Reference

What na77 Does With Your Personal Data

When you open an account with us, we collect only what we need to run your account and process your transactions — whether that goes through Touch 'n Go eWallet, Boost, or GrabPay.

Account data handled securelyLocal e-wallet transactions coveredYour access and correction rightsClear data retention termsContact path always open
na77 What na77 Does With Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

Any question about how we handle your personal data — a correction request, a deletion request, or a question about what we hold — goes to our support team. You can reach us through live chat on the na77 site, by email, or through the in-account message centre. We aim to acknowledge data requests within one business day and resolve them as quickly as the nature of the request allows.

Team online

Live Chat

Open the chat widget on any na77 page and select the data or account privacy topic to reach the right team without waiting on hold.

Email Support

Send your data access or correction request by email. Include your registered account email so we can locate your record and respond directly.

In-Account Messages

Log in, go to account settings, and use the message centre to submit a privacy query. Your request is logged against your account automatically.

HOW WE PROTECT IT

Data Handling, Cookies, Retention and Security

We keep your data only as long as it serves a clear purpose — active account management, financial record obligations, or fraud prevention. When a purpose ends and no legal obligation remains, we delete or anonymise the data. Players in Subang Jaya and across Malaysia access their accounts through an OTP-secured login, and every session is encrypted in transit using SSL. Our approach is to store the minimum, share even less, and keep you informed when anything changes in this policy.

Cookies and Preferences

We use session and preference cookies. You can clear or block them through your browser settings at any time; core account functions still work without non-essential cookies.

Account Security

Every account login requires an OTP sent to your registered number. If you notice a login you do not recognise, report it through live chat immediately so we can lock the session.

Data Retention

Financial transaction data — including Touch 'n Go eWallet and Boost records — is kept for the period required by applicable law. Non-financial preference data is removed when your account closes.

Requesting Changes

You have the right to access, correct or request deletion of the personal data we hold. Submit your request via live chat or email and we will handle it without unnecessary delay.

Common Questions About Your Privacy on na77

These are the questions we hear most often about how na77 handles personal data. If your question is not here, our live chat team can walk you through the specifics tied to your account.

We collect your name, email address, phone number, and the payment details linked to your chosen method — Touch 'n Go eWallet, Boost, or GrabPay. Device and session signals are also recorded for security purposes.

We share data only with payment processors — such as DuitNow or FPX — and only the fields they need to complete your transaction. We do not sell personal data to any outside party.

Financial records, including e-wallet and bank transfer logs, are kept for the period required under applicable law. Once that obligation ends, records are deleted or anonymised.

Yes. Submit a data access request via live chat or the email address on our support page. Include your registered account email so we can locate your record and respond directly.

Log in and use the in-account message centre, or contact us via live chat. Specify whether you want a correction or full deletion, and we will confirm the action taken once complete.

Non-financial preference data is removed when your account closes. Transaction records tied to legal retention requirements stay on file for the statutory period, then are deleted or anonymised.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.