Reference

How harta33 Handles Your Personal Information

This Privacy Policy sets out exactly what data harta33 collects when you open an account, make a deposit via Touch 'n Go eWallet, Boost, or GrabPay, and use our lobby — and how we keep that data secure.

Account data protectionLocal payment data — Touch 'n Go eWallet, Boost, GrabPayYour right to access and correctCookie and device data explainedClear contact path for data requests
harta33 How harta33 Handles Your Personal Information
DATA HANDLING STANDARDS

How We Protect and Manage Your Information

Keeping your account data accurate and secure is an operational responsibility, not a side note. Below is how we approach each key area — from cookies to retention periods — so you have a clear picture of what happens to your information from the moment you log in.

Cookies and Device Data We use session cookies to keep you logged in and preference cookies to remember your lobby settings. You can manage cookie permissions through your browser settings at any time; blocking some cookies may affect account functions.
Account Security Practices Account access is protected by password and OTP verification sent to your registered phone number. We log each login attempt and flag unusual access — for example, a new device or a different location — before allowing a session to proceed.
Data Retention Period We retain your account data for as long as your account remains active and for the period required under applicable financial and anti-fraud regulations thereafter. Once that period ends, data is deleted or anonymised.
Requesting Changes to Your Data You can ask us to correct inaccurate information, request a copy of what we hold, or ask us to delete your account data. Verification of your identity is required before we act on any such request to protect your account.
DATA REQUEST CONTACTS

How to Reach Us About Your Privacy

If you want to access, correct, or delete the personal data we hold for your account, reach out through any of the channels below. Our team handles data requests separately from general account queries, so name your request clearly — for example, 'data access request' or 'account data deletion' — so we route it to the right person without delay.

Team online

Live Chat

Open the chat widget from any page in your account. Mention 'privacy request' at the start so the agent routes you to our data team directly.

Email Support

Send your data request to our support address listed in your account settings. Include your registered phone number so we can verify your identity before responding.

Account Settings

Some data corrections — like updating your name spelling or email address — can be made directly inside your account profile without needing to contact us.

Common Questions About Your Data and This Policy

These are the questions we receive most often about data, cookies, account access, and how to exercise your rights. If your question is not here, contact us through live chat and quote 'privacy query' so we handle it correctly.

We collect your name, email address, phone number, and the payment reference data from your chosen method — Touch 'n Go eWallet, Boost, or GrabPay — during account creation and deposit verification. We do not store your e-wallet PIN or online banking password.

We share data only with payment processors handling your Touch 'n Go eWallet, Boost, GrabPay, or FPX transactions, and with technical partners under equivalent data obligations. We do not sell your personal information to any third party.

Contact us through live chat or the email address in your account settings, quoting 'data access request' and your registered phone number. We verify your identity first, then provide your data summary within the timeframe required by applicable law.

Yes. Submit a deletion request through live chat or email. We will close your account and remove personal data once any mandatory retention period under financial regulation has passed. You will receive confirmation when the process is complete.

We use session cookies to maintain your login and preference cookies to save lobby settings. You can block or delete cookies via your browser settings, though some account features may not work correctly if certain cookies are disabled.

Yes — whether you access from Kuching or elsewhere in Malaysia, the same data standards apply to your account. Access to the platform depends on local law, and data handling follows the applicable framework for permitted regions.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.