How bigboss888 Handles Your Personal Data

We collect your name, contact details, date of birth and account credentials when you register. When you make a deposit or withdrawal — whether through Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX — we log the transaction reference, amount in ringgit (RM), and the

1. 1

   payment rail used. This lets us reconcile your account wallet accurately and resolve any payment disputes quickly. We also capture device identifiers and session data each time you access the lobby from your phone or browser. That session data helps us detect unusual login patterns and

2. 2

   flag account activity that does not match your normal behaviour — such as a login from an unfamiliar device in Kuala Lumpur while your account session is already active elsewhere. We do not store your full Touch 'n Go eWallet, Boost or GrabPay credentials on our

3. 3

   servers; those stay within the respective payment platforms. Retention periods follow what is required under applicable local law. Where access or eligibility is discussed, availability depends on local law and applies only where local law permits.

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.