Rujukan Laman

How dragon fishing Protects Your Personal Data

At dragon fishing, we handle your personal data with care — collecting only what we need to operate your account, process deposits via Touch 'n Go, GrabPay, Boost…

Data collected only for account purposesTouch 'n Go, GrabPay, Boost dan FPX payment data handled securelyYour rights are clear and actionableMalaysian jurisdiction framingDirect contact path for data requests
dragon fishing How dragon fishing Protects Your Personal Data
REACH OUR PRIVACY TEAM

Contact Us About Your Data

If you have a question about how we process your personal data, want to request a copy of what we hold, or need to correct an inaccuracy, our privacy support channels are…

Email Privacy Request Send your data access, correction or deletion request to our dedicated privacy inbox. Include your registered email address and account number so we can locate your record and action your request without delay.
Live Chat Support Open the live chat widget in your account dashboard and select the Privacy or Data topic. Our support team can escalate your query to the privacy officer directly from the chat thread, keeping a record for you.
In-Account Help Centre The Help Centre inside your account lists every data request form — access, correction, objection and portability. Complete the relevant form and we will confirm receipt within one business day and resolve it within three.
HOW WE HANDLE YOUR DATA

Six Ways We Keep Your Account Data Safe

Every measure listed here is active on your account from the moment you complete registration.

Encrypted Data Storage

All personal data, including payment identifiers from Touch 'n Go and GrabPay sessions, is stored using AES-256 encryption at rest. Backups are encrypted under the same standard and access is restricted to authorised personnel only.

Cookie Management

We use session cookies to keep you logged in and analytics cookies to understand how you move through the lobby. You can adjust cookie preferences at any time from the settings panel in your account without affecting core functionality.

Withdrawal Verification

Before any withdrawal is processed — whether to a Boost wallet or via FPX — our system verifies that the destination account matches the name on your registered profile. This step protects you from unauthorised fund movements.

Data Retention Schedule

We retain account data for as long as your account is active and for the period required under Malaysian financial regulations after closure. Once that period lapses, personal identifiers are deleted from live systems and anonymised in archives.

Third-Party Data Sharing

We share your data only with payment processors, identity verification services, and fraud-detection partners. Each partner signs a data-processing agreement obligating them to handle your information under terms no less strict than our own policy.

Your Right to Request Changes

You may request access to, correction of, or deletion of your personal data at any time. Submit a request through the Help Centre or our privacy email and we will confirm the action taken in writing within three business days.

Your Privacy Policy Questions, Addressed

The questions below cover the data rights and policy points we hear about most from account holders in Malaysia. If your specific situation is not covered here, the support channels in the section above will connect you with someone who can help directly.

We collect your name, email address, phone number, and the payment identifiers associated with Touch 'n Go, GrabPay, Boost dan FPX, or FPX when you transact. We also log device and session data to protect your account from unauthorised access.

Submit a data access request through the Help Centre form or our privacy email. Include your registered email and account number. We will confirm receipt within one business day and deliver your data summary within three business days.

Yes. You may request deletion at any time. We will remove your personal identifiers from live systems once any mandatory retention period under Malaysian financial regulations has been satisfied. We will confirm the deletion in writing.

Only with payment processors, identity verification services, and fraud-prevention partners who are contractually bound to our data standards. We do not sell your data or share it for marketing purposes with any external party.

We keep transactional and identity records for the period required by applicable Malaysian financial and regulatory obligations after account closure. Once that period ends, personal identifiers are deleted from live systems and anonymised in archives.

Session cookies keep your login active; analytics cookies help us understand lobby navigation patterns without identifying you personally. You can manage both types from your account settings at any time, and adjusting them will not block access to core features.

Reach our privacy team via the dedicated privacy email or the live chat Data topic in your account dashboard. We aim to respond within three business days and will confirm in writing what steps we have taken to address your concern.