Reference

How dd12 Handles Your Personal Information

This Privacy Policy sets out exactly what data we collect when you open an account, make a deposit, or contact our support team — and how we keep it secure.

Account Data ProtectedPayment Info Handled SecurelyYour Rights, Clearly StatedLocal Payment Context CoveredContact Path Always Open
dd12 How dd12 Handles Your Personal Information
HOW WE PROTECT YOU

Data Handling, Cookies and Account Security

Security is not a checkbox for us — it is built into how the account and payment flow actually works. Whether you are logging in from Subang Jaya or anywhere else in Malaysia, the same data protections apply. We use SSL encryption across all account pages and payment steps, and we apply session timeouts to reduce exposure on shared devices. Here is how each area of data handling works in practice.

Cookie Use

We use cookies to keep your session active, remember your language setting, and monitor for unusual login patterns. You can manage cookie preferences in your browser settings at any time.

Account Security

Every login requires email and password verification. For sensitive account changes, an OTP is sent to your registered contact. We log device type and IP on each login for your own review.

Data Retention

Active account data is held while your account remains open. If you close your account, we retain only what local legal obligations require, and we delete the rest on a rolling schedule.

Who Can Access Your Data

Only our core account and compliance teams can access your personal data. Third-party payment processors like those behind Touch 'n Go eWallet and GrabPay see only transaction references, not full account profiles.

REACH OUR TEAM

How to Contact Us About Your Privacy

If you want to request a copy of your data, ask us to correct something, or raise a concern about how your information is handled, our support team is the right place to start. You can reach us through live chat on the dd12 site, by email, or through the in-account help form. We aim to respond to all data-related requests within a reasonable timeframe — complex requests may take longer, and we will let you know if that is the case.

Live Chat Start a live chat session directly from the dd12 site. This is the quickest path for account-related privacy questions, including data access or correction requests.
Email Support Send your data request or privacy concern to our support email. Include your registered account email so we can verify your identity before processing the request.
In-Account Help Form Log in to your account, head to the help section, and submit a privacy request form. This routes your query directly to the team handling data and compliance matters.

Your Questions on Privacy, Answered

Below are the questions our account holders ask most often about how their data is managed, what rights they have, and how to act on those rights. If your question is not covered here, live chat or email support can help you directly.

We collect your name, email address, date of birth and contact details at registration. Payment method data — such as a Touch 'n Go eWallet or GrabPay transaction reference — is added when you make your first deposit.

No. We store only the transaction reference and confirmation timestamp provided by the payment rail. Your wallet PIN, full account number and login credentials remain entirely with your wallet provider.

Yes. Submit a data access request through live chat or the in-account help form. Include your registered email so we can verify your identity before preparing the data summary for you.

Contact support via email or live chat with the specific detail you want corrected or removed. We will confirm what we can action under our retention obligations and update your record accordingly.

We share data only with payment processors and identity verification partners required to operate your account. All third parties are bound by confidentiality agreements and cannot use your data for their own marketing.

Once your account is closed, we delete non-essential data on a rolling schedule. Compliance-required records are held only for the period local law mandates, then removed from our active systems.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.