Rujukan Laman

How bc8 Handles Your Personal Data

Your privacy matters to us, and this policy explains exactly what personal data bc8 collects, how we use it, and the choices you have over your own information.

Data You ControlMalaysia-Focused PolicyEncrypted Account StorageClear Retention PeriodsDirect Contact Channel
bc8 How bc8 Handles Your Personal Data
PRIVACY CONTACT

Reach Us About Your Privacy

Email Our Data Team Send your data access, correction, or deletion request to our dedicated privacy address and we aim to acknowledge it within two business days and resolve it within 14 days.
Live Chat Support Our live chat team is available around the clock. For privacy questions that need a quick clarification, start a chat session and we will route you to the right person without delay.
Written Request If you prefer a formal written channel, submit your request through the in-account support form. Include your registered contact detail so we can verify your identity before acting on the request.
HOW WE PROTECT YOU

Our Approach to Data Security and Retention

bc8 applies industry-standard controls across every layer of your account — from the moment you enter your credentials to the point your withdrawal is confirmed.

Account Data Encryption

All account credentials and personal identifiers are stored using AES-256 encryption at rest. Data in transit between your device and our servers is protected by TLS 1.3, meaning your session details are not readable in transit.

Cookie Usage

We use session cookies to keep you logged in and performance cookies to understand which pages load slowly. You can adjust cookie preferences in your browser at any time; functional cookies required for account access cannot be disabled.

Retention Schedule

Account data is kept for as long as your account is active and for a period after closure as required by applicable financial regulations. Once that period ends, data is permanently deleted from our primary and backup systems.

Withdrawal Verification

When you withdraw to GrabPay or FPX, we verify the destination against the payment method registered on your account. This verification uses your stored data only for that matching step and is not shared beyond our payment processor.

Access Request Process

You can request a copy of the personal data we hold about you at any time. We will verify your identity first, then deliver your data export within 14 days. You may also ask us to correct any inaccurate detail on record.

Policy Change Notification

When we update this privacy policy in a way that affects your rights, we will notify you by email to your registered address before the change takes effect. Continuing to use the account after the effective date constitutes acceptance.

Your Privacy Questions Answered

These are the questions our account holders ask most often about how their personal data is handled. If yours is not here, reach us directly through the contact paths above.

We collect your name, email address, contact number, and the payment method references you use — such as your Touch 'n Go wallet or FPX bank. We also collect technical session data automatically to protect your account.

Only with payment processors like those handling your GrabPay or Boost transactions, and with fraud-prevention partners. All third parties are bound by contracts that limit use of your data to the specific service they provide.

Your data is retained for the period required under applicable financial and regulatory obligations after account closure. Once that window passes, it is permanently removed from both live systems and our backup archives.

Email our data team or submit a request via the in-account support form. After we verify your identity, we will send you a structured data export within 14 days at no charge.

Yes. Submit a deletion request through our support channels. We will erase your data except where retention is required by law or active regulatory obligation. We will confirm the deletion in writing once complete.

We use session cookies for login continuity and performance cookies to improve page speed. You can disable non-essential cookies in your browser settings. Core session cookies needed for account access will remain active.

Contact us immediately via live chat or email. We will lock the account, investigate, and notify you of our findings within 72 hours. Change your password and review your linked payment methods in the meantime.