Reference

How ong44 Handles Your Personal Information

This Privacy Policy tells you exactly what data we collect when you use ong44, why we collect it, and how we keep it secure.

No third-party data sellingTouch 'n Go eWallet, Boost, GrabPay payment data protectedAccount data encrypted in transitYour access rights respectedAvailable where local law permits
ong44 How ong44 Handles Your Personal Information
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to review what data we hold, ask us to correct something, or request deletion of your account records, our support team handles these requests directly. Reach out through any of the channels below and include your registered account email so we can verify your identity before acting on the request.

Team online

Live Chat

Start a live chat session from the ong44 website. Available for data access requests, correction queries and account privacy questions during support hours.

Email Support

Send your data request to our support email with your registered account details. We aim to respond and action verified requests within a reasonable timeframe.

Account Help Centre

Log into your ong44 account and navigate to Account Settings to find privacy options, including session management, linked payment methods and data preferences.

DATA HANDLING PRACTICES

How We Protect and Manage Your Information

Our data practices are designed around the actual account flows our platform uses — from how you log in on mobile to how your Touch 'n Go eWallet or GrabPay transaction is recorded. Each layer below reflects a real operational commitment, not a generic policy statement.

Encryption in Transit

All data sent between your device and our servers travels over SSL-encrypted connections. This covers login sessions, account updates and any payment reference data tied to Boost or GrabPay transactions.

Cookie Controls

We use session cookies to maintain your login state across pages without repeated OTP prompts. You can clear or block cookies via your browser settings, though some account functions may require them to work correctly.

Data Retention Rules

Your account data is kept while your account is active and for a period afterward as required by applicable law. Once that period passes, identifiable records are removed or anonymised from our systems.

Your Access Rights

You have the right to request a copy of the data we hold, ask for corrections, or request deletion. Submit your request through live chat or email with your registered account details for identity verification.

Common Questions About Your Privacy on ong44

These are the questions we hear most from account holders in Malaysia about how their data is used, stored and accessed. If something is not covered here, our live chat team can help directly.

No. We do not sell, rent or trade your personal information to any third party for marketing purposes. Data is shared only where required by applicable law or to process your transactions via payment providers like Touch 'n Go eWallet or Boost.

We record the transaction reference, amount in RM, timestamp and payment method used. We do not store your full e-wallet credentials — authentication happens within GrabPay or Touch 'n Go eWallet's own secure flow.

Contact our support team via live chat or email. Include your registered email address so we can verify your identity. We will provide a summary of the personal data linked to your account.

Yes. Submit a deletion request through our support channel. We will process it in line with applicable law — some records may be retained for the minimum period required before full removal.

We use session cookies to keep you logged in and to remember your account state between pages. You can disable cookies in your browser settings, but some account functions — including the payment wallet screen — may not work as expected without them.

Yes. The same Privacy Policy applies regardless of which device you use. Session data and payment references are treated identically whether you tap in via mobile browser or switch to desktop later in the day.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.