Rujukan Laman

How ob9 Protects Your Personal Data

At ob9, we take the handling of your personal data seriously — from the moment you open your account to every transaction you make via Touch 'n Go…

Personal Data ProtectionMalaysian Law ComplianceSecure Data StorageYour Access RightsCookie Controls
ob9 How ob9 Protects Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy

If you have questions about how we handle your data, want to request a copy of the information we hold about you, or wish to ask us to correct or delete specific…

Email Privacy Request Send a written data request or correction notice to our privacy address. We acknowledge receipt within 24 hours and provide a full response on your personal data within three business days.
Live Chat Support Start a live chat directly from your ob9 account dashboard. Our support team can log a formal privacy enquiry on your behalf and escalate it to the data protection officer immediately.
In-Account Help Centre Navigate to the Help section inside your account to submit a structured privacy request form. This method creates a trackable ticket so you can follow the progress of your data enquiry at any time.
HOW WE HANDLE DATA

Explore Our Data Handling Standards

We apply layered security measures across every part of your account — from login authentication to payment record storage.

Data Collection

We collect only the data needed to run your account and process transactions via Touch 'n Go, GrabPay, Boost dan FPX. No excess fields are stored, and collection stops when your account is closed.

Cookie Usage

We use session cookies to keep you logged in, functional cookies to remember your preferred language and deposit method, and analytics cookies to understand how pages are used. You can adjust cookie preferences in your browser settings at any time.

Account Security

Your account credentials are stored using one-way encryption. We never store your raw password, and all login attempts are monitored. Suspicious activity triggers an automatic account review before any transaction is processed.

Data Retention

We keep your transaction records and account data for as long as required under Malaysian law or as needed to resolve disputes. Once the retention period lapses, data is securely deleted from our servers.

Third-Party Sharing

We share data only with payment processors and identity verification providers directly involved in running your account. Each third party is contractually bound to handle your data in line with PDPA 2010 standards.

Your Right to Access

You may request a full copy of the personal data we hold about you at any time. Submit your request through the Help Centre or via our privacy email, and we will provide the data in a readable format within three business days.

Open Your Privacy Questions Here

We have put together answers to the questions we hear most often about how we collect and protect data at ob9. If your question is not covered here, reach out through live chat or our privacy email and we will get back to you with a specific response.

We collect your name, email address, phone number, date of birth and payment method identifiers such as your Touch 'n Go or GrabPay account reference. We also log IP addresses and device details to protect your account from unauthorised access.

Payment data is passed directly to the relevant payment processor over an encrypted connection. We do not store your full payment credentials on our servers — only a transaction reference is retained for our records under PDPA 2010 requirements.

Yes. Submit a data access request through your account's Help Centre or email our privacy team. We will compile and deliver a readable copy of your personal data within three business days of verifying your identity.

Log a correction request via live chat or the Help Centre. Specify which field is incorrect and provide the accurate detail. Our team will update the record and confirm the change to you within two business days.

We retain account and transaction data for the period required under Malaysian law and to resolve any outstanding disputes. Once that period ends, your data is permanently deleted from our systems in a secure and verified process.

Data may be processed by payment providers or security vendors whose infrastructure sits outside Malaysia. In each case, we apply contractual safeguards to ensure your data receives a standard of protection consistent with PDPA 2010.

You can manage or disable cookies at any time through your browser settings. Note that disabling functional cookies may affect how your account preferences are saved between sessions, such as your chosen deposit method or language setting.