Reference

How nk99 Handles Your Personal Information

Your account with us carries real information — your name, your contact details, your payment activity across Touch 'n Go eWallet, Boost, and GrabPay.

Data collected only for account operationLocal payment data handled with careYour rights to access and correct your dataRetention periods clearly explainedContact us to act on your data rights
nk99 How nk99 Handles Your Personal Information
HOW WE PROTECT YOU

Data Handling, Cookies, Security and Retention

Every layer of your account — from the login step to the payment confirmation screen — operates under data-handling practices designed to limit exposure and give you clear control. We keep these practices consistent whether you are accessing via mobile or desktop.

Account Security

Login is protected by OTP verification sent to your registered mobile number. We never store full payment credentials — only the transaction reference your e-wallet provider returns after a transfer clears.

Cookie Management

We use session cookies to maintain your login state and preference cookies to remember your chosen language and account settings. You can clear or block these in your browser without losing your account data.

Data Retention

Active account data is kept for the life of your account. After you close your account, we retain only what financial record-keeping obligations require, then delete the remainder on a defined schedule.

Third-Party Processors

Payment processors handling Touch 'n Go eWallet, Boost and GrabPay transactions access only the data fields needed to complete and verify your transfer. No marketing use of that data is permitted under our agreements.

DATA RIGHTS CONTACT

Reach Us About Your Privacy

If you need to access, correct, or remove personal data held on your account, our support team handles those requests directly. We do not route data requests through automated forms alone — a real agent reviews each submission and responds with a clear outcome. Reach us through any of the channels below.

Live Chat Start a live chat session from any page on nk99. An agent will verify your account identity before processing any data access or correction request.
Email Support Send your data request to our support email with your registered account name and a brief description of what you need. We acknowledge within one working day.
Account Help Centre Log in to your nk99 account, head to Account Settings, and use the Help section to submit a privacy-related query directly attached to your account record.

Common Questions About Your Privacy on nk99

These are the questions we hear most often about how your data is handled, what rights you hold, and how to act on them. Each answer reflects how our account and payment systems actually work.

We collect your name, email, phone number and the payment method details you use — such as your Touch 'n Go eWallet or Boost reference — to verify your identity and process account transactions.

Yes. Contact our support team via live chat or email with your registered account name. We will compile and send your data summary after verifying your identity through your registered contact details.

Log in, go to Account Settings and update basic details directly. For information you cannot edit yourself — such as identity verification records — contact support and an agent will handle the correction after re-verification.

We share data only with payment processors like GrabPay and DuitNow providers, and with fraud-detection services. Each is bound by a data-processing agreement restricting use strictly to your transaction.

We delete personal data we no longer need once your account closes. Financial transaction records are held only as long as applicable record-keeping obligations require, then removed on a scheduled basis.

Session cookies are needed for your login to work. Preference cookies are optional — you can block or clear them in your browser settings at any time without affecting your stored account data or payment history.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.