Rujukan Laman

Privacy Policy: How We Handle Your Information

When you open an account with 22cash and use Touch 'n Go, GrabPay, Boost or FPX to fund your wallet, we collect and protect the personal data you…

Data collection outlinedStorage & security explainedYour rights defined
22cash Privacy Policy: How We Handle Your Information
PRIVACY CONTACT

How to Reach Us About Your Data

If you want to review what we hold, update your details, or ask us to delete your account, contact our privacy team through live chat, email, or the support form in your account dashboard. We respond to privacy requests within three business days and guide you through each option.

Team online

Live Chat Privacy Line

Open the chat widget in the bottom corner of any page and select 'Privacy Request' from the menu. Our agents are online daily from 10:00 to 22:00 Malaysia time and will confirm receipt of your request within minutes. Use this channel for urgent access or deletion requests.

Privacy Email Support

Send your request to [email protected] with your registered email and account username. Include the specific action you want — view, correct, or delete — and we will reply with next steps within 72 hours. Attach proof of identity if you are requesting deletion to ensure security.

Account Dashboard Form

Log in and navigate to Settings, then Privacy Requests. Fill in the form with your concern and submit it directly. This method creates a tracked ticket so you can see the status of your request in real time, and our compliance team will process it within three business days.

DATA SAFEGUARDS

How We Protect and Manage Your Information

We encrypt all personal data in transit and at rest using industry-standard protocols. Your payment details are tokenized so we never store full card or e-wallet credentials on our servers.

Data Encryption Standards

Every piece of information you send — login credentials, deposit amounts, withdrawal requests — is encrypted with TLS 1.3 before it leaves your device. On our servers, personal records are stored in encrypted databases with access restricted to authorized compliance and support staff only. Payment tokens replace sensitive card or e-wallet numbers so even our internal systems never see your full credentials.

Cookie Usage and Control

We place session cookies to keep you logged in as you switch between live tables, slots, and the sportsbook. Analytics cookies track which games you open most often so we can improve lobby navigation. You can disable non-essential cookies in your browser settings without losing access to your account, though some features like saved preferences may reset each visit.

Account Security Measures

We monitor login attempts from new devices and send you an email alert when an unrecognized IP address accesses your account. Two-factor authentication is available in your security settings and adds an extra verification step during login. If we detect unusual withdrawal patterns or multiple failed password attempts, we temporarily lock your account and contact you to confirm the activity.

Data Retention Periods

Transaction records, including deposits via Touch 'n Go, GrabPay, Boost and FPX, are kept for seven years to comply with Malaysian financial record-keeping rules. Personal profile data — name, email, phone — is retained as long as your account is active. When you close your account, we anonymize your profile within 90 days unless disputes or regulatory requests require us to preserve specific records for a longer period.

Third-Party Data Sharing

We share your information only with payment processors to complete deposits and withdrawals, and with compliance auditors when required by local law. We never sell your data to advertisers or external marketing platforms. If a regulatory body requests your records during an investigation, we notify you unless prohibited by law and provide only the data specified in the legal order.

Your Privacy Rights and Requests

You can request a copy of all data we hold about you, ask us to correct outdated details, or request full account deletion. Submit any of these requests through live chat, email, or the privacy form in your dashboard. We respond within three business days with confirmation and next steps, and we complete most requests within two weeks unless complex legal review is needed.

Privacy Policy FAQ

Below are answers to the questions we hear most often about how 22cash collects, uses, and protects your personal information. If your concern is not covered here, reach out through live chat or email and our privacy team will respond within 72 hours.

We collect your full name, email address, phone number, date of birth, and residential address during sign-up. When you make your first deposit, we also record your chosen payment method — Touch 'n Go, GrabPay, Boost or FPX — and the transaction timestamp to match funds with your wallet balance and comply with local regulations.

Once you request account closure, we anonymize your profile within 90 days by removing personally identifiable details. Transaction logs are retained for seven years to meet Malaysian financial record-keeping rules. If there is an ongoing dispute or regulatory inquiry, we may preserve specific records until that matter is resolved, then delete them promptly.

Yes. Log in and go to Settings, then Privacy Requests, and select 'Download My Data'. We will send a secure link to your registered email within three business days. The file includes your profile details, transaction history, login records, and any support tickets you opened. The link expires after 48 hours for security.

We share your information only with payment processors to complete deposits and withdrawals, and with compliance auditors when local law requires it. We never sell or rent your data to advertisers, marketing platforms, or other third parties. Any sharing is limited to what is necessary to operate your account and meet legal obligations.

Log in and go to Settings, then Notifications. Uncheck the box labeled 'Promotional Offers' and save your preferences. You will stop receiving marketing emails within 24 hours. Account-related messages — such as withdrawal confirmations and security alerts — will still be sent because they are essential to your account security and cannot be disabled.

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity. We will notify you by email at least 30 days before the transfer and give you the option to close your account and request deletion of your information before the change takes effect.

Open a privacy request through live chat, send an email to [email protected], or use the form in your account dashboard. Include your registered email and username, and specify that you want full account deletion. We will confirm receipt within 72 hours and complete the deletion within two weeks unless ongoing disputes or legal obligations require us to retain certain records temporarily.