Rujukan Laman

How 6fafa Handles Your Personal Data

Open your account in seconds and our Privacy Policy shows how account details, device signals, cookie choices and Touch 'n Go transaction references are handled.

Clear data purposesCookie choicesPrivacy request routesAccount safeguards
6fafa How 6fafa Handles Your Personal Data
CONTACT ROUTES

Three Ways to Send Privacy Requests

Privacy questions should reach a team that can trace the request and respond securely.

Live chat Open live chat and ask for a privacy case number. Our team records your request, confirms the account concerned and routes it to the staff handling data access, correction or deletion questions.
Privacy email Use the privacy email link shown in our contact area for detailed requests or attachments. Include your registered contact detail and request type, but never send your password or complete wallet credentials.
Account request form Submit the privacy form from your account when you want a copy, correction or eligible erasure of data. The signed-in route helps us match your request while reducing unnecessary identity checks.
DATA CONTROLS

Six Controls Behind Our Privacy Practice

Our privacy work follows the full life of your data, from collection through deletion or anonymisation.

Purpose-based collection

We collect identity, contact, device and activity data only when needed for account creation, verification, service delivery, support, security or legal duties. Each category is tied to a stated processing purpose.

Payment references

For Touch 'n Go, GrabPay, Boost and FPX transactions, we retain references, amounts, status and timing where needed. Complete wallet passwords, security codes and banking credentials should never be shared with us.

Cookie controls

Essential cookies maintain sessions and security, while preference or measurement cookies support remembered settings and service analysis. Where consent is required, you can accept, reject or change non-essential cookie choices.

Account protection

Encryption in transit, access controls, session monitoring and identity checks reduce unauthorised access. If we detect unusual activity, we may restrict the session and ask you to confirm control of the account.

Retention and disclosure

Records remain only for the period needed for legal duties, transaction reconciliation, disputes and security checks. After that period, we delete or anonymise them unless a lawful preservation requirement applies.

Requests and changes

Contact our privacy team to request access, correction, eligible erasure or withdrawal of consent. Material policy changes may be announced through the website, your account or your registered contact channel.

Seven Privacy Questions Answered Clearly

These answers explain what happens to common account, payment, device and activity records. They also describe how to exercise privacy rights, manage cookies and ask about transfers or retention. A request may require identity verification, and some records cannot be erased immediately when law, transaction reconciliation, fraud prevention or an active dispute requires temporary preservation.

We may collect your name, contact details, identity evidence, account credentials, IP address, device signals, cookie choices, transaction references, support messages and activity records. The exact categories depend on which services you use.

Transaction references help us confirm payment status, reconcile wallet records, investigate disputes and detect misuse. We keep only the fields needed for those purposes and do not ask for complete wallet passwords or security codes.

Account activity may show when you open titles such as Baccarat Squeeze, Aviator or Football Studio. These logs support session operation, dispute handling, security checks and lawful analysis, subject to applicable privacy requirements.

Use the cookie control displayed on the website to change non-essential preferences. Essential cookies required for login, security and session continuity remain active because the account area cannot function safely without them.

We may share necessary data with payment processors, hosting vendors, identity-check services, security specialists, advisers or authorities. Each disclosure must serve a stated purpose, follow applicable law and remain limited to relevant fields.

Send a request through live chat, the privacy email path or your signed-in account form. After verifying your identity, we will locate the relevant records and respond within the period required by applicable law.

You may request eligible erasure through our privacy contact routes. We may retain certain records when required for legal duties, transaction reconciliation, security investigations or disputes, then delete or anonymise them when that need ends.