Reference

How nakcuci Handles Your Personal Information

This Privacy Policy sets out exactly what data we collect when you open an account, make a deposit through Touch 'n Go eWallet, Boost, or GrabPay, and use the platform — and how we keep that data secure.

Account data protectionPayment data handled securelyNo third-party sale of your dataYour right to access or deleteApplies where local law permits
nakcuci How nakcuci Handles Your Personal Information
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to review the data we hold on your account, request a correction, or ask us to delete your information, our support team handles privacy requests directly. Responses are sent to the email address registered on your account, so keep that address current in your account settings.

Live Chat Start a live chat session from any page on nakcuci. Confirm your registered email at the start so the agent can pull your account record immediately.
Email Support Send your privacy request to our support email listed in the account help section. Include your account username and the specific data action you are requesting.
Account Settings Some data preferences — such as marketing communication opt-outs — can be adjusted directly inside your account settings without contacting support.
HOW WE PROTECT YOU

Data Handling, Cookies and Account Security

Security is built into how your data moves through our system — from the moment you tap into the lobby on mobile to the point where a withdrawal lands back in your Boost or GrabPay wallet. We use SSL encryption across all account and payment pages, and access to your account record internally is restricted to staff who need it to resolve your request.

Cookie Usage

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You can manage cookie preferences through your browser settings at any time.

Account Security

Login attempts trigger OTP verification to your registered mobile number. If we detect a session from an unrecognised device, additional confirmation is required before access is granted.

Data Retention

Active account data is held while your account is open. After closure, we retain only what applicable Malaysian law requires — typically transaction records for audit purposes.

Third-Party Processors

Payment processors handling Touch 'n Go eWallet, Boost, and GrabPay transactions operate under their own privacy frameworks. We share only the data they need to confirm your transaction.

Common Questions About Your Privacy on nakcuci

These are the questions we receive most often about data, account privacy and your rights as someone who holds an account with us. If your question is not covered here, reach the support team via live chat.

We collect your name, email, contact number and date of birth during registration. Once you deposit via Touch 'n Go eWallet, Boost, or GrabPay, transaction references are also recorded against your account.

We do not sell or rent your personal data. We share only what is strictly necessary with payment processors like those handling GrabPay or DuitNow transactions, and with legal authorities where required by applicable law.

Send a data access request via live chat or the support email listed in the account help section. Include your registered username. We respond to the email address on your account record.

Yes. Submit a deletion request through live chat or email support. We will remove data that is not subject to a mandatory retention period under applicable local law, and confirm when the process is complete.

Transaction records — including deposits via FPX or Boost and withdrawals — are kept for the period required under applicable Malaysian law. Records linked to open accounts are held until the account is closed.

We do not store your e-wallet PIN or bank login credentials. SSL encryption covers all payment pages, and your wallet details are processed directly through the respective payment provider's secure environment.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.