Reference

How bestsuper Handles Your Personal Data

When you open an account with us, we collect only what we need to keep your experience running — your login details, payment records from channels like Touch 'n Go eWallet, Boost, and GrabPay, and session data.

Account data kept secureTouch 'n Go eWallet, Boost, GrabPay payment recordsYour rights explained clearlyContact us to update or delete
bestsuper How bestsuper Handles Your Personal Data
REACH OUR TEAM

Contact Us About Your Privacy Rights

If you want to review the data we hold on your account, correct something, or ask us to delete records entirely, our support team handles privacy requests directly. Whether you are in George Town or anywhere else in Malaysia, you can reach us through live chat, email or our on-site message form. We aim to acknowledge your request within one business day and resolve it as quickly as the verification process allows.

Team online

Live Chat

Start a chat session from any page in the lobby. Our support team can pull up your account data summary and walk you through a deletion or correction request.

Email Support

Send your data access or correction request to our support email address. Include your registered mobile number so we can verify your identity before making changes.

On-Site Message Form

Use the contact form in your account dashboard to submit a formal privacy request. We log every submission with a reference number so you can follow up if needed.

HOW WE PROTECT IT

Our Approach to Data Security and Retention

We use SSL encryption across all pages and account flows, meaning your data travels encrypted whether you are funding your account via Boost or checking your withdrawal history on mobile. Account passwords are stored as hashed values — we cannot see them, and no support agent will ever ask for your password. We review data retention schedules periodically to remove records that no longer serve a legitimate purpose under applicable Malaysian data protection law.

SSL Encryption

Every page on bestsuper runs over SSL. Your login credentials, GrabPay transaction details and account balance are transmitted encrypted at all times.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand how our lobby pages load on your device. You can clear cookies in your browser at any time without losing your account data.

Account Verification

When you request a withdrawal, we verify your identity against the name on your registered Touch 'n Go eWallet or Boost account. This step protects you from unauthorised withdrawals.

Data Retention

Transaction records are kept for the period required under Malaysian financial regulations. Once that period expires, records are scheduled for secure deletion unless an active dispute requires them.

Common Questions About Our Privacy Policy

Below are the questions we hear most often about how bestsuper handles account data, payment records and your rights under this policy. If your question is not covered here, reach out via live chat or email and we will give you a direct answer.

We collect your name, email address, mobile number and a hashed version of your password. We also log your device type and IP address to protect your account from unauthorised access.

We store transaction reference numbers and amounts only. We do not store your wallet PIN, full account number or any credential from your Touch 'n Go eWallet, Boost or GrabPay app.

Yes. Submit a data access request through live chat or email with your registered mobile number. We verify your identity first, then provide a summary of stored account and transaction data.

Send a deletion request via the on-site message form or email. We will process it after verifying your identity. Certain transaction records may be retained for the period required by Malaysian financial regulations.

We share data only with payment processors like DuitNow or FPX to complete transactions you initiate. We do not sell personal data to advertisers, data brokers or unrelated third parties.

Session cookies keep your account login active during your visit. Analytics cookies help us understand page load behaviour on mobile devices. Neither type links your browsing to your real-world identity outside our platform.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.