Reference

How winmy15 Handles What You Share With Us

When you open an account with us or move funds through Touch 'n Go eWallet, Boost, or GrabPay, you share certain personal details — and this page tells you exactly what we collect, why we keep it, and what rights you have over it.

Account data kept secureLocal payment privacy coveredYour rights, clearly statedNo data sold to third partiesContact us to request changes
winmy15 How winmy15 Handles What You Share With Us
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to review, correct or remove the personal data we hold on your account, reach out through any of the channels below. We aim to acknowledge data-related requests promptly and will follow up with the relevant verification steps before making any changes to your account record.

Live Chat Start a live chat session from the winmy15 site or mobile browser — the quickest path for account-related data questions during operating hours.
Email Support Send your data request by email with your registered account name. We will verify your identity before actioning any changes or disclosures.
Account Settings Log into your account, head to the profile section, and update basic contact details directly. For deletion or export requests, use chat or email.
DATA HANDLING PRACTICES

Security, Cookies, Retention and Your Rights

We apply consistent data-handling practices across every account and every payment method — whether you are depositing through Maybank2u, logging in via mobile browser, or reviewing past transactions. The sections below cover the four areas your data rights touch most directly.

Account Security

Your account credentials are stored using one-way encryption. Login sessions are monitored for unusual activity, and any suspicious access triggers an automatic review before the session continues.

Cookies and Session Data

We use cookies to keep your session active across pages and to remember your preferred language and payment method. You can clear cookies at any time through your browser or mobile device settings.

Data Retention

Active account data is held for as long as your account remains open. When an account is closed, we retain only what applicable local law requires us to keep, then delete or anonymise the rest.

Your Rights

You have the right to request a copy of your data, correct inaccuracies, or ask us to delete information we no longer need. Submit these requests through live chat or email, verified against your account.

Common Questions About Your Privacy on winmy15

These are the data and privacy questions we hear most. If yours is not here, open a live chat or send us an email — we will give you a direct answer tied to your specific account situation.

We collect your name, email address, contact number and any identity documents needed under local law. Payment method details — such as your GrabPay or Boost wallet ID — are logged only to process transactions.

Yes. Transaction records from all supported payment methods, including Touch 'n Go eWallet and Boost, are stored securely in encrypted form and used solely for account management and legal compliance purposes.

We do not sell or rent your personal data. Limited sharing occurs only with payment processors like GrabPay or DuitNow for transaction purposes, and with service providers bound by confidentiality agreements.

Contact us via live chat or email with your registered account name. We will verify your identity first, then provide a summary of the data associated with your account within a reasonable timeframe.

Yes, you can request deletion. We will remove data that is no longer operationally or legally required. Some records — such as transaction logs — may need to be retained for a period under applicable local law before deletion.

Cookies help us maintain your session and remember account preferences across browser tabs. They do not store payment credentials. You can disable cookies in your mobile browser settings, though some account features may be affected.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.