Rujukan Laman

How 2w99 Handles Your Personal Data

At 2w99, your personal data belongs to you — we collect only what is needed to run your account, process transactions via Touch 'n Go, GrabPay, Boost dan…

Data Collected With PurposeTouch 'n Go & GrabPay Transactions SecuredYour Rights, Your ControlNo Data Sold to Third PartiesMalaysia-Specific Compliance
2w99 How 2w99 Handles Your Personal Data
REACH OUR PRIVACY TEAM

Contact Us About Your Data

If you want to access, correct or delete the personal data we hold, our privacy team is reachable around the clock.

Live Chat Start a live chat session directly from 2w99.net. Our agents can log a data access or deletion request on your behalf and pass it to the privacy team within the same session.
Email Request Send your data request to our privacy inbox at 2w99.net. Include your registered email address and the nature of your request; we aim to respond within two business days.
Account Portal Log into your 2w99 account, navigate to Account Settings, and submit a data request form directly. This method links the request to your account automatically for faster processing.
HOW WE PROTECT YOUR ACCOUNT

Data Handling, Cookies and Account Security

Every layer of the 2w99 platform — from payment processing to live session management — is built so your data stays where it belongs: with you.

Data Minimisation

We collect only the fields your account genuinely needs — name, contact details and payment references. Any field not required for account operation or transaction verification is not captured or stored.

Cookie Use

We use session cookies to keep you logged in and analytics cookies to understand which pages load slowly. You can manage cookie preferences from the footer of any page on 2w99.net without affecting core account functions.

Payment Data Security

Touch 'n Go, GrabPay, Boost dan FPX transaction tokens are encrypted in transit and at rest. We never store full card numbers or full wallet credentials — only the reference tokens returned by the payment gateway.

Data Retention

Account data is kept for as long as your account is active and for the period required by applicable Malaysian financial regulations thereafter. Once that period lapses, data is deleted or anonymised from our systems.

Third-Party Sharing

We share data with payment processors and identity-verification services only to the extent needed to complete your transactions. We do not sell, rent or trade your personal data to marketing companies or data brokers.

Your Rights

You have the right to access a copy of your data, request corrections, ask for deletion and object to certain processing. All requests are handled by our privacy team and acknowledged within one business day.

Your Privacy Questions Answered

The questions below cover the rights and processes Malaysian account holders ask about most often. If your question is not here, reach out via live chat or our privacy email and we will respond with a direct answer.

We collect your name, email address, phone number and the payment reference associated with your chosen method — Touch 'n Go, GrabPay, Boost or FPX. We also log your device type and session timestamps to protect your account from unauthorised access.

Yes. Submit a data access request through the Account Portal or email our privacy team at 2w99.net. We will compile and deliver a copy of your personal data within five business days of verifying your identity.

Log into your account and submit a deletion request via Account Settings, or contact us by live chat or email. We process deletion requests after identity verification and within the timeframe permitted by applicable Malaysian regulations.

Only with payment processors — such as the gateways behind Touch 'n Go, GrabPay, Boost dan FPX — and identity-verification services needed to complete your transactions. We do not share data with advertising networks or data brokers.

We retain your data for the period required under applicable Malaysian financial and anti-money-laundering regulations. Once that statutory period ends, your personal data is deleted or permanently anonymised from our records.

No full wallet credentials are stored. We hold only the encrypted reference tokens returned by the payment gateway after a transaction is completed. These tokens cannot be used to initiate new transactions without your active authorisation.

We use essential session cookies to keep your account active and analytics cookies to measure page performance. Non-essential cookies can be turned off in the cookie preference panel in the site footer without losing access to your account or wallet.