Rujukan Laman

Your Data, Handled With Care

At 1angpao, we take how we collect and use your personal data seriously — this page explains exactly what we gather, why we need it, and how we…

Data Encrypted at RestNo Third-Party Sale of Your DataTouch 'n Go & GrabPay Transaction PrivacyAccount Access ControlsRight to Request Deletion
1angpao Your Data, Handled With Care
PRIVACY CONTACT PATHS

How to Reach Our Privacy Team

If you have a question about how your data is handled, want to correct inaccurate information, or wish to submit a formal data request, our privacy team is reachable through three channels. We aim to acknowledge all privacy-related messages within one business day and resolve them within seven, in line with reasonable data-handling practice for Malaysian account holders — including those in Johor Bahru and across the country.

Team online

Email Privacy Request

Send a detailed request to our dedicated privacy address at 1angpao.app. Include your registered email and the specific data action you are requesting — correction, access, or deletion.

Live Chat — Privacy Queries

Open the live chat widget on 1angpao.app and select the Privacy & Data topic. Our agents can escalate your query to the privacy team directly during operating hours.

In-Account Support Ticket

Log in, navigate to Account Settings, and raise a support ticket tagged 'Data Privacy'. This creates a tracked case number so you can follow the status of your request in real time.

DATA HANDLING STANDARDS

Six Ways We Protect Your Privacy

From the moment you deposit via Boost or FPX to the point your withdrawal clears, we apply layered controls to keep your data safe and your account private.

End-to-End Encryption

All data transmitted between your device and our servers — including Touch 'n Go and GrabPay payment tokens — is encrypted using TLS 1.3, so your session details are never exposed in transit.

Cookie Policy Transparency

We use session cookies to keep you logged in and analytics cookies to understand how the account dashboard is used. You can adjust cookie preferences at any time from your browser or our cookie settings panel.

Account Security Controls

Two-factor authentication is available on every 1angpao account. We recommend enabling it so that even if your password is compromised, no one else can access your wallet or transaction history.

Data Retention Schedule

We keep transactional records for the period required under applicable Malaysian financial regulations. Once that period lapses and your account is closed, non-mandatory data is purged from active systems on a rolling schedule.

Third-Party Processor Limits

Payment processors such as Touch 'n Go and FPX receive only the minimum data needed to clear a transaction. We contractually prohibit them from using your data for any purpose beyond processing that specific payment.

Your Right to Access and Correct

You can request a copy of all personal data we hold about you, or ask us to correct inaccurate records. Submit the request through any of the three contact paths above and we will respond within seven business days.

Common Questions About Your Data Rights

We know privacy policies can raise more questions than they answer. The section below addresses the queries our account holders most often raise about data collection, storage, access rights, and what happens when they interact with payment methods like GrabPay or Boost.

We collect your name, email address, phone number, and a government-issued ID reference for verification. Once you make a deposit, the payment token from Touch 'n Go, GrabPay, Boost, or FPX is also stored to reconcile transactions.

We share data only with payment processors needed to clear your transactions and with identity-verification services where required by local law. We do not sell, rent, or trade your personal data for advertising purposes under any circumstances.

Financial transaction records are retained for the period required under Malaysian law. Once that obligation is met, non-mandatory personal data is deleted from our active databases. You can request confirmation once deletion is complete.

Yes. Raise a data-access request via email, live chat, or an in-account support ticket. We will compile and send your data summary within seven business days of verifying your identity as the account holder.

Session cookies keep your login active; analytics cookies help us improve the account dashboard. No cookies are used to build profiles for sale to advertisers. You can opt out of non-essential cookies through your browser settings at any time.

Your payment token is passed to the relevant processor — Touch 'n Go or FPX — using encrypted channels. We store only a reference ID for reconciliation; full card or wallet credentials are never retained on our servers.

Contact our privacy team through any of the three channels on this page. State the inaccuracy clearly or specify what you want deleted. We will confirm receipt within one business day and complete the action within seven business days.