use session cookies to maintain your logged-in state and analytics cookies to see which pages get the most use. You can adjust or block cookies in your device browser settings; session cookies are needed for account access to work correctly.

Records are kept while your account is active and for a period after closure as required under applicable law. If your account has been inactive for an extended period, it may be reviewed for data management in line with our retention schedule.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.