Rujukan Laman

How octopus99 Handles Your Personal Data

At octopus99, we are transparent about every piece of information we collect when you open an account, make a deposit via Touch 'n Go, GrabPay, Boost dan FPX…

Data Collected at Account OpeningCookie & Tracking PolicyYour Rights Over Your DataData Retention ScheduleHow to Contact Us About Privacy
octopus99 How octopus99 Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you need to request a copy of your data, ask for corrections, or raise a concern about how we handle your personal information, our dedicated privacy team is reachable through the…

Privacy Email Send a detailed request to our privacy inbox at octopus99.org. Include your registered email address so we can locate your account record and respond accurately within one business day.
Live Chat Our live-chat team is available around the clock on octopus99.org. Start a chat and type 'Privacy Request' so the agent routes you immediately to the data-handling team rather than general support.
Help Desk Ticket Submit a formal ticket through the Help Desk portal under the 'Account & Privacy' category. Tickets receive a case reference number, and all updates are emailed to your registered address automatically.
HOW WE PROTECT YOU

Data Handling, Cookies, Security and Retention

Every data-protection practice at octopus99 is built around the principle that your information exists to make your account work — not to generate revenue through third-party sharing.

Data Handling in Transit

All data you submit — including payment-method tokens for Touch 'n Go and GrabPay — travels over TLS-encrypted connections. We do not store raw payment credentials; only tokenised references are kept on our servers.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to measure which lobby pages you visit most. You can adjust cookie preferences at any time through the cookie banner on octopus99.org without affecting your account access.

Account Security Measures

Your account is protected by hashed password storage and optional two-factor authentication via SMS. We flag unusual login locations automatically and notify you by email if a new device accesses your account for the first time.

Data Retention Schedule

We retain your account data for as long as your account remains active, plus an additional period required by applicable Malaysian financial and anti-fraud regulations. Once that period passes, personal identifiers are deleted or anonymised.

Third-Party Data Sharing

We share data only with payment processors — including FPX gateway operators and Boost — strictly to complete your transactions. We do not sell, rent, or trade your personal data with advertisers or data brokers under any circumstances.

Your Right to Access and Correct

You may request a full export of the personal data we hold about you at any time. If any detail is inaccurate — your name, contact number, or linked payment reference — we will correct it within three business days of your verified request.

Frequently Asked Questions About Our Privacy Policy

The questions below cover the scenarios our Malaysian account holders ask about most when it comes to personal data, cookies, payment information, and how to exercise their rights under this policy.

We collect your name, email address, phone number, and the payment identifiers linked to Touch 'n Go, GrabPay, Boost or FPX. We also record login timestamps and device identifiers to maintain account security and prevent unauthorised access.

We never store raw payment credentials. Touch 'n Go, GrabPay, Boost and FPX transactions are handled through tokenisation — only a non-reversible reference is retained on our servers, never your actual wallet password or bank PIN.

Yes. Submit a data-access request via live chat or our Help Desk under 'Account & Privacy'. We will compile and email you a full copy of your personal data within seven calendar days of verifying your identity.

We retain records for the period required by applicable Malaysian financial and anti-fraud regulations after account closure. Once that retention window closes, personal identifiers are permanently deleted or rendered anonymous in our systems.

Only with the payment processors needed to complete your transactions — FPX gateway operators, Boost, GrabPay and Touch 'n Go networks. We do not sell or share your data with advertisers, data brokers, or any unrelated third party.

Open the cookie-preference panel from the banner on any page of octopus99.org and switch off analytics cookies. Your choice is saved immediately and does not affect your ability to log in or use any feature in the lobby.

Reach our privacy team directly via the privacy email address or live chat on octopus99.org. We acknowledge every privacy concern within one business day and aim to resolve or escalate the matter within seven calendar days of receiving your request.