Rujukan Laman

How 1xroll Handles Your Personal Data

At 1xroll, your personal data belongs to you — we collect only what we need to run your account, process your deposits via Touch 'n Go, GrabPay, Boost…

Data collected only as neededTouch 'n Go & GrabPay transaction records protectedYour right to access, correct or deleteNo sale of personal data to third partiesContact our team for any data request
1xroll How 1xroll Handles Your Personal Data
DATA REQUEST CHANNELS

Reach Us About Your Privacy

If you want to review, update or remove the personal data we hold on your account, our data team is reachable through the channels below.

Live Chat Start a live chat session directly from your account dashboard. Our team is available around the clock to handle data access requests, corrections and account queries without delay.
Email Privacy Team Send your data request to our dedicated privacy email address. Include your registered account email and the specific data you want to access, correct or have removed from our records.
Privacy Request Form Submit a structured data request through the privacy form inside your account settings. This creates a tracked case so you can follow the status of your request until it is resolved.
HOW WE PROTECT YOU

Data Handling, Cookies and Account Security

We use a combination of encryption, access controls and retention policies to keep your data safe from the moment you register.

Data Encryption

All data transmitted between your device and our servers is encrypted using TLS. Payment identifiers for Touch 'n Go, GrabPay and Boost are tokenised so raw account numbers are never stored on our platform.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand how pages perform. You can manage cookie preferences in your browser settings at any time without affecting core account functions.

Account Security

Two-factor authentication is available on your account. We log every login attempt with device fingerprint and IP address so you can review access history and flag any session you did not authorise.

Data Retention

We keep your account data for as long as your account remains active and for a period after closure as required by applicable Malaysian regulations. Once the retention period ends, data is securely deleted from our systems.

Third-Party Sharing

We share data only with payment processors like Touch 'n Go, GrabPay, Boost dan FPX to complete transactions, and with fraud-detection services. We do not sell your personal data to advertisers or data brokers.

Requesting Changes

You have the right to access a copy of your data, correct inaccuracies or request deletion. Submit your request through live chat or our privacy email and we will process it within five business days.

Your Questions About This Privacy Policy

We have gathered the questions our Malaysian account holders ask most often about how their data is collected, stored and managed on 1xroll. If your question is not answered here, reach our privacy team directly via live chat or email.

We collect your name, email address, phone number and the payment identifiers linked to your chosen deposit method — Touch 'n Go, GrabPay, Boost or FPX. We also log device and session data to secure your account.

Yes. Submit a data access request via live chat or our privacy email with your registered account email. We will compile and send your data within five business days, in accordance with applicable Malaysian law.

Send a deletion request through the privacy form in your account settings or email our data team directly. We will remove your data once the mandatory retention period required under local regulations has passed.

We share data only with payment processors — Touch 'n Go, GrabPay, Boost dan FPX — and fraud-detection partners strictly to process your transactions. We never sell your personal details to advertisers or data brokers.

We use session cookies to maintain your login state and analytics cookies to measure page performance. You may disable non-essential cookies in your browser settings; core account and payment functions will continue to work normally.

We retain your data for the period your account is active and for the additional time required by applicable Malaysian regulations after closure. Once that period ends, your data is permanently and securely deleted from our servers.

Reach our privacy team via live chat available around the clock, or email the dedicated privacy address listed in your account settings. We aim to acknowledge your concern within one business day and resolve it within five.