Rujukan Laman

Explore Your Rights on ero18

Our legal framework covers how your account data is collected, stored and handled — including how transactions via Touch 'n Go, GrabPay, Boost dan FPX are recorded and…

Terma PerkhidmatanDasar PrivasiPerlindungan Data AkaunHak Pengguna MalaysiaPengurusan Kuki
ero18 Explore Your Rights on ero18
LEGAL CONTACT PATHS

Reach Us on Policy and Legal Questions

If you have a question about your rights, a data request, or a clause in our terms, there are three direct ways to reach the right team at ero18.

E-mel Undang-Undang Send your data access requests, account deletion queries or terms clarifications to our dedicated legal inbox. We log every request and confirm receipt within 24 hours for accounts in Malaysia.
Sembang Langsung Our live chat team can escalate policy questions directly to the legal department during business hours. Use this path if you need a fast answer on specific clauses or account-access concerns.
Borang Privasi Dalam Talian Submit a structured privacy or data request through the in-account form. This path is the fastest route for formal requests because it pre-populates your account details and routes the ticket correctly.
ACCOUNT SECURITY DETAIL

See How We Handle Your Data at ero18

From the moment your account is created to the point any withdrawal clears, your personal and financial data moves through a defined set of controls.

Enkripsi Data

All account data — including transaction logs for Touch 'n Go, GrabPay, Boost dan FPX — is encrypted in transit and at rest using current cipher standards. Your credentials are hashed and never stored in plain text.

Pengurusan Kuki

We use session cookies for account authentication and analytics cookies to understand how the lobby performs. You can adjust cookie preferences from the settings panel in your account at any time without affecting login access.

Pengekalan Rekod

Transaction and identity records are retained for the period required under Malaysian financial regulations. Once the retention window closes, records are deleted from live databases on a scheduled purge cycle.

Kawalan Akses Dalaman

Access to personal account data is restricted to staff with an operational need. Logs of every internal access event are reviewed periodically, and access rights are revoked immediately when a team member's role changes.

Permintaan Data Anda

You can request a copy of the personal data we hold on your account at any time. Submit via the privacy form or live chat and we will compile and deliver the report to your registered email within seven days.

Pemadaman Akaun

To request full account closure and data removal, contact our legal team directly. We will confirm the deletion scope, process the request within the statutory window, and send written confirmation to your registered address.

Common Questions About Our Legal Terms

These are the questions we hear most often from Malaysian account holders regarding their legal rights, data handling and how our policies apply to them. If your question is not covered here, reach us directly through any of the contact paths above.

Our privacy practices align with the Personal Data Protection Act (PDPA) applicable in Malaysia. This means we are bound by rules on how your data is collected, used, stored and disclosed, and you hold specific rights of access and correction under that framework.

Yes. Submit a data-access request through the privacy form in your account settings or via live chat. We compile the data held on your account and deliver the report to your registered email address within seven calendar days of receiving the request.

Every deposit and withdrawal processed via Touch 'n Go, GrabPay, Boost dan FPX is logged against your account record with a timestamp, amount and reference ID. These records are encrypted and retained for the period required under Malaysian financial regulations.

We share account data only where required by law, for payment processing with authorised partners, or with fraud-prevention services. We do not sell personal data. Any third-party partner is contractually bound to handle your data under the same protection standards we apply internally.

On account closure, we process a data-deletion request within the timeframe set by Malaysian regulation. Certain records — such as transaction logs — must be retained for a statutory minimum period before they can be purged from our systems entirely.

Contact our legal team via the dedicated email or live chat and state which data you believe is incorrect. We will review the record, make any warranted correction, and confirm the change to your registered email within five business days of receiving the request.

When terms are updated, we notify you via your registered email and display a notice on the platform at login. Continued use of the account after the effective date of any update constitutes acceptance, so we recommend you review the updated terms before proceeding.