mp66 Privacy Policy — How We Handle Your Account Information
This page sets out exactly what information mp66 collects when you access the platform, fund your account via Touch 'n Go eWallet or Boost, and move through the lobby. We keep the terms direct so you always know where your data sits and what choices are open to you.
Account data handled with care
Touch 'n Go eWallet & Boost transaction context
Your rights, clearly stated
Contact path always open
POLICY SCOPE DETAIL
What This Privacy Policy Covers
When you open an account on mp66, we collect the information you provide during registration — your contact details, login credentials and any identity verification steps shown in your account settings. Each time you fund your wallet through Touch 'n Go eWallet or Boost, the transaction reference and amount are recorded against your account. We do not store full payment credentials on our servers; the e-wallet providers handle that leg of the process on their own infrastructure. Beyond account registration and funding, we collect device and session data — browser type, IP address range and pages visited — to keep the platform running correctly for your access region. This data is held for as long as your account remains active and for a further period required by applicable law in eligible regions. Where local law in Malaysia requires disclosure or retention of certain records, we follow those requirements. We do not sell your personal data to third parties for marketing purposes. Any sharing with payment processors such as Touch 'n Go eWallet or Boost is limited to what those providers need to complete your transaction. Queries about what data we hold on your account can be directed to our support channel at any time.
Touch 'n Go eWallet
Boost
Account transaction records
Session & device data
Identity verification steps
INSIDE VS OUTSIDE
Where This Policy Applies and Where It Stops
Not every part of your experience falls under the same policy coverage. The table below separates what this policy directly governs from what sits outside it, so there are no grey areas when you need to raise a question about your data.
Account Access
Login records, session history and account settings changes are all captured under this policy. If you want a record of access events on your account, raise a request through our support channel and we will provide what we hold.
Wallet Transactions
Deposits made via Touch 'n Go eWallet or Boost generate a transaction reference visible in your account history. That record is governed here. The e-wallet provider's own privacy terms apply to the activity on their side of the transfer.
Site Content & Cookies
Browsing behaviour on mp66 pages — which sections you visit, how long you spend on the lobby — is tracked via session cookies to improve navigation. You can adjust cookie preferences through your browser settings; doing so may affect how some pages load.
Third-Party Services
Links to payment processors, game studios or external support tools take you outside mp66's data environment. Once you leave the platform, the third party's own privacy terms apply. We do not control or take responsibility for external data practices.
YOUR PRACTICAL OPTIONS
Actions Available to You Under This Policy
This policy is not passive — there are specific steps available to you at any point. You can request a copy of the personal data held against your account by contacting our support team directly. If any detail on your account is incorrect — a misspelled name, an outdated contact number — you can update most fields through the account settings page after login; for fields that require identity re-verification, support can walk you through the process. Transaction records linked to your Touch 'n Go eWallet or Boost deposits are visible in your account history tab and can be exported on request. If at any point you believe data has been handled incorrectly, raise it with us in writing through the support channel and we will respond with the steps taken to review the matter. Account closure requests, including data deletion where permitted under applicable law, are handled the same way.
Review Your Records
Your transaction history — including every Touch 'n Go eWallet and Boost deposit reference — is accessible from the account history tab after login. You can request a full data export by contacting support.
Correct Account Details
Standard fields such as contact number and email can be updated in account settings. Fields tied to identity verification require a support request; the process and documents needed are shown when you raise the ticket.
Raise a Data Question
Any question about what data we hold, how long we keep it, or who has access to it can be submitted to our support team in writing. We will acknowledge your query and outline the next steps taken to address it.
Request Account Closure
If you choose to close your account, submit the request through support. Data deletion or anonymisation is carried out in line with applicable law in your eligible region, and we will confirm once it is complete.
REACH THE POLICY TEAM
How to Contact Us About This Policy
Privacy questions deserve a direct answer. Below are the paths to reach the right team — whether you want to check what we hold, flag a concern or request a change to your account data.
Live Chat Support
Open the live chat widget from any page on mp66 to ask a privacy question in real time. Identify the topic as a data or privacy matter so the right team picks it up without delay.
Email Request
For formal data requests — exports, corrections or deletion — send a written message through the contact email listed in your account dashboard. Include your registered account email and the specific request so we can process it correctly.
Account Dashboard
Some privacy actions — like reviewing session history or updating contact details — are handled directly in your account settings. Log in and head to the account section; the available options are shown there without needing to contact support.
HOW WE PROTECT DATA
Data Handling, Cookies, Security and Retention
Data care is a practical matter, not an abstract commitment. Each section below covers a specific area of how mp66 manages information collected through your account and transactions.
Cookies and Session Tracking
We use session cookies to keep the lobby and account functions working correctly during your visit. These cookies do not store payment credentials. Cookie preferences can be adjusted through your browser at any time; changes take effect on the next page load.
Account Security Measures
Account access is protected through login credentials you set during registration. Any change to your password or contact details triggers a verification step shown in your account settings. We do not store Touch 'n Go eWallet or Boost credentials on mp66 servers.
Data Retention Period
Personal and transaction data is kept for as long as your account is active and for any additional period required under applicable law in eligible Malaysia regions. After account closure, data is either deleted or anonymised in line with legal obligations confirmed at the time of your request.
Who to Contact for Changes
The support team is the single contact point for all data change requests — corrections, exports or deletions. Submit through live chat or the contact email in your account dashboard. We confirm every action taken in response to a formal request.
POLICY QUESTIONS ANSWERED
Common Questions About This Privacy Policy
Real questions about how your data is handled, answered directly. If something is not covered here, the support team is the right place to take it.
What personal data does mp66 collect when I register?
During registration, we collect your contact details, login credentials and any information entered through the identity verification steps shown in your account. We do not collect more than what is required to operate and secure your account in eligible regions.
Does mp66 store my Touch 'n Go eWallet or Boost details?
No. When you fund your account through Touch 'n Go eWallet or Boost, the transaction is processed by the respective e-wallet provider. mp66 records the transaction reference and amount, not your full payment credentials. Those stay within the e-wallet provider's own secure environment.
How long does mp66 keep my account data?
Data is kept while your account is active and for a further period determined by applicable law in your region. After account closure, we carry out deletion or anonymisation as permitted under local law. Submit a closure request through support to start that process.
Can I request a copy of my personal data?
Yes. Send a written request to the support team via the contact email in your account dashboard or through live chat. Include your registered email address and specify that you are requesting a data export. We will confirm receipt and outline the timeline for the response.
Who does mp66 share my data with?
Data is shared only with payment processors like Touch 'n Go eWallet and Boost, and only to the extent needed to complete your transaction. We do not sell personal data to third-party marketers. Any sharing required by applicable law in eligible regions is handled in line with those legal obligations.
How do I correct incorrect details on my account?
Standard fields — contact number, email address — can be updated directly in your account settings after login. Details tied to identity verification require a support request. The exact steps and any documents needed are shown when you raise the ticket through live chat or email.