Reference

How vcuci Handles Your Personal Data

When you open an account with vcuci and make deposits through Touch 'n Go eWallet, Boost or GrabPay, you share information with us — this page sets out exactly what we collect, why we need it, and the choices you have over it.

Data collected at account creationLocal payment data handlingCookie and device dataYour rights to access and deleteHow to contact us about your data
vcuci How vcuci Handles Your Personal Data
DATA HANDLING PRACTICES

How We Protect and Manage Your Information

We apply specific controls at each stage where your data moves — from the moment you register through every deposit and withdrawal. The sections below describe our practices across cookies, account security, data retention and your right to make changes.

Cookies and Device Data

We set session cookies to keep you logged in and analytics cookies to see which lobby sections load slowest. You can adjust cookie preferences in your browser settings at any time without losing your account access.

Account Security Measures

Every login triggers an OTP sent to your registered mobile number. If an unrecognised device or IP attempts access, the session is blocked until you verify via that OTP — your account wallet stays locked until you confirm.

Data Retention Period

We keep account records for as long as your account remains active plus the period required by applicable financial and gaming regulations. When you request deletion, non-regulatory data is removed within 30 days.

Requesting Changes to Your Data

You can correct your registered name, email or phone number through Account Settings. For identity document updates — such as changing the IC number linked to your GrabPay or DuitNow verification — contact live chat with the new document.

DATA RIGHTS CONTACT

Reach Us About Your Privacy

If you want to access, correct or remove personal data we hold on your account, our support team handles these requests directly. Reach out through any of the channels below and include your registered email address so we can locate your account record without delay.

Live Chat Start a live chat session from the account page. Our agents can raise a data-access request on your behalf and confirm receipt within the same session.
Email Support Send your data request to our support email address. Include your registered name and the last four digits of your account-linked Touch 'n Go eWallet or Boost number for faster matching.
Account Settings Log in, go to Account Settings, and use the Privacy section to download a copy of your stored profile data or submit a deletion request directly without contacting support.

Common Questions About Your Privacy at vcuci

These are the questions our account holders ask most often about how their data is managed, stored and shared. Each answer reflects what we actually do — not a generic policy summary.

We hold your registration details, identity verification documents, deposit and withdrawal transaction references, and device or session logs. Payment PINs and full wallet credentials are never stored on our side.

We share only what is necessary with payment processors like Touch 'n Go eWallet, Boost and GrabPay to complete transactions, and with game studios under data-processing agreements. We do not sell your data to marketing companies.

Log in, go to Account Settings, and use the Privacy section to export your profile data. Alternatively, start a live chat and ask an agent to raise a formal data-access request — you will receive the data file by email.

Yes. Submit a deletion request through Account Settings or via live chat. Non-regulatory data is removed within 30 days. Records required by financial regulations are retained only for the legally mandated period.

Deposits and withdrawals through Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX are processed over encrypted connections. We log transaction references for reconciliation only — never your wallet PIN or full account number.

If a security incident affects your account data, we will notify you at your registered email address as soon as we confirm the scope, and tell you which data was involved and what steps we have taken to contain it.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.