Rujukan Laman

How ddbocai Handles Your Personal Data

This Privacy Policy explains exactly what personal data we collect when you open an account on ddbocai.net, how we use it, and the rights you hold over it.

Data You ControlSecure Account StorageMalaysia-Applicable LawYour Access RightsDirect Contact Path
ddbocai How ddbocai Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Our Privacy Team Directly

If you have questions about how your data is handled, want to request a copy of your records, or need to update details on your account, our privacy support team is available…

Email Privacy Request Send your data access, correction or deletion request to our dedicated privacy address. Include your registered account email so we can verify your identity and process your request without delay.
Live Chat Support Start a live chat on ddbocai.net and select the privacy or account query option. Our support agents can log your request and escalate it to the privacy team if further review is needed.
Account Settings Panel Some data changes — like updating your contact number or payment details linked to GrabPay or Touch 'n Go — can be made directly inside the account settings panel without contacting support.
HOW WE PROTECT YOU

Data Handling, Cookies and Account Security

We have built our data practices around transparency and your right to control what you share.

Data We Collect

We collect registration details, login activity, device type, and transaction records from payment rails including Touch 'n Go, GrabPay, Boost dan FPX. Only data necessary to run your account and meet local legal obligations is retained.

Cookie Usage

Cookies on ddbocai.net track session state, remember your language preference and help us understand which sections of the lobby you visit. You can manage cookie preferences through your browser settings at any time without losing your account access.

Account Security Practices

Account credentials are stored using industry-standard hashing. We enforce session timeouts after periods of inactivity and flag logins from unrecognised devices, sending a verification prompt to your registered contact before access is granted.

Data Retention Periods

We retain your account data for as long as your account remains active or as required by applicable law in Malaysia. When an account is closed, personal data is anonymised or deleted within the timeframe mandated by local regulations.

Who Can Access Your Data

Internal access to your data is restricted to staff whose role requires it — account verification, fraud review and payment processing teams. External access is limited to regulated payment processors and is governed by data-sharing agreements aligned with local law.

Requesting Changes or Deletion

You hold the right to access, correct or request deletion of your personal data. Submit your request through live chat or our privacy email channel. We will confirm receipt within 48 hours and complete the request in line with our legal obligations.

What You Asked About Our Privacy Policy

These questions cover the data rights and privacy practices that come up most often among account holders in Malaysia. If your question is not here, reach out through the contact paths listed above.

We collect your name, email address, contact number, device identifiers and transaction data linked to payment methods like Touch 'n Go or GrabPay. This is used solely to operate your account and meet obligations under applicable local law.

We share data only with payment processors — such as those handling GrabPay, Boost dan FPX transactions — and only to the extent needed to complete your request. We do not sell personal data to advertisers or data brokers.

Retention follows applicable Malaysian law. Once your account is closed, data is anonymised or deleted within the legally required window. You can request confirmation of the exact timeline by contacting our privacy team directly.

Yes. Submit a data access request via live chat or our privacy email. Include your registered account email for identity verification. We aim to fulfil access requests within five business days of confirming your identity.

Cookies track your session, language settings and browsing patterns within the lobby. They do not capture payment credentials. You can adjust or block cookies in your browser settings; this will not prevent you from logging into your account.

Send a deletion request through live chat or email with your account details. We will verify your identity and process the deletion within the period required by local law, notifying you once the process is complete.

Contact our privacy team directly through the email or live chat channels on ddbocai.net. We take every complaint seriously and will respond within 48 hours with the steps we are taking to investigate and resolve your concern.