Rujukan Laman

How We Handle Your Personal Data

At secret21ofx, your personal data belongs to you — we collect only what is necessary to run your account and keep transactions secure.

Data collected only as neededYour rights, clearly statedContact us to request changesMalaysia-applicable protectionsCookies explained plainly
secret21ofx How We Handle Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy

Email Privacy Team Send a written request to our dedicated privacy address and we will respond within five business days confirming what data we hold and what actions we can take on your behalf.
Live Chat Support Our live chat is available around the clock. Start a session, tell the agent you have a privacy or data query, and they will escalate it to the right team without delay.
Account Settings Portal Log in and head to your account settings page to manage cookie preferences, update your contact details, or submit a data-deletion request directly without needing to contact support.
HOW WE PROTECT YOU

Our Approach to Data and Account Security

We apply consistent technical and procedural controls to keep your information secure from the moment you open your account. Here is a plain-language breakdown of the six areas that matter most.

Data Handling Standards

Personal data is stored on encrypted servers. Access inside our organisation is restricted to staff whose role requires it, and all access is logged and audited on a regular schedule to catch anything unusual.

Cookie Policy

We use session cookies to keep you logged in, analytics cookies to understand how pages are used, and preference cookies to remember your settings. You can adjust or withdraw cookie consent from the account settings page at any time.

Account Security Measures

Every account login is checked against device fingerprint and IP history. Unusual access triggers an email alert to you immediately. We recommend enabling two-factor authentication from your security settings for an additional layer of protection.

Data Retention Period

We keep your account data for as long as your account is active. After a confirmed account closure, records are retained for the minimum period required by applicable financial and identity-verification regulations, then securely deleted.

Who to Contact for Data Requests

For access requests, correction requests or deletion requests, email our privacy team directly with your account username and the specific action you need. We aim to acknowledge every request within two business days.

Requesting Changes to Your Data

You have the right to correct inaccurate data or ask us to stop processing your data for marketing purposes. Submit the request through live chat or email and our team will confirm the outcome in writing once the change is applied.

Common Questions About Your Privacy at secret21ofx

These are the questions we hear most often about how your personal data is managed. If your question is not listed here, our support team is available via live chat at any time.

We collect your full name, email, contact number, and payment account details. We also capture device and session data to verify identity and prevent unauthorised access to your account. Nothing beyond what account operation requires.

Your data is shared only with payment processors such as Touch 'n Go, GrabPay, Boost dan FPX and identity verification partners needed to complete your transactions. We do not sell your data to advertisers or unrelated third parties under any circumstances.

Email our privacy team with your account username and a subject line stating 'Data Access Request'. We will confirm receipt within two business days and send you a full summary of the personal data we hold against your account.

Yes. Submit a deletion request through live chat or email. We will remove your data after the mandatory retention period required by financial regulations has passed, and confirm completion to you in writing once done.

We use three types of cookies: session cookies for login continuity, analytics cookies to see how pages perform, and preference cookies for your settings. You can manage or withdraw consent for each category from the account settings page.

After account closure, we retain records for the minimum period required by applicable financial and identity-verification regulations. Once that period ends, all personal data linked to the closed account is permanently and securely deleted.

Contact our privacy team directly by email or live chat. State the specific concern and your account details. We will investigate and respond in writing within five business days with a clear outcome and any corrective steps taken.