What Personal Data We Collect and Why
We collect your name, email address, mobile number, and payment identifiers — such as your registered Touch 'n Go eWallet account reference or the Boost wallet ID linked at checkout — when you register and transact on br888. We also log device type, session timestamps and
-
1
browser activity to detect unusual access patterns and protect your account. For withdrawals processed via DuitNow or FPX, we retain your bank reference number for the period required to resolve disputes. We do not collect more than is operationally necessary, and we do not sell your
-
2
data to marketing networks. If you use GrabPay, only the transaction reference is stored on our side — your GrabPay credentials stay entirely within GrabPay's own system. Access to your account from Alor Setar or anywhere else in Malaysia is subject to local law. Our data
-
3
handling practices align with what local law requires for operators serving the Malaysian market, and your eligibility to use the platform depends on whether access is permitted under local law where you are.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.