Reference

How 9winbox Handles Your Personal Information

When you open an account with us, we collect certain information to run your wallet, verify your identity and keep your account secure.

Data collected only for account operationNo third-party sale of your informationAccount holders may request data accessSecure storage with encryption in transitContact our team to raise a privacy concern
9winbox How 9winbox Handles Your Personal Information
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to access, correct or delete information we hold about you, reach out through any of the channels below. Our account support team can locate your records using your registered email or account number. For deletion requests, we will confirm receipt and complete the action within the period required by applicable law.

Team online

Live Chat

Start a live chat session from any page on 9winbox. Quote your account number so the team can locate your privacy request without delay.

Email Support

Send a written data request to our support email address. Include your registered name and the specific data you want to access, correct or have removed.

Account Settings

Log in, head to Account Settings, then select the Privacy section. From there you can review stored details and toggle non-essential data preferences directly.

DATA HANDLING PRACTICES

How We Protect and Manage Your Account Data

Security and transparency are built into every layer of how we store and process your information. From the moment you submit a Touch 'n Go eWallet deposit to when a withdrawal confirmation lands in your account, data moves over encrypted connections. Below are the four areas we are most often asked about.

Encryption in Transit

All data between your device and our servers travels over TLS encryption. This covers login sessions, wallet top-ups via Boost, and withdrawal requests routed through GrabPay or DuitNow.

Cookie Management

We use session cookies to keep you logged in and preference cookies to remember your display settings. Non-essential cookies require your consent and can be withdrawn at any time from the cookie settings panel.

Data Retention Rules

Identity documents submitted during account verification are retained for the statutory period required under applicable law. Session and browsing logs are deleted on a rolling schedule once they are no longer needed for security review.

Third-Party Access

We share data only with payment processors — such as the operators behind Touch 'n Go eWallet, Boost and FPX — strictly to complete your transactions. No data is sold or passed to advertisers.

Common Privacy Policy Questions

These are the questions we hear most from account holders about how their data is handled on 9winbox. If your question is not covered here, reach out via live chat or email and we will respond with the specific detail you need.

We collect your name, email address, date of birth and contact number at registration. Once you make a deposit via Touch 'n Go eWallet or Boost, a transaction reference is also stored against your account record.

We share data only with payment processors — including those handling GrabPay, DuitNow and FPX transfers — to complete your transactions. We do not sell your information to advertisers or unrelated companies.

Identity and account records are retained while your account is active and for the statutory period required by applicable law after closure. Session logs are pruned regularly once they are no longer needed for security purposes.

Yes. Log in, open Account Settings and navigate to the Privacy section, or send a written request via email quoting your registered account. We will confirm receipt and provide the data within the legally required timeframe.

Submit a deletion request through live chat or our support email. Include your account number and the specific data you want removed. We will complete the request within the period required under applicable law.

Yes, the same policy applies regardless of device. Whether you access the platform on a phone or desktop, data collection, storage and your rights under this policy remain identical. Access is available where local law permits.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.