Reference

What bd44 Collects and How We Use It

Your account with bd44 involves real data — your name, contact details, and payment activity through Touch 'n Go eWallet, Boost, or GrabPay.

Data collected at account creationPayment data: Touch 'n Go eWallet, Boost, GrabPayCookie and device activity trackingRetention periods and deletion rightsHow to contact us about your data
bd44 What bd44 Collects and How We Use It
DATA HANDLING STANDARDS

How We Protect and Manage Your Information

Data protection at bd44 is not a single step — it runs across how we store account records, how payment references are handled, how cookies behave in your browser session, and how long we keep inactive account data. Each area below covers one part of that process so you can see what happens at each stage.

Account Security Your account is protected by password hashing and OTP verification at login. We do not store plain-text passwords, and any suspicious session triggers an automatic lock that you clear through your registered contact.
Cookie Handling We use session cookies to keep you logged in and analytics cookies to understand which sections you visit. You can adjust cookie preferences from the settings panel; turning off analytics cookies does not affect your account function.
Payment Data Retention Transaction references for Touch 'n Go eWallet, Boost and GrabPay deposits are kept for the period required by applicable financial regulations. After that window, payment records are removed from active storage.
Data Retention and Deletion Active account data is kept while your account remains open. If you close your account, we retain records for the legally required period and then delete them. You can request early deletion where law allows.
DATA REQUEST CHANNELS

How to Reach Us About Your Privacy

If you want to access your stored data, correct something on file, or ask us to remove your account information, these are the channels where our team picks up data-related requests. Responses to data queries follow the timeline set out in our policy — we do not leave requests unacknowledged.

Live Chat Start a live chat session from your account dashboard. For data requests, describe what you need clearly so our team can locate your record and respond accurately.
Email Support Send your data request by email with your registered account name and the action you are asking for — access, correction, or deletion. We confirm receipt and follow up within the stated period.
Account Help Centre The account help section inside your profile lists the steps to submit a formal data request without needing to contact support directly. Follow the on-screen steps to log your request.

Common Questions About Your Privacy at bd44

These are the questions we get most often from account holders about how their data is handled. If your question is not here, the support channels listed above are the right place to take it.

We collect your name, email, phone number and date of birth at registration. Payment activity through Touch 'n Go eWallet, Boost or GrabPay generates transaction references that are also stored against your account record.

We share data only with payment processors needed to clear your transaction and with authorities where Malaysian law requires it. We do not sell your data or share it for third-party marketing purposes.

Submit a data access request through live chat or email with your registered account name. Our team will pull your record and send you a summary of what we hold within the period stated in this policy.

Yes. Once your account is closed, you can request deletion of your personal data. We keep records for the legally required period first, then remove them. Submit the request through the account help section or by email.

Payment references from DuitNow, FPX, Touch 'n Go eWallet and other methods are kept for the duration required by applicable financial regulations in Malaysia, then removed from active storage.

We use session cookies for account login and analytics cookies to track page visits. Analytics cookies can be switched off from your settings panel without affecting your ability to log in or make deposits.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.