Reference

Our Terms, Your Account — Straight Up

Everything that governs your h2m1 account — how we handle your data, what the rules are, and how to reach us if something needs sorting — is set out here.

Malaysia Account TermsData Handling PolicyCookie UseAccount SecurityYour Rights
h2m1 Our Terms, Your Account — Straight Up
HOW WE PROTECT YOU

Data Handling, Cookies, Security and Your Rights

Your account data and payment records are stored with encryption at rest. Session activity — including deposits made via Touch 'n Go eWallet, Boost, or GrabPay — is logged against your account ID, not your full payment credentials. We do not retain your full wallet number after a transaction clears. For account security, we use OTP verification on login from unrecognised devices; if you receive an OTP you did not request, change your password immediately and contact support.

Data Retention

Account records are kept while your account is active and for a defined period after closure, in line with applicable rules. Payment references are retained for transaction reconciliation only and are not used for marketing.

Cookie Policy

We use session cookies for login continuity and first-party analytics cookies to improve the lobby experience. No third-party advertising cookies are placed without your consent. You can clear cookies via your browser settings at any time.

Account Security

OTP verification protects logins from new devices. If suspicious activity appears on your account, lock it via the account settings page or contact live chat immediately — our team can place a temporary hold while the issue is reviewed.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting support. Data deletion requests are processed subject to any retention obligations that apply under local law in your jurisdiction.

REACH OUR TEAM

How to Contact Us About Legal or Policy Matters

If you have a question about these terms, want to request a copy of your account data, or need to flag a concern about how your information is handled, our support team is the right first stop. We cover account queries, policy clarifications, and data requests through the channels below.

Live Chat The fastest path for policy questions. Open the chat widget in the lobby, describe your query, and our team will pull up your account details to respond directly.
Email Support For written requests — data access, account closure, formal policy queries — send to our support address. We aim to acknowledge within one business day and resolve within a reasonable period.
Account Help Centre Our help section covers common questions about terms, cookies, data retention and account access. Check there first for standard policy clarifications before opening a ticket.

Common Questions About Our Legal Terms

These are the questions we see most often about our terms, data practices, and account conditions. If yours is not here, live chat or email support will get you a direct answer.

Your account is subject to applicable law in your jurisdiction. Where any clause in our terms conflicts with local law, local law takes precedence. Access is available only where local law permits.

Contact our support team via live chat or email with your account details and a data access request. We will acknowledge your request and provide the information within a reasonable period.

Yes. Submit a deletion request through support. We will process it subject to any retention obligations required under applicable rules — some transaction records may need to be kept for a defined period.

Payment references are logged for transaction reconciliation only. We do not retain your full wallet credentials after a deposit or withdrawal clears, and payment details are not shared with third parties beyond what processing requires.

We use session cookies to maintain your login, and first-party analytics cookies to understand how the lobby is used. Third-party advertising cookies are not placed without your explicit consent. You can manage cookies in your browser settings.

Do not share the OTP. Change your account password immediately and contact live chat so our team can review account activity and place a temporary hold if needed.
Reference

Legal

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.