Reference

How dragon6d Handles Your Personal Data

This Privacy Policy sets out exactly what data we collect when you open an account, fund it via Touch 'n Go eWallet, Boost or GrabPay, and use the lobby.

Account data collected at registrationPayment data from Touch 'n Go eWallet, Boost, GrabPayCookie and device usage dataYour right to access or delete dataContact us to raise a data request
dragon6d How dragon6d Handles Your Personal Data
DATA CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to access, correct or delete your data, the fastest route is live chat inside your account. For formal written requests — such as a full data export or an account closure with deletion — use the email channel. We aim to acknowledge every data request within two working days and respond in full within the timeframe required by applicable law.

Team online

Live Chat

Start a chat session from inside your account dashboard. Identify yourself with your registered email and we will pull up your data record straight away.

Email Request

Send a written data request to our support address. Include your account username and the specific data action you need — access, correction or deletion.

Account Settings

Minor data corrections — display name, mobile number, linked e-wallet — can be updated directly in Account Settings without contacting support at all.

DATA HANDLING PRACTICE

How We Protect and Manage Your Information

We apply SSL encryption across every page and every payment step. Account login uses a one-time password sent to your registered mobile number, which means even if your password is compromised, a second factor stands between an unauthorised party and your account. Here is how we handle the four areas that matter most to your data privacy.

Cookies and Tracking

We use session cookies to keep you logged in and analytics cookies to see which lobby sections load slowly. You can block non-essential cookies via your browser settings at any time without losing account access.

Payment Data Security

Transaction data from Touch 'n Go eWallet, Boost and GrabPay is passed through encrypted channels. We store only the last four digits of any linked account number — never the full credential.

Account Security

Every login triggers an OTP to your registered number. If we detect a login from an unfamiliar device, the session is held until you confirm via OTP, then flagged for your review in account history.

Data Retention

Active account data is kept while your account remains open. After closure, we retain only the records required under applicable law, then delete the rest on a rolling schedule.

Your Privacy Policy Questions Answered

These are the data and privacy questions we hear most from account holders. If your question is not covered here, live chat is the quickest way to get a direct answer from our team.

We collect your name, email, mobile number and the payment method you register — such as Touch 'n Go eWallet or Boost. We also log your device type and IP address during sessions for security purposes.

Yes. Send a written request via the email support channel with your account username. We will compile your data record and deliver it within the timeframe required under applicable law.

Contact us through live chat or email to request deletion. We will close your account, remove personal data we are not legally required to retain, and confirm once the process is complete.

We share only what is needed to complete a transaction — for example, your account number with GrabPay or DuitNow when processing a withdrawal. We do not sell your data to advertisers.

Session cookies keep you logged in. Analytics cookies help us see which sections of the lobby load slowly on mobile. You can turn off non-essential cookies in your browser without affecting your login or account access.

We keep only the records required by applicable law after your account is closed, then delete everything else on a rolling schedule. The exact retention period depends on the legal requirement in your region.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.