Rujukan Laman

How smb88 Protects Your Personal Data

At smb88, your personal data belongs to you — we collect only what we need to run your account, process your deposits via Touch 'n Go, GrabPay, Boost…

Data collected with purposeYour rights, clearly statedMalaysian account holdersSecure data handlingContact us any time
smb88 How smb88 Protects Your Personal Data
REACH OUR PRIVACY TEAM

Open a Data Request with smb88

If you have a question about what data we hold, want to request a correction, or need to understand how a specific piece of information is being used, our privacy support team…

Live Chat Start a live chat session directly from the smb88 footer. Our team handles data queries the same way they handle account questions — promptly and with full context of your account history.
Email Support Send your data request to our dedicated privacy email address. Include your registered email and the specific data you are asking about so we can locate your records and respond accurately.
Contact Form Use the on-site contact form under your account settings. Select the Privacy or Data category so your request is routed directly to the team handling personal data matters rather than general support.
HOW WE HANDLE DATA

Browse Our Data Handling and Security Practices

We have structured our data practices around six principles — collection purpose, secure storage, access control, retention limits, cookie transparency, and your right to request changes.

Purpose-Bound Collection

We collect your data only for specific operational reasons: running your account, processing payments through Touch 'n Go or FPX, and detecting fraud. We do not collect data speculatively or hold fields we have no use for.

Encrypted Storage

All personal data is stored on encrypted servers. Payment credentials for GrabPay and Boost are handled by PCI-compliant processors — we never store raw card or wallet credentials on our own systems.

Access Control

Only staff with a defined operational need can query your personal records. Access is logged, role-restricted, and reviewed periodically. No department can browse account data outside of a verified support or compliance workflow.

Retention Schedule

We keep transaction records for the period required under applicable Malaysian financial regulations. Once that period expires, data is deleted or anonymised. Account profile data is removed within 30 days of a verified account closure request.

Cookie Transparency

We use session cookies to keep you logged in and analytics cookies to understand page performance. You can adjust non-essential cookie preferences from the cookie banner shown on your first visit or from the settings panel in your account.

Your Right to Correct or Remove

You may request a copy of your data, ask us to correct inaccurate fields, or ask us to erase data we no longer need to hold. Submit your request through live chat, email, or the contact form and we will action it within the timeframe required by law.

Switch Between Your Privacy Rights and Our Answers

The questions below cover the situations account holders ask about most — what data we hold, how long we keep it, how to get a copy, and what happens when you close your account. If your question is not here, reach out through live chat or email.

We collect your name, email address, phone number, and the payment method you register — such as Touch 'n Go or GrabPay. We also log your device type and IP address for security screening purposes when you log in.

We share data only with the service providers who help us operate — payment processors for Boost and FPX transactions, fraud-detection tools, and our hosting provider. We do not sell your data or pass it to advertisers under any circumstances.

Financial records, including deposits made via Touch 'n Go or FPX, are kept for the period required under applicable Malaysian regulations. After that retention period ends, records are deleted or anonymised and can no longer be linked to your identity.

Yes. Send a data-access request via email or through the on-site contact form, selecting the Privacy category. Include your registered email address so we can locate your records and respond within the legally required timeframe.

Contact us through live chat or email with the specific field you want corrected and the accurate details. Our privacy team will verify your identity and update the record within two business days of confirmation.

Profile data is deleted within 30 days of a verified account closure request. Transaction records are held for the regulatory retention period and then removed. We do not continue to contact you for marketing purposes after your account is closed.

We use session cookies to keep you authenticated and analytics cookies to measure page performance. You can turn off non-essential cookies from the banner on your first visit or from the cookie preferences panel inside your account settings at any time.