Reference

How q22 Handles Your Personal Information

Your account data — from the details you enter at registration to the payment methods you link, including Touch 'n Go eWallet, Boost, and GrabPay — is handled with care and kept strictly for operating your account.

No data sold to third partiesTouch 'n Go eWallet, Boost, GrabPay account context onlyAccount deletion on requestSSL-protected data transferAvailable where local law permits
q22 How q22 Handles Your Personal Information
DATA HANDLING STANDARDS

How We Protect and Manage Your Account Data

Data protection is not a back- afterthought at q22 — it shapes how we build account flows and handle payment integrations. Every data point we keep exists because it serves a specific operational function: identity verification, transaction processing, fraud detection, or regulatory compliance. Where we no longer need data for those functions and are not legally required to retain it, we delete it. The four areas below cover how this works in practice

SSL-Secured Connections

All data exchanged between your device and q22 — including login credentials, payment details, and account actions — travels over SSL-encrypted connections to prevent interception.

Cookie and Session Data

We use session cookies to keep you logged in and to track page interactions for performance purposes. You can clear these via your browser settings; doing so will log you out of your current session.

Payment Data Retention

Transaction records linked to Touch 'n Go eWallet, Boost, GrabPay, or FPX are kept for the period required by applicable financial regulations. We do not store full card or wallet credentials on our servers.

Account Access and Identity Checks

When you request data access, correction, or deletion, we verify your identity via your registered email and a one-time code before actioning anything. This step protects your data from unauthorised requests.

PRIVACY CONTACT PATHS

How to Reach Us on Privacy Matters

If you have a question about this policy, want to access the data we hold on your account, or need to request a correction or deletion, our support team is the right starting point. Reach us through live chat inside your account, by email, or through the help form on the contact page. We aim to acknowledge privacy requests within one business day and resolve them as quickly as your verification allows.

Live Chat Open your account, tap the chat icon, and raise your privacy request directly. Our team can pull up your account record and confirm what data we hold.
Email Support Send your request to the support address shown on our contact page. Include your registered account email so we can locate your record without delay.
Help Form Use the on-site help form for written privacy requests. Select the 'Account & Data' category and describe what you need — correction, deletion, or a data summary.

Common Questions About Your Data on q22

Below are the questions we hear most often about how q22 handles personal data, cookies, and account records. If your question is not here, live chat is the fastest way to get a direct answer.

We collect your name, email address, contact number, and the payment identifiers you link — such as your Touch 'n Go eWallet or GrabPay account reference. Device and session data is also logged for security purposes.

We share data only with payment processors — like those handling Boost or FPX transactions — and only the minimum they need to complete your transaction. We do not sell personal data to marketing companies or unrelated third parties.

Contact us via live chat or the help form, select 'Account & Data', and confirm your identity with the one-time code we send to your registered email. We will compile your data summary and send it to that address.

Yes. Submit a deletion request through live chat or email. We will remove data we are not legally required to retain. Financial transaction records linked to DuitNow or FPX may be kept for the legally required period before deletion.

We keep data for as long as applicable laws require — typically covering financial records and identity verification files. Once that period expires and no legal hold applies, the data is deleted from active systems.

Yes. Session cookies keep your login active and allow us to record page interactions for platform performance. You can remove them in your browser settings, though this will end your active session and require you to log in again.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.