Reference

What in88 Does With Your Personal Information

When you open an account with us, we collect certain information to keep your account secure and your transactions running smoothly — including data tied to payments via Touch 'n Go eWallet, Boost, and GrabPay.

Account data protectionLocal payment data handled with careYour right to access and correct dataNo data sold to third partiesContact us to request changes
in88 What in88 Does With Your Personal Information
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to access the data we hold on you, correct something that looks wrong, or ask us to delete your account information, reach out through any of the channels below. We aim to respond to data requests within a reasonable timeframe and will confirm receipt as soon as your message comes through.

Live Chat Start a live chat session directly from your account dashboard. Available for account and data queries; our team will log your request and follow up.
Email Support Send your data access or correction request by email. Include your registered account name so we can locate your record quickly and handle your request accurately.
In-Account Help Centre Log in, go to Account Settings, then select Help. Submit a data query form there and it routes directly to the team that handles personal data matters.
HOW WE PROTECT IT

Data Handling, Cookies, Security and Retention

We apply SSL encryption across all account pages and payment flows, so data in transit — whether that is a Touch 'n Go eWallet confirmation or a login OTP — is protected end to end. Internally, access to personal data is restricted to staff whose role requires it, and all access is logged. Here is what that looks like across four areas we take seriously.

Cookie Use

We use session cookies to keep you logged in and analytics cookies to understand which account sections you use. You can adjust cookie preferences through your browser settings at any time.

Account Security

Every login triggers an OTP check to your registered number. If we detect unusual session activity — a new device or an unfamiliar location — we add a verification step before granting access.

Data Retention

Account records are kept while your account is active. Once you request deletion, we remove personal identifiers within the period required by applicable law and confirm when it is done.

Third-Party Scope

Payment processors like the networks behind Touch 'n Go eWallet and GrabPay receive only the transaction data they need. We do not pass profile or behavioural data to them beyond what the transaction requires.

Common Questions About Your Data Rights

These are the data and privacy questions we hear most often from account holders. If yours is not here, reach out through live chat or the in-account Help Centre and we will give you a direct answer.

We collect your name, email address, phone number, and account credentials at registration. Payment-related data — such as Touch 'n Go eWallet or GrabPay transaction references — is captured when you make deposits or withdrawals.

Yes. Submit a data access request through the in-account Help Centre or by email. We will identify your records, compile them, and send them to your registered contact details within a reasonable period.

Contact us via live chat or email with the specific detail you want changed. For identity-linked fields we may ask you to verify your identity first, then we will update the record and confirm the change.

Only with service partners who need it to operate — payment processors, identity verification services, and fraud-detection tools. We do not sell data to advertisers. Each partner receives only the minimum data their function requires.

We keep data for as long as your account is active, plus any further period required by applicable law. After that window closes, personal identifiers are deleted or anonymised. We confirm once the process is complete.

Transaction reference data is stored on our servers to match payments to your account and handle any dispute. Full card or wallet credentials are never stored on our side — those stay within the payment provider's own secure environment.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.