Rujukan Laman

How We Handle Your Personal Data

At online456, we take the privacy of every account holder seriously — your personal data is collected only for specific, defined purposes and stored with security measures that…

Data Collected With PurposeRetention Periods DefinedYour Rights, Clearly StatedMalaysia-Applicable LawContact Path Always Open
online456 How We Handle Your Personal Data
REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

If you have a question about how we process your personal data, want to correct something on your account, or wish to submit a formal data request, our privacy support team is reachable through multiple channels. We aim to acknowledge every data-related enquiry within one business day and resolve it within seven. Reach us through any of the paths below — our team handles privacy matters separately from general account support so your request receives focused attention.

Team online

Live Chat

Start a live-chat session directly from any page on online456.org. Our privacy support staff are available seven days a week and can verify your identity securely before discussing account data.

Email

Send your data request or privacy question to our dedicated email address listed in the Contact section of online456.org. Include your registered email so we can locate your account record quickly.

Help Centre Form

Submit a structured data-request form through our Help Centre. This path is useful for formal requests — account deletion, data export or objection to processing — as it creates a tracked reference number.

HOW WE PROTECT YOU

Data Handling, Cookies and Account Security

We apply a layered approach to data protection — from how we store payment tokens to how long we keep session logs.

Encryption at Rest and in Transit

All personal data stored on our servers is encrypted using AES-256. Data moving between your device and online456.org travels over TLS 1.2 or higher, so your account details and payment tokens are never exposed in plain text.

Cookie Controls You Own

We use functional cookies to keep your session active and analytics cookies to understand how the platform is used. You can adjust cookie preferences from the settings panel at any time — opting out of analytics cookies does not affect your account access.

Payment Data Handling

We store only the reference tokens issued by Touch 'n Go, GrabPay, Boost and FPX — not your full card or wallet credentials. Full payment credentials are processed by the respective payment provider and never pass through our servers.

Data Retention Schedule

Account data is retained for as long as your account remains active plus any mandatory period required by applicable law. When an account is closed, non-mandatory data is deleted within 30 days and a confirmation is sent to your registered email.

Access and Correction Rights

You have the right to request a copy of every data point we hold about you, correct inaccurate records, or ask us to restrict how we process your data. Submit the request through live chat, email or the Help Centre form and we will respond within seven business days.

Third-Party Data Sharing

We share data only with service providers who are contractually bound to process it solely on our behalf — for example, payment processors and fraud-detection tools. We do not share your personal data with advertisers or unrelated third parties.

Frequently Asked Questions on Privacy

Below are the questions we receive most often about how online456 manages personal data. If your question is not covered here, reach us through live chat or email and our privacy team will respond within one business day.

We collect your name, email address, phone number, date of birth for eligibility verification, and payment-method references such as your Touch 'n Go or FPX transaction tokens. Device and session data is also collected automatically to keep the platform secure.

We share data only with contracted service providers — such as payment processors handling GrabPay and Boost transactions — who are bound to use it solely for the service they provide. We do not sell your data or share it with advertisers.

We retain your account data for as long as your account is active, plus any additional period required by applicable law. Once you close your account, non-mandatory personal data is deleted within 30 days and you receive a confirmation email.

Submit a data-access request via live chat, email or the Help Centre form on online456.org. Include your registered email address so we can verify your identity. We will send a full export of your data within seven business days of verification.

Yes. You can request deletion through the Help Centre form. We will remove non-mandatory data within 30 days. Some records may be retained where required by law — we will explain which ones and why in our response to your request.

We use functional cookies to maintain your login session and analytics cookies to monitor page performance. You can turn off analytics cookies in the cookie settings panel without affecting your ability to log in or make transactions via Touch 'n Go or Boost.

Contact our privacy team directly via the email address listed in the Contact section of online456.org. If you are not satisfied with our response, you may escalate the matter to the relevant data protection authority under applicable Malaysian law.