Rujukan Laman

How nuf666 Handles Your Personal Data

At nuf666, we take the handling of your personal data seriously — this page sets out exactly what we collect, why we collect it, and how you can…

Data Collected TransparentlyYour Rights, Clearly StatedSecure Storage PracticesContact Path Always OpenMalaysia-Applicable Terms
nuf666 How nuf666 Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Data

Email Privacy Team Send your data access, correction or deletion request directly to our privacy team by email. We aim to acknowledge all requests within two business days and resolve them within 30 days of receipt.
Live Chat Support Our live chat is available around the clock if you need to raise a privacy concern urgently. The agent will log your request and route it to the correct team so nothing gets lost in transit.
Written Request Form For formal data subject requests — including right-of-access or right-to-erasure submissions — use the written request form linked inside your account settings. Responses come in writing to your registered address.
HOW WE PROTECT DATA

Our Practices Around Data and Account Security

From the moment you open an account to the day you choose to close it, we apply consistent controls to keep your data safe and your rights accessible.

Data Handling at Source

Personal details you submit — including payment identifiers from Touch 'n Go or GrabPay — are encrypted in transit using TLS and stored in access-controlled environments. Only authorised personnel can query identifiable records, and all access is logged.

Cookie and Tracking Policy

We use session cookies to keep you logged in, analytics cookies to understand page performance, and no third-party advertising trackers. You can adjust cookie preferences through your browser settings at any time without affecting core account functions.

Account Security Controls

Your account password is stored as a salted hash — we cannot read it in plain text. We recommend enabling two-step verification inside account settings. Suspicious login attempts trigger an automatic lock and an alert to your registered email address.

Data Retention Schedule

Transaction records are kept for the period required by applicable financial regulations in the jurisdictions where we operate. Profile data you have not used for an extended period is flagged for review before any automated deletion is applied.

Your Rights and How to Use Them

You have the right to access, correct, port or request erasure of your personal data. Submit your request through the form in your account settings or via email. We do not require you to justify an access request before processing it.

Policy Updates and Notification

When this policy changes in a material way, we post a notice on the site and send a summary to your registered email at least 14 days before the new terms take effect. You can always find the current version at nuf666.com/privacy-policy/.

Privacy Policy — Common Questions

The questions below cover the most frequent topics our account holders raise about data privacy. If your question is not here, reach us directly through the contact paths listed above.

We collect your name, email address, contact number, date of birth and the payment identifiers linked to methods like Touch 'n Go, GrabPay, Boost dan FPX. We also log device type and session activity to maintain account security and prevent unauthorised access.

Submit a data access request through the form inside your account settings or email our privacy team directly. We will compile and deliver your data within 30 days. There is no fee for a standard access request made in good faith.

Yes. You can request erasure of your personal data at any time. We will delete what we are not legally required to retain. Certain transaction records must be kept for compliance purposes, and we will explain exactly what is retained and why.

We share data only with payment processors — such as those operating Touch 'n Go, GrabPay, Boost dan FPX rails — to complete your requested transactions. We do not sell personal data or share it for marketing purposes with any outside party.

Transaction and identity records are retained for the period required by applicable financial and regulatory rules in the jurisdictions where we operate. Profile data not subject to those requirements is deleted within 90 days of account closure.

We use cookies for session management and site performance analytics only. You can disable non-essential cookies through your browser settings. Disabling analytics cookies does not affect your ability to log in or use any account feature.

Reach our privacy team by email or live chat at any time. If you are unsatisfied with our response, you have the right to escalate to the relevant data protection authority in your jurisdiction where local law provides for such escalation.