Reference

How xx44 Handles Your Personal Information

This Privacy Policy sets out what data we collect when you use xx44, how we store it, and what rights you have over it.

Account data kept secureLocal payment data protectedYour rights, clearly statedContact us to request changes
xx44 How xx44 Handles Your Personal Information
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to review, correct, or delete the personal data we hold on your account, reach out through any of the channels below. We aim to acknowledge your request within two business days and resolve it as quickly as the verification steps allow. For payment-related data queries — for instance, if you believe a Touch 'n Go eWallet or GrabPay transaction has been logged incorrectly — include your transaction reference when you contact us.

Team online

Live Chat

Open the chat widget inside your xx44 account for the fastest route to our support team. Available for account and data queries.

Email Support

Send your data request or privacy question to our support email. Include your registered account number so we can verify your identity quickly.

Account Help Page

Log in to your xx44 account and go to Account Settings to update contact details, review linked payment methods or submit a data access request directly.

HOW WE PROTECT IT

Data Handling, Cookies, Security and Retention

We handle your data with the same care we put into keeping your account running cleanly. All data in transit is encrypted. Session tokens expire after inactivity, which means a device left unattended will not stay logged in. Below are the four areas we get asked about most.

Cookies and Tracking

We use session cookies to keep you logged in and analytics cookies to see which parts of the platform you use. You can manage cookie preferences through your browser settings at any time.

Account Security

Login attempts are monitored for unusual patterns. If we detect a login from an unrecognised device, an OTP is sent to your registered mobile number before access is granted.

How Long We Keep Your Data

Account data is retained for as long as your account is active and for a period after closure as required by applicable law. You may request deletion of non-essential data at any time.

Third-Party Sharing

We share data only with payment processors such as Touch 'n Go eWallet and Boost to complete transactions, and with fraud-detection partners. We do not sell your personal data to advertisers.

Common Questions About Your Privacy on xx44

These are the questions we receive most often from account holders in Malaysia about how their data is handled. If your question is not covered here, contact us through live chat or email with your account number ready.

We collect your name, email address, mobile number and the payment method you register — such as Touch 'n Go eWallet, Boost, or GrabPay. We also log your IP address and device type at login for security purposes.

Yes. Submit a data access request through Account Settings or by emailing our support team with your account number. We will verify your identity and respond within the timeframe local law requires.

Only with the payment processor needed to complete your transaction — for example, when you send funds via GrabPay or DuitNow. We do not pass your payment data to advertisers or unrelated third parties.

Contact us via live chat or email and request account closure with data deletion. Some data may be retained for a period under applicable law; we will tell you what we are legally required to keep and for how long.

No. We record transaction references and amounts to reconcile your wallet balance, but we never store your e-wallet login credentials, PINs or full card numbers. Those stay between you and your wallet provider.

After you close your account, we retain data only as required by law or for fraud-prevention purposes. Non-essential data is deleted on request. You can reach us through live chat to start the process.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.