Rujukan Laman

How onglaju Protects Your Personal Data

Your privacy matters to us, and this policy sets out exactly how we collect, use and protect the personal data you share when you open an account or…

Data collected only as neededMalaysian law complianceTouch 'n Go & GrabPay transaction privacyAccount data never soldYour right to request deletion

Browse Lobby Read FAQ

What Data We Collect and Why

onglaju Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

When you create an account, we collect your name, email address, contact number and the payment details you provide — including tokens associated with Touch 'n Go, GrabPay, Boost dan FPX transactions. This data is used strictly to verify your identity, process deposits and withdrawals, and

1
keep your account secure. We do not share your personal data with third parties for marketing purposes, and we do not sell your information to data brokers. Retention periods are tied to regulatory obligations under Malaysian financial and data protection frameworks; once those periods expire, data
2
is purged from our active systems. You may withdraw consent for non-essential data processing at any time by contacting our support team.

Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

HUBUNGI PASUKAN KAMI

Reach Us About Any Privacy Matter

Team online

Live Chat

Our live chat team is available around the clock. If you have a question about how your data is stored, processed or shared, start a chat and we will respond within minutes.

Email Support

Send a detailed privacy request to our dedicated data team via email. We acknowledge all requests within 24 hours and aim to resolve data access or deletion queries within seven working days.

Help Centre

Our help centre contains step-by-step articles on updating your account details, adjusting cookie preferences, and submitting a formal data request without needing to contact support directly.

KESELAMATAN DAN AKAUN ANDA

Six Ways We Safeguard Your Data

From the moment you open your account, every piece of data you share is handled under a clear set of practices designed to keep your information accurate, secure and accessible only to…

Encrypted Storage

All personal data — including payment tokens for Touch 'n Go, GrabPay, Boost dan FPX — is stored using AES-256 encryption at rest. No raw payment credentials are held on our servers after a transaction is authorised.

Cookie Controls

We use session cookies for login continuity and analytics cookies to understand how you move through the lobby. You can adjust or withdraw cookie consent at any time via the preference panel in your account settings.

Account Security

Two-factor authentication is available on every account and we strongly encourage you to enable it. Login attempts from unrecognised devices trigger an email alert to your registered address before access is granted.

Data Retention Rules

We keep your account data for as long as your account remains active and for a defined period after closure, as required under Malaysian financial regulations. Once that window closes, data is deleted from our production systems.

Data Access Requests

You have the right to request a copy of all personal data we hold about you. Submit your request through live chat or email and our data team will compile and deliver a full report within the statutory timeframe.

Third-Party Processors

We work with a small number of vetted payment processors and fraud-detection partners. Each partner is bound by a data processing agreement that restricts them from using your data for any purpose beyond the service they provide to us.

Your Privacy Questions, Answered

Below are the questions we hear most often about how onglaju handles personal data. If your question is not covered here, our support team is ready to help through live chat or email at any time.

We collect your full name, email address, phone number and the payment method details you link to your account, such as your Touch 'n Go or GrabPay identifiers. We collect only what is needed to run your account and process your transactions.

We share data only with vetted processors who help us operate the platform — payment gateways, fraud-prevention services and identity verification providers. We do not sell your data or share it with unrelated companies for marketing.

Contact our support team via live chat or email and ask for a Subject Access Request. We will compile all personal data we hold on your account and deliver it to your registered email address within the timeframe required by Malaysian law.

Yes. Once your account is closed and any mandatory retention period under Malaysian financial regulations has passed, you may request full deletion. Submit the request in writing through email and our data team will confirm when the deletion is complete.

Transaction tokens from Touch 'n Go, GrabPay, Boost dan FPX are passed directly to the relevant payment processor. We do not store full payment credentials on our servers; only a reference token needed to process future transactions is retained.

We use essential cookies for session management and optional analytics cookies to understand lobby usage patterns. You can view, adjust or withdraw consent for non-essential cookies through the cookie preference panel inside your account settings at any time.

If we make a material change to how we collect or use your data, we will notify you by email to your registered address and post the updated policy on this page at least 14 days before the change takes effect.

How onglaju Protects Your Personal Data

Reach Us About Any Privacy Matter

Live Chat

Email Support

Help Centre

Six Ways We Safeguard Your Data

Encrypted Storage

Cookie Controls

Account Security

Data Retention Rules

Data Access Requests

Third-Party Processors

Your Privacy Questions, Answered

01 What personal data does onglaju collect when I open an account?

02 Does onglaju share my data with third parties?

03 How can I request a copy of the data you hold about me?

04 Can I ask onglaju to delete my personal data?

05 How does onglaju handle data from my Touch 'n Go or GrabPay transactions?

06 What cookies does onglaju use and how do I control them?

07 How will I know if onglaju's privacy policy changes?

Related Pages