Reference

How live22my Handles Your Personal Information

When you open an account with us, we collect only what we need to run it — your login credentials, payment activity through wallets like Touch 'n Go eWallet, Boost, and GrabPay, and basic contact details.

Account data onlyTouch 'n Go eWallet, Boost, GrabPayNo third-party sellingRight to access your dataContact us to update or remove
live22my How live22my Handles Your Personal Information
HOW WE PROTECT IT

Data Handling, Cookies, Security and Retention

Your data does not sit still — it moves through encrypted connections every time you log in, every time a wallet like Boost or GrabPay clears a deposit, and every time your session shifts between devices. Here is how we handle the four areas that matter most to your account.

Cookies and Session Tracking

We use cookies to keep you logged in across devices and to remember preferences. You can clear or block cookies in your browser settings, though some account functions may not work without them.

Account Security

Your password is stored in hashed form — we cannot read it. Login attempts trigger OTP verification to your registered mobile number, adding a second layer before access is granted.

Payment Data Handling

Transaction records tied to Touch 'n Go eWallet, GrabPay, DuitNow or FPX are kept for reconciliation and compliance. We do not store full wallet credentials on our servers.

Data Retention and Removal

Active accounts retain data for the full account lifetime. When you close your account, we remove marketing and behavioural data promptly and retain only what local legal obligations require.

REACH THE PRIVACY TEAM

How to Contact Us About Your Data

If you want to review what we hold on your account, request a correction, or ask us to delete information, reach out through any of the channels below. We aim to acknowledge data requests within a reasonable time and respond fully once we have verified your identity through your registered account details.

Team online

Live Chat

Start a live chat session from the account menu. Verify your identity with your registered email or phone number and we will handle your data query directly.

Email Support

Send your data access or removal request by email. Include your account username and the specific information you want reviewed, updated, or removed.

Account Settings

Some personal details — display name, contact number, linked wallet — can be updated directly in your account settings without needing to contact support.

Privacy Policy Questions We Get Asked

These are the questions we hear most often about how we handle account and payment data. If your question is not covered here, contact us via live chat or email using the channels listed above.

We collect your name, email address, phone number, and the wallet or bank details you use to fund your account — such as your Touch 'n Go eWallet or Boost reference. Device and session data is also logged for security.

We do not sell your data. We share only what payment processors like DuitNow or FPX need to clear your transaction, and what we are legally required to disclose under applicable Malaysian law.

Send a data access request through live chat or email, verified with your registered account credentials. We will compile and return a summary of what we hold on your profile.

Yes. Submit a removal request via email or live chat. We will delete marketing and behavioural records promptly and retain only what local legal obligations require us to keep.

Transaction references from GrabPay, Boost, and other wallets are stored for deposit matching and compliance. Full wallet credentials are never stored on our servers — payment clearing runs through the wallet's own secure channel.

We use cookies to maintain login sessions and device continuity. You can block or clear them in your browser, but some account features — particularly session persistence when switching between mobile and desktop — may not function fully without them.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.