Rujukan Laman

How big321 Protects Your Personal Data

At big321, we take the privacy of every account holder seriously — this page sets out exactly what personal data we collect, why we collect it, and how…

Data collected only as neededSecure encrypted storageYour rights, clearly statedMalaysia local law compliantContact us to request changes
big321 How big321 Protects Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy

If you have a question about how your personal data is handled, want to request a correction, or need to ask us to delete specific records, our privacy support team is available…

Live Chat Start a live chat directly from your big321 account dashboard. Our privacy support agents are available around the clock to handle data queries, correction requests, and account-record questions promptly.
Email Support Send a detailed privacy request to our dedicated email channel. Include your account reference number so we can locate your records immediately and respond within the committed seven-day window.
Help Centre Visit our Help Centre from the big321 menu to find pre-answered questions about data retention periods, cookie settings, and how to withdraw consent for marketing communications at any time.
DATA HANDLING STANDARDS

How We Manage and Safeguard Your Data

Every layer of our data-handling practice is designed to give you clear control and meaningful security.

Encrypted Data Storage

All personal data, including identity documents and payment-method references for Touch 'n Go, GrabPay, Boost dan FPX, is stored using AES-256 encryption at rest. No plain-text records of sensitive fields are retained on our servers at any point.

Cookie Controls

We use functional, analytics, and preference cookies. You can review and adjust your cookie settings at any time through the cookie banner or within your account settings. Declining non-essential cookies will not affect your ability to log in or transact.

Account Security Practices

Two-factor authentication is available on every account. We monitor for unusual login locations and device changes, sending you an alert if something looks unexpected so you can confirm or reject the access attempt immediately.

Data Retention Policy

We hold your account data for as long as your account is active and for the period required by Malaysian financial and anti-fraud regulations thereafter. Once that period expires, records are deleted or anonymised on a scheduled basis.

Your Right to Access

You may request a full copy of the personal data we hold about you at any time. We will provide it in a structured, readable format within seven working days of receiving your verified request via live chat or email.

Third-Party Data Sharing

We share data with payment processors and identity verification partners only to the minimum extent needed to complete your transaction or confirm your identity. We do not sell your data to advertisers or unrelated commercial third parties.

Your Privacy Questions Answered

Below you will find answers to the questions our account holders ask most often about data privacy, consent, and their rights under the big321 privacy policy. If your question is not covered here, reach out through live chat or email and our team will respond within one business day.

We collect your name, email address, phone number, date of birth, and the payment-method references you use — such as those linked to Touch 'n Go, GrabPay, Boost dan FPX. Identity documents may be requested during verification to comply with Malaysian regulations.

We receive only tokenised references from Touch 'n Go, GrabPay, Boost dan FPX — never your full wallet credentials. These tokens are encrypted at rest and can only be used within our system to match a transaction to your account, not to initiate new charges.

Yes. Submit a deletion request via live chat or email with your account reference. We will remove or anonymise data that is no longer required by law. Some records must be retained for the period prescribed by Malaysian financial regulations before deletion.

We share data only with payment processors, identity verification providers, and fraud-prevention services — and only the minimum fields each party needs. We do not sell your personal data to advertisers or any unrelated commercial organisations.

Log in and visit your account profile to update contact details directly. For changes to identity documents or registered payment-method references, contact our support team via live chat so an agent can guide you through the secure verification steps.

After account closure, we retain records for the period required under Malaysian personal data protection and anti-money-laundering regulations. Once that statutory period ends, all identifiable data is deleted or fully anonymised in our scheduled purge cycle.

We use functional cookies to keep you logged in, analytics cookies to understand how pages are used, and preference cookies to remember your settings. You can accept, reject, or customise each category through the cookie settings panel in your account at any time.