Reference

How h2m1 Handles Your Personal Information

When you open an account with us, deposit via Touch 'n Go eWallet, Boost, or GrabPay, or contact our support team, certain information passes through our systems.

Account data protectionWallet transaction privacyYour right to access and correct dataClear data retention practiceContact path for privacy requests
h2m1 How h2m1 Handles Your Personal Information
DATA HANDLING DETAIL

How We Protect and Manage Your Data

Our data practices cover four areas that matter most to account holders: how we secure what you share, how cookies work on our platform, how long we keep records, and how you request changes. Each area is handled with a specific internal process, not a one-size statement.

Account Security

Login sessions are protected with OTP verification. Unusual access patterns — new device, unfamiliar location — trigger a re-verification step before the lobby loads, keeping your wallet activity private.

Cookies and Session Data

We use session cookies to keep you logged in and preference cookies to remember your lobby settings. No third-party advertising cookies are placed without your consent via the cookie banner.

Data Retention

Account records, including payment history from Touch 'n Go eWallet, Boost, and GrabPay transactions, are kept for as long as your account is active plus the period required by applicable law. Closed account data is purged on schedule.

Requesting Changes

You can ask us to correct inaccurate data or delete data we no longer need to hold. We verify your identity first, then act on the request within the timeframe local law sets.

PRIVACY CONTACT PATHS

How to Reach Us About Your Privacy

If you want to access, correct, or request deletion of data tied to your account, use any of the channels below. Privacy requests are handled separately from general account support — include your registered email address so we can verify your identity before acting on the request. Players in Petaling Jaya or anywhere in Malaysia can submit requests through the same channels.

Live Chat Start a chat session from the lobby footer. Identify your request as a privacy matter so the team routes it to the right person without delay.
Email Support Send your request to our support address with your registered account email in the subject line. We aim to acknowledge within one business day.
Account Settings Some data corrections — display name, contact number, linked wallet — can be updated directly inside your account settings without contacting support.

Privacy Policy — Questions We Get Asked

These are the questions account holders raise most often about how their data is handled. If your question is not covered here, reach out via live chat and ask specifically about privacy — the team will route it correctly.

We store your registration details, payment transaction references from Touch 'n Go eWallet, Boost, or GrabPay, device session logs, and any support conversations tied to your account.

Yes. Submit a data access request through live chat or email with your registered account address. We verify your identity first, then provide a summary of what we hold.

We do not sell your data. We share it only with payment processors needed to clear your Touch 'n Go eWallet, Boost, or GrabPay transactions, and with service providers under strict data agreements.

Minor corrections like your contact number can be done inside account settings. For name or identity document corrections, contact support with the correct details and we will update the record.

We retain closed account records for the period required by applicable law in Malaysia. Once that period ends, the data is deleted on our scheduled purge cycle.

Transaction records from Boost, GrabPay, or Touch 'n Go eWallet may need to be kept for a legally required period even after other account data is deleted. We will tell you what can and cannot be removed when you submit a request.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.