Rujukan Laman

How lotto4 handles your data

This privacy policy explains what lotto4 collects when you open an account, how we use device, contact and payment records linked to Touch 'n Go, GrabPay, Boost and…

Data useCookiesRetentionMalaysia law
lotto4 How lotto4 handles your data
CONTACT PATHS

Talk to lotto4 about privacy

If you want to ask how a record was used, correct a detail, or check whether we still hold something on file, reach us through the channels below.

Email Send the account email, the detail you want changed, and any reference that helps us locate the record. We use this channel for access requests, correction requests and questions about how long we hold a file.
Live chat Use chat for a quick privacy check if you need a short answer first. If the request needs written proof or identity confirmation, we will move it to a written channel before making a change.
Contact form This form suits formal requests for a copy, correction or removal where local law allows it. Add your full name, account email and a clear description so we can route it correctly.
DATA CONTROLS

How we keep records in order

We keep privacy work practical. That means collecting only the data we need, restricting who can see it, and using cookies only for session state, language choice and basic settings.

Data minimisation

We only collect what is needed for account creation, contact, verification and payment records. If a field is optional, we say so before you submit it, and we do not ask for extra details without a reason.

Cookie control

Browser cookies store session state, language choice and basic preferences. You can clear them in your browser settings, but some pages may ask you to sign in again after you remove those files.

Account security

We expect you to keep your login details private. If we spot unusual access, we may pause the session, ask for fresh confirmation, or request an identity check before we change sensitive records.

Retention

We keep records only for the time needed to operate the account, settle payment traces, answer disputes and meet legal duties. After that, we delete or anonymise data where our process allows.

Change requests

If your name, email or phone number changes, send the new details and a short request from the address on file. We compare the request with our records before we update anything.

Contact route

For privacy questions, reach us through email or chat and say whether you want access, correction, removal or a copy of the data we hold. We will reply through the same channel where possible.

Privacy policy questions for your account

The questions below cover the parts most people check first: what we collect, how long we keep it, who can see it and how you can ask for changes. If your situation is unusual, send the details through support and we will point you to the right next step, subject to local law. We will only proceed where the law allows and where the record can be matched to your account.

We keep the details you submit, such as name, contact data, device signals and payment traces linked to Touch 'n Go, GrabPay, Boost and FPX. We use them to run the account, verify changes and answer support requests.

Cookies remember session state, language choice and simple preferences so the page works the way you left it. They do not replace your account details, and you can clear them through your browser at any time.

Yes. Send the updated detail from the contact address on file, add the old and new value, and we will compare both against our records before making the change. Some requests may need extra confirmation.

We keep records only as long as needed for account handling, payment tracing, support, disputes and legal duties. When the retention period ends, we remove or anonymise the data where our process allows.

Only staff and service partners who need it for account operation, support or payment processing can access it. We limit access by role and ask partners to use the data only for the stated purpose.

Send a request through email or chat, say you want a copy of the data we hold, and include the account email. We may ask for verification before we send anything.

Yes. Where local law permits access, the policy applies to your account and the records linked to it. If the law does not allow access, we will not proceed with setup or data handling.