Reference

Privacy Policy

We collect account details, payment records and session data when you open an account, deposit through Touch 'n Go eWallet, Boost or GrabPay, and browse the lobby.

Account securityPayment verificationSession loggingLive casino and slots
towkay888 Privacy Policy
SECURITY MEASURES

How We Protect Account Data

Your password is hashed before storage—no one at towkay888 can read it in plain text. Payment records move over encrypted connections; the same SSL protection that secures your bank's website protects deposits from your Touch 'n Go eWallet, Boost or GrabPay account to our system. Session cookies carry a random token, not your password or wallet details. Only support staff handling a live case see your transaction history, and every lookup is logged for audit. We do not share your data with advertisers, data brokers or social platforms.

Encrypted storage

Account credentials and payment records sit in encrypted database tables; even if someone accessed the server files, the data reads as cipher text without the decryption key.

Cookie management

Session cookies keep you logged in and remember your language preference; advertising and tracking cookies are not used on this platform, so you will not see third-party data collection.

Withdrawal verification

When you request a payout we check the mobile number and wallet name against your registration details; this step prevents unauthorized withdrawal attempts even if someone guesses your password.

Data request rights

You can ask for a copy of the personal information we hold, request corrections, or instruct us to delete your account; contact support with your registered mobile number to start any of these processes.

PRIVACY QUESTIONS

How to Reach Us

Questions about what we hold, requests to update your details, or instructions to delete your account all go through the same support channels. Use live chat for the fastest answer—the agent can confirm which records exist and start the update or deletion process on the same session. Email works when you want a written record or need to attach identity documents for a data request.

Team online

Live chat

Open the chat widget in the lobby footer and tell the agent you have a privacy question; they can pull your account records and explain what we hold within a few minutes.

Email support

Send your privacy request to the support email address shown in the contact section; expect a reply within one business day confirming receipt and outlining next steps.

Account settings

Log in and visit the account settings page to update your mobile number, email address or password; changes save immediately and the new details apply to your next login.

Your Privacy Rights

We hold your mobile number, email address, password hash, and the identity details you submit for withdrawal verification—typically your full name and date of birth required by payment processing rules in Malaysia.

Yes—contact support and request a data export; we will send a file listing your registration details, deposit and withdrawal records, session history, and any support chat transcripts tied to your account.

Log in, contact live chat or email support, and ask to close your account permanently; we will purge your login credentials and personal details after the mandatory transaction-record retention period ends.

We pass the necessary transaction reference to Touch 'n Go eWallet, Boost or GrabPay so they can confirm your deposit cleared, but we do not send your account data to advertisers, data brokers or unrelated third parties.

Inactive accounts remain in the system with login access intact; if you want everything removed you must request account closure—simply not logging in does not trigger automatic deletion under our retention policy.

Yes—go to account settings, enter the new contact details, and confirm with the OTP sent to your current number; once verified the new details replace the old ones across login and withdrawal flows.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.