Reference

What highland999 Does With Your Personal Information

This page sets out exactly what data we collect when you open an account, make a deposit via Touch 'n Go eWallet, Boost or GrabPay, or contact our support team.

Account data handled securelyTouch 'n Go eWallet, Boost, GrabPay payment records protectedYour right to access or delete dataAvailable where local law permits
highland999 What highland999 Does With Your Personal Information
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to review what data we hold on your account, request a correction, or ask us to delete records, our support team handles these requests directly. Reach us through live chat inside your account, by email, or via our help desk form — each channel connects to the same team with access to your account file. We aim to respond to all data-related requests within a reasonable period and will confirm receipt of your request straight away.

Live Chat Open your account and tap the live chat icon. Our team can pull up your data file and walk you through any access or deletion request on the spot.
Email Support Send your data request to our support email address. Include the account username and the specific records you are asking about so we can respond without delays.
Help Desk Form The help desk form inside your account settings is the fastest path for written requests. We log your submission immediately and track it to resolution.
HOW WE PROTECT IT

Data Handling, Cookies, Security and Retention

We apply the same care to your data that we apply to your account wallet. Every piece of personal information — from your login credentials to your GrabPay or Boost deposit history — is stored with encryption in place. Our practices are reviewed whenever our systems or local legal requirements change, and this page is updated to reflect those changes.

Account Security

Your login is protected by PIN or OTP verification. We flag unusual access attempts and can lock your account at your request while a review is carried out.

Cookie Controls

Session cookies keep your account active between the lobby and your wallet. You can clear or block these through your browser settings; doing so may log you out of your current session.

Data Retention

We keep account and payment records only as long as needed for operations or legal compliance. Once that period passes, records are deleted on a scheduled basis — not stored indefinitely.

Your Rights

You can ask us at any time to show you what data we hold, correct inaccurate details, or begin a deletion request. Each request is logged and handled by our support team.

Questions About Your Data and Privacy Rights

These are the questions we hear most often about how your data is handled. If something here does not cover your situation, reach out through live chat or the help desk form and we will look into your account specifically.

We collect your name, contact details, and the payment method you register. If you deposit via Touch 'n Go eWallet, Boost or GrabPay, we also hold the transaction reference tied to that transfer.

We share only what is necessary with payment processors like DuitNow and FPX to clear your transactions. We do not sell your information to advertisers or unrelated third parties.

Open a request through live chat or our help desk form. Quote your account username and we will compile the relevant records and send them to your registered contact address.

Yes. Submit a deletion request via the help desk form or email. We will remove records that are no longer required for legal or payment compliance within the applicable local timeframe.

Records are kept only as long as needed for account operations or where local law in Malaysia requires retention. After that period, they are deleted on a rolling schedule.

Most personal details are removed after account closure within the period set by applicable local rules. Any record subject to a legal hold will be retained only for the duration required.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.