Reference

How mcd66 Handles Your Personal Information

When you open an account with us, we collect only what we need to run your account, process your payments, and keep your activity secure.

Account data kept securePayment details never shared without consentYour right to access and update your dataTouch 'n Go eWallet, Boost, GrabPay transaction records protectedContact us to request data changes
mcd66 How mcd66 Handles Your Personal Information
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to review, correct, or remove data we hold on your account, our support team handles these requests directly. Reach out through any of the channels below and include your registered account email so we can locate your records without delay.

Live Chat Open the live chat widget from your account dashboard. Our team handles data enquiries and can escalate your request to the right department during operating hours.
Email Support Send your data access or deletion request to our support email. Include your registered email address and the specific data you want reviewed or removed.
Account Settings Log into your account, go to Account Settings, and update your contact details directly. For deeper data requests — such as full export or permanent deletion — contact support.
DATA HANDLING STANDARDS

How We Protect and Manage Your Account Data

We approach data handling the same way we approach payments — directly and without unnecessary steps. Every piece of account data is stored on encrypted servers, and access within our team is restricted to staff who need it to run your account or process your transactions. We review our data practices when payment or platform processes change.

Cookies and Session Tracking

We use session cookies to keep you logged in and functional cookies to remember your preferred payment method, such as Touch 'n Go eWallet or GrabPay. You can clear these from your browser at any time without losing your account.

Account Security and Access Logs

Every login generates an access log tied to your device and IP. If we detect a login from an unfamiliar location in Kuala Lumpur or elsewhere, we may trigger an OTP verification step to your registered number before granting access.

Data Retention After Account Closure

When you close your account, we retain transaction records and identity verification data for the period required under applicable local rules. Non-essential preference data is deleted sooner, typically within 30 days of closure.

Requesting Changes to Your Data

You can request a correction to your name, contact number or email through live chat or email support. Identity verification is required before we action any change to core account details.

Common Questions About Your Privacy on mcd66

These are the questions we hear most often from account holders about how their data is used, who can see it, and how to manage it. If something here does not answer your situation, contact our support team directly.

We collect your name, email address, phone number, and payment method details — for example, your registered Touch 'n Go eWallet or Boost account reference — along with device and session data for security purposes.

We share data only with payment processors needed to complete your Touch 'n Go eWallet, GrabPay or FPX transactions, and with compliance partners where local law requires it. We do not sell your data.

Yes. Contact our support team via live chat or email with your registered account email address. We will compile and return a summary of the data we hold linked to your account.

Transaction and identity records are kept for the retention period required under applicable local rules. Preference and session data not tied to financial records is deleted within approximately 30 days of account closure.

We store only the transaction reference and amount needed to match your deposit or withdrawal to your account. Full wallet credentials are never stored on our servers — those stay within your e-wallet provider's system.

Log into your account and go to Account Settings for basic updates. Changes to core identity fields require an OTP verification step. If you run into issues, live chat support can assist you through the process.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.