Reference

What ez66 Collects and Why It Stays Safe

When you use ez66 — whether you're topping up via Touch 'n Go eWallet or browsing the lobby from Kuala Lumpur — your personal data is handled with a clear purpose and nothing extra.

No data sold to third partiesAccount data encrypted at restTouch 'n Go eWallet, Boost, GrabPay payment records securedYou can request your data at any timeCookie use explained clearly
ez66 What ez66 Collects and Why It Stays Safe
HOW WE PROTECT YOU

Data Handling, Cookies and Account Security

Every layer of your account — from login to payment confirmation — runs over encrypted connections. We apply access controls internally so only the teams that need your data for operational reasons can reach it. Below are the four areas where your data is most relevant and how we handle each one.

Payment Data Handling

When you deposit via Touch 'n Go eWallet, Boost or GrabPay, we pass only the minimum data each provider needs. Full wallet credentials are never stored on our side.

Cookie and Session Tracking

Session cookies keep you logged in between pages. Analytics cookies help us identify broken flows. You can disable non-essential cookies from your browser settings at any time.

Account Security Practices

Login attempts trigger OTP verification to your registered contact. Unusual device access is flagged and may prompt a re-verification step before your account resumes normal use.

Data Retention and Deletion

We keep account and transaction records for as long as required by applicable local law. Once that period ends, or upon a valid deletion request, we remove identifiable data from active systems.

PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to review the data we hold on your account, request a correction, or ask us to delete specific records, our support team handles these requests directly. We aim to acknowledge your inquiry promptly and follow the process outlined under applicable Malaysian law. Use any of the channels below to get started.

Live Chat Open a chat session from your account dashboard. Our team can locate your data profile, confirm what is held and walk you through a correction or deletion request.
Email Support Send your privacy request to our support address. Include your registered account name and the specific data concern so we can match your record and respond accurately.
Account Settings Some data preferences — including marketing communications and cookie consent — can be adjusted directly inside your account settings without contacting support at all.

Your Questions About Privacy, Answered

These are the questions we get most often about how ez66 handles personal data, what rights you have and how to act on them. If your question isn't here, live chat is the fastest path to a direct answer.

We collect your name, email address, contact number and the payment method you register — such as Touch 'n Go eWallet or Boost. We also log device and session data to secure your account access.

We share data only with payment processors — like GrabPay or FPX — and only to the extent needed to complete your transaction. We do not sell or pass your data to external marketing companies.

Contact our support team via live chat or email with your registered account name. We will locate your data profile and share what is held, subject to what local law permits in your region.

Yes. Send a deletion request through live chat or email. We process it in line with our retention obligations under applicable law — some transaction records may need to be kept for a legally required period.

Session cookies are essential for keeping you logged in. Analytics cookies track page flow to help us fix issues. Non-essential cookies can be switched off in your browser settings without losing account access.

We pass only the minimum required data to complete your deposit. Full wallet credentials stay within the payment provider's own system — we never store them on our platform.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.