Reference

How winner21 Handles Your Personal Information

Your account details, payment records and session activity are handled under a clear set of rules — no guesswork. This page sets out exactly what we collect, why we collect it, and how you can request changes or deletion at any time.

Account data protectedPayment records securedYour rights, clearly statedContact us to update or remove
winner21 How winner21 Handles Your Personal Information
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

To request a copy of your data, ask us to correct inaccurate details, or submit a deletion request, use any of the channels below. We aim to acknowledge your request within one business day and resolve it as quickly as the verification process allows.

Live Chat Open the chat widget from any page on winner21. Identify yourself with your registered email and account username so we can locate your record quickly.
Email Support Send your privacy request to our support address. Include your account username and the specific action you need — access, correction or deletion — so we can route it correctly.
Account Settings Some data updates — display name, contact number, preferred wallet — can be made directly inside your account settings without contacting support.
DATA HANDLING STANDARDS

How We Protect and Retain Your Information

Data security and retention are not afterthoughts here — they are built into how the account system works. Your payment details are never stored in plain text, and wallet identifiers for Touch 'n Go eWallet, Boost and GrabPay are tokenised at the point of transaction. Account passwords are hashed and never visible to our team. We keep your account data for as long as your account is active and for a period after closure as required by applicable law. After that retention window closes, personal identifiers are removed from our active systems.

Encrypted Transactions

Payment data from Touch 'n Go eWallet, Boost and GrabPay passes through SSL-encrypted channels. Wallet tokens replace raw account numbers in our records after each transaction is confirmed.

Cookie Controls

We use session cookies to keep you logged in and preference cookies to remember your deposit method. You can manage or clear these through your browser at any time without affecting your account balance.

Retention Schedule

Active account data is kept while your account remains open. After account closure, records are held only for the period required under applicable law, then personal identifiers are purged from active storage.

Access and Correction

You have the right to request a copy of the data we hold on you, ask us to correct anything inaccurate, or request deletion where no legal retention obligation applies. Contact support to start that process.

Common Questions About Your Privacy on winner21

These are the questions we hear most often about how your data is handled. If your question is not covered here, reach out via live chat or email.

We collect your name, contact details, date of birth and payment identifiers — including those linked to Touch 'n Go eWallet, Boost or GrabPay. Device and session data is also logged for security purposes.

We do not sell your data. We share it only with payment processors needed to complete your transactions and with parties required by applicable law. No marketing third parties receive your personal details.

Contact us via live chat or email with your account username and a request for data access. We will verify your identity and provide a summary of the personal data held on your account.

Yes. Where no legal retention obligation applies, you can request deletion of your personal data. Submit the request through live chat or email; we will confirm what can be removed and the expected timeline.

We retain records for the period required under applicable law after account closure. Once that window passes, personal identifiers are removed from our active systems and are no longer accessible.

Wallet identifiers are tokenised at the point of transaction. Raw account numbers for Touch 'n Go eWallet, Boost and GrabPay are not stored in plain text anywhere in our system after the transaction completes.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.