Rujukan Laman

How We Handle Your Personal Data

At pakarcuc, we take seriously how your personal data is collected, stored and used when you hold an account with us.

Encrypted Account DataMalaysia-Region ComplianceTouch 'n Go & GrabPay Transaction PrivacyClear Data Retention ScheduleDirect Contact for Data Requests
pakarcuc How We Handle Your Personal Data
PRIVACY CONTACT CHANNELS

Reach Our Data Privacy Team

You have the right to ask us what data we hold, request a correction, or ask for deletion.

Email Privacy Request Send your data access, correction or deletion request to our dedicated privacy address. Include your registered account email so we can locate your records promptly and respond within five working days.
Live Chat Support Open the live chat window from any page on pakarcuc.com and select the Privacy or Account Data topic. Our agents can log your request directly and escalate it to the privacy team on your behalf.
Help Centre Ticket Submit a formal ticket through the Help Centre with the subject line 'Data Privacy Request'. Attach any relevant account details so we can verify your identity before processing the request securely.
HOW WE PROTECT YOUR DATA

Six Ways We Safeguard Your Account

We apply concrete, layered measures to protect your data from the moment you open an account through to account closure.

Encrypted Data Storage

All personal and financial data stored on our servers is encrypted at rest using AES-256 standards. Your account credentials are hashed and never stored in plain text, making them unreadable even in the unlikely event of a breach.

Cookie Management

We use session cookies for account authentication and analytics cookies to understand how pages are navigated. You can adjust your cookie preferences at any time via the cookie settings link in our site footer — rejecting analytics cookies does not affect your ability to log in.

Transaction Data Handling

Payment data flowing through Touch 'n Go, GrabPay, Boost dan FPX is processed over TLS-encrypted connections. We retain only the transaction reference, amount and timestamp — your full card or wallet credentials are never stored on our systems.

Data Retention Schedule

Account data is kept for as long as your account is active and for a defined period after closure as required by applicable law. When the retention period expires, records are permanently deleted or anonymised and cannot be recovered or linked back to you.

Access Control and Verification

Before we action any data request — whether access, correction or deletion — we verify your identity against your registered account details. This protects you from unauthorised third-party requests being acted upon without your knowledge.

How to Request Changes

To update, export or erase your data, contact us via the channels in the section above. State your request clearly, provide your registered email, and we will confirm receipt within one working day and complete the action within five working days.

Your Privacy Questions Answered

Below are the questions we receive most often about how pakarcuc handles personal data, your rights under our policy, and how to act on those rights quickly and without friction.

We collect your name, email address, contact number, date of birth and the device identifiers used to access your account. Transaction data tied to Touch 'n Go, GrabPay, Boost dan FPX is also recorded for verification and fraud-prevention purposes.

Yes. Submit a data access request through email, live chat or a Help Centre ticket with your registered account email. We will compile and deliver a copy of your personal data within five working days of verifying your identity.

We retain account records for the period required by applicable law in your region following account closure. Once that period passes, your data is permanently deleted or anonymised so it can no longer be linked back to you.

We share data only with payment processors — Touch 'n Go, GrabPay, Boost dan FPX — strictly to complete transactions, and with service providers bound by data processing agreements. We do not sell your data to advertisers or marketing platforms.

Contact our privacy team via email or the Help Centre with the subject 'Data Privacy Request'. Include your registered email and describe the correction or deletion needed. We will verify your identity and act on the request within five working days.

We use session cookies for login authentication and analytics cookies to track page performance. You can accept or reject analytics cookies via the cookie settings panel in the site footer — changing this preference does not affect your account login or payment functions.

Access depends on local law and is available where local law permits. If your eligibility changes due to a change in your region or applicable law, the data we hold will be managed according to the requirements that apply to your situation at that time.