Rujukan Laman

How kami33 Handles Your Personal Data

At kami33, your personal data is handled with care and transparency — we collect only what is necessary to run your account, process transactions, and keep your experience…

Data collected only as neededYour rights are clear and enforceableTouch 'n Go, GrabPay, Boost dan FPX data protectedContact us to request changesApplies where local law permits
kami33 How kami33 Handles Your Personal Data
HUBUNGI PASUKAN KAMI

Reach Us About Your Privacy Rights

If you want to access, correct, or delete your personal data, our privacy team is reachable through three direct channels.

Live Chat Start a chat session from any page on kami33.pro and select 'Privacy Request' from the topic menu. Our team is available daily and can verify your identity in real time before making any change to your account data.
Email Write to our dedicated privacy address at [email protected] with your registered account name and the specific data request. We log every email and confirm receipt within one business day so nothing falls through the gaps.
Support Ticket Log in to your kami33 account, open the Help Centre and raise a 'Data & Privacy' ticket. This channel creates an auditable record of your request and lets you track its status until it is fully resolved.
KESELAMATAN DAN KAWALAN DATA

How We Protect and Manage Your Data

We apply multiple layers of technical and organisational controls to keep your data safe at every stage — from the moment you open an account to the day you request deletion.

Data Minimisation

We collect only the data fields that are strictly necessary for account creation, identity verification, and payment processing via Touch 'n Go, GrabPay, Boost dan FPX. Fields we do not need are never requested in the first place, reducing your exposure.

Cookie Controls

Our cookie banner lets you accept, reject, or customise non-essential cookies before any tracking scripts run. Essential cookies that keep your session alive and your cart secure cannot be switched off, but every other category is optional and explained clearly.

Account Security Measures

Passwords are hashed using industry-standard algorithms and never stored in plain text. You can enable two-factor authentication from your account security settings, and we will alert you by email any time a new device logs into your account.

Retention Periods

Active account data is kept for as long as your account remains open. If you close your account, we retain the minimum records required by applicable Malaysian law — typically transaction logs for up to seven years — and delete everything else within 90 days.

Who Can Access Your Data

Access to personal data within our organisation is restricted to staff whose role requires it — account management, compliance, and payment reconciliation teams. Every staff member with data access completes a formal data-handling agreement before they are granted any access rights.

Requesting Changes or Deletion

You have the right to access a copy of your data, correct inaccuracies, or ask us to delete it where no legal retention obligation applies. Submit your request through Live Chat, email, or a support ticket and we will confirm the outcome in writing.

Your Privacy Questions, Answered

Below are the questions we receive most often about how kami33 collects, uses, and protects personal data. If your question is not covered here, reach out through any of the contact paths listed in the section above and we will respond directly.

We collect your full name, email address, phone number, date of birth, and the payment method identifiers associated with Touch 'n Go, GrabPay, Boost dan FPX or FPX transfers. We also log device type and session timestamps for security purposes.

We share data only with service providers who help us operate the platform — payment processors, identity-verification partners, and fraud-detection services. We do not sell your data or pass it to third parties for their own marketing, and every partner is bound by a data-processing agreement.

Send a data-access request to [email protected] or raise a 'Data & Privacy' ticket from your account. We will verify your identity first, then deliver a structured copy of your data within 14 calendar days of confirming the request.

Yes. Submit a deletion request through any of our support channels. We will remove all data that is not subject to a legal retention obligation — for example, transaction records we are required to keep under Malaysian law — and confirm in writing when deletion is complete.

After account closure, we delete non-essential data within 90 days. Transaction logs and identity-verification records are retained for the period required by applicable Malaysian regulation — typically up to seven years — after which they are securely destroyed.

We use essential cookies to keep your session secure and functional, and optional analytics and preference cookies that you control via the cookie banner. You can reject or withdraw consent for non-essential cookies at any time without affecting your ability to use the platform.

Contact our privacy team at [email protected] in the first instance. If you feel your concern has not been addressed adequately, you also have the right to escalate to the relevant Malaysian data protection authority in accordance with local law.