Reference

How 128mega Handles Your Personal Data

At 128mega, your personal data stays yours — we collect only what we need to run your account, process your deposits via Touch 'n Go eWallet, Boost or GrabPay, and keep your session secure.

Data collected only for account operationTouch 'n Go eWallet, Boost, GrabPay transaction records kept securelyYou can request your data or ask for deletionCookie settings adjustable from your browserAvailable where local law permits
128mega How 128mega Handles Your Personal Data
DATA HANDLING IN PRACTICE

How We Keep Your Account Data Safe

Data security at 128mega is not just a policy statement — it is built into how your account and wallet function. SSL encryption covers every connection between your device and our servers. Payment details linked to Touch 'n Go eWallet, Boost or GrabPay are never stored in plain text on our side; we hold only the reference tokens that your payment provider generates. Account login is protected by OTP verification, so any new device access triggers a code sent to your registered number before the session opens.

SSL Encryption

Every data transfer between your browser or mobile app and our servers runs over SSL. Your account credentials and payment tokens are never transmitted in plain text.

Cookie Controls

We use essential cookies to keep your session running and optional analytics cookies to improve the platform. You can turn off non-essential cookies from your browser settings at any time.

Data Retention Policy

Account records are kept for the period required under applicable financial regulations. Once that period expires and your account is closed, non-essential personal data is deleted from our systems.

Third-Party Data Sharing

We share data only with payment processors and game studio partners needed to run your account. Each partner is contractually restricted from using your data for any other purpose.

REACH OUR PRIVACY TEAM

Contact Us About Your Data

If you want to see what data we hold on your account, ask us to correct an error or request deletion, our support team handles all data requests directly. Reach us through live chat inside your account dashboard, by email, or through our dedicated privacy request form — we aim to acknowledge every request and provide a substantive response within the period required under applicable local regulations.

Live Chat Open your account dashboard and start a live chat session. Our team handles data access and correction requests through this channel during active support hours.
Email Request Send your data request to our support email address listed in the account settings page. Include your registered account name so we can locate your record quickly.
Privacy Request Form Use the dedicated form under Account Settings to submit a formal data subject request — including access, correction or deletion of personal data we hold on your account.

What You Asked About Our Privacy Policy

These are the questions our account holders ask most about how their data is handled. If your question is not covered here, reach us through live chat or the privacy request form in your account settings.

We collect your name, email, contact number and payment method details — for example, the wallet reference linked to your Touch 'n Go eWallet or GrabPay account. We also log device and session data automatically.

Yes. Submit a data access request through the privacy form in Account Settings or contact us via live chat. We will confirm what data we hold and provide a copy within the applicable regulatory timeframe.

Use the privacy request form or contact our support team by email. Note that some account and transaction records must be kept for the period required by financial regulations, even after an account is closed.

Only with payment processors (such as those handling Boost or DuitNow transactions) and game studio partners. Each is bound by contract to use your data solely for the service they provide — nothing more.

Payment details are stored only as tokens issued by your payment provider — we never hold raw card or wallet credentials. All data in transit is protected by SSL encryption, and account login requires OTP verification.

You can disable non-essential cookies at any time through your browser settings. Essential session cookies must stay active for your account to function correctly — turning those off will affect your login session.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.