Reference

How bb28 Handles Your Personal Information

This Privacy Policy covers what data bb28 collects when you open an account, make a deposit through Touch 'n Go eWallet, Boost, or GrabPay, and use our lobby.

Account data transparencyLocal payment context: Touch 'n Go eWallet, Boost, GrabPayYour right to access or delete dataCookie usage disclosedContact path clearly stated
bb28 How bb28 Handles Your Personal Information
PRIVACY CONTACT

How to Reach Us About Your Data

If you want to access, correct, or remove data we hold on your account, you can reach our support team directly. We aim to respond to all data-related requests within a reasonable timeframe. For account-specific queries about payment records — including Touch 'n Go eWallet or Boost transaction logs — have your account details ready when you write in.

Team online

Live Chat

Start a live chat session from inside your account dashboard. This is the fastest path for urgent data queries or to clarify a specific payment record.

Email Support

Send a written data request to our support address. Include your registered account email so we can locate your records and respond accurately.

Account Help Centre

The Help Centre inside your account covers common data questions — what we store, how to update contact details, and how to request a full data summary.

DATA PRACTICES

How We Protect and Manage Your Account Data

Data security at bb28 is handled at the account level and at the payment layer. SSL encryption covers all data in transit, including e-wallet callbacks from Touch 'n Go eWallet, Boost, and GrabPay. Your account uses a password and a one-time verification code (OTP) sent to your registered mobile number each time you log in from a new device, so unauthorised access is caught before it reaches your wallet. We review data retention schedules periodically to make sure we are not holding information longer than we need to, and we give you a clear path to request deletion where the law permits it.

SSL Encryption

Every data exchange between your device and our servers — including GrabPay and Boost payment callbacks — travels over an SSL-encrypted connection at all times.

OTP Account Access

Logging in from a new device triggers an OTP to your registered mobile number. This stops unauthorised access even if your password is compromised.

Data Retention Limits

We keep your account records only for as long as required by applicable Malaysian law or necessary to operate your account. Redundant data is removed on schedule.

Restricted Internal Access

Access to personal account data inside bb28 is role-restricted. Only team members with a direct operational need — such as processing a withdrawal verification — can view your records.

Common Questions About Your Privacy on bb28

Below are the questions we hear most often about how we handle account data, cookies, and your rights as an account holder in Malaysia. If your question is not covered here, reach us via live chat or email and we will respond specifically to your situation.

We collect the registration details you submit — name, email, phone number — plus device and session data. Payment method details like your Touch 'n Go eWallet or Boost transaction references are logged for your account history.

No. We never store your Touch 'n Go eWallet PIN, Boost access code, GrabPay credentials, or FPX banking password. Only transaction references and amounts are recorded against your account.

Yes. Send a request to our support team via live chat or email with your registered account email address. We will compile and share the data we hold on your account within a reasonable timeframe.

We share data only with payment processors needed to complete your transactions — such as e-wallet providers — and with authorities that require it under Malaysian law. We do not sell your data.

Cookies are used to keep you logged in, remember your device for OTP purposes, and monitor session behaviour for security. You can manage cookie settings in your browser, though some features may not work without them.

Contact our support team and submit a deletion request. We will process it in line with applicable Malaysian law — some data may need to be retained for legal or regulatory reasons before full deletion is possible.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.