Rujukan Laman

How tc77 Handles Your Personal Data

At tc77, we are clear about what personal data we collect from your account, why we collect it, and how long we keep it.

Data collected only for account purposesTouch 'n Go & GrabPay transaction records securedYour right to access or delete dataNo data sold to third partiesMalaysian accounts covered
tc77 How tc77 Handles Your Personal Data
REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

If you have a question about how your data is used, want to request a copy of what we hold, or need to correct inaccurate details…

Live Chat Start a live chat session from any page on tc77.club.
Email Send your request to our privacy inbox at [email protected].
Help Centre Our Help Centre at tc77.club/help contains a dedicated privacy request form.
HOW WE PROTECT YOU

Six Ways We Keep Your Account Data Safe

Data protection at tc77 is not a checkbox exercise — it shapes how we design account flows, payment handling and retention schedules.

Encrypted Data Storage

All account data — including your name, contact details and payment identifiers — is stored using AES-256 encryption at rest. Access to the database is restricted to authenticated internal systems only, with audit logs kept for every read or write operation.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You may decline non-essential cookies via the cookie banner shown on your first visit; declining these does not affect your ability to log in or transact.

Payment Data Handling

Your Touch 'n Go, GrabPay, Boost dan FPX payment tokens are passed directly to the relevant processor and are never stored on tc77 servers in full. We retain only a masked reference number for transaction reconciliation and dispute resolution.

Data Retention Schedule

We keep account data for as long as your account remains active and for a defined period after closure, as required by applicable law. Once the retention window closes, personal data is permanently deleted from all live and backup systems.

Your Right to Access and Correction

You may request a full export of the personal data we hold on your account at any time. If any detail is inaccurate, contact our privacy team and we will update it within three working days and confirm the change by email.

Account Security Practices

Logins are protected by hashed passwords and optional two-factor authentication. Suspicious login attempts trigger an automatic account hold and an email alert to your registered address, so you are notified before any data is accessed.

Common Questions About Your Privacy at tc77

The questions below cover what data we hold, how you can see or remove it, and what happens when you close your account. If your question is not here, reach our privacy team through live chat or email — details are in the section above.

We collect your name, email address, phone number, date of birth and the payment method details you use — such as your Touch 'n Go or GrabPay reference. We also log your session activity to maintain account security and fulfil transaction requests.

We share data only with payment processors — Touch 'n Go, GrabPay, Boost and FPX — to complete transactions, and with identity verification partners where required by law. We do not sell your data to advertisers or unaffiliated companies under any circumstances.

Submit a data-access request via the privacy form in our Help Centre or email [email protected] from your registered address. We will compile and send your data export within five working days of confirming your identity.

Yes. Send a deletion request through any of our contact channels. We will remove your personal data from live systems once the legally required retention period has passed. We will confirm by email when the deletion is complete.

After an account is closed, we retain the minimum data required by applicable Malaysian and international regulations for the period those regulations specify. After that window closes, all personal data is permanently deleted from live and backup systems.

We use essential cookies for login sessions and optional analytics cookies to improve the platform. You can accept or decline non-essential cookies via the banner shown on your first visit. Declining analytics cookies has no effect on your account or payment functions.

Contact our privacy team by live chat or email with your registered account address and the details you need corrected. We verify the change against your identity record and update your account within three working days, sending a confirmation once done.