Rujukan Laman

How mykaya Handles Your Personal Data

At mykaya, we collect only what we need to run your account, process deposits via Touch 'n Go, GrabPay, Boost dan FPX, and keep your session secure.

Data collected only as neededTouch 'n Go & GrabPay securedYour rights, clearly statedMalaysian law appliesContact us anytime
mykaya How mykaya Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Our Data Protection Team

If you have questions about how your data is stored, want to request a copy of what we hold, or need to raise a privacy concern, our dedicated team is reachable through…

Email Request Send your data access or deletion request to our privacy inbox. We log every submission with a reference number and respond within one business day for Malaysian accounts.
Live Chat Open the live chat widget in your account dashboard to speak with our support team directly about any privacy question, data correction or account-data query in real time.
Help Centre Our help centre hosts step-by-step instructions for submitting a data request, updating personal details or withdrawing your consent for non-essential data processing on mykaya.
DATA HANDLING PRACTICES

Six Ways We Protect Your Account Data

From the moment you submit your details to the moment you close your account, we apply layered controls to keep your personal data secure.

Encrypted Storage

All personal data fields — name, contact number, payment tokens for Touch 'n Go and GrabPay — are stored with AES-256 encryption at rest. Only authorised systems and personnel can decrypt and read them.

Cookie Controls

We use session cookies for login continuity and analytics cookies to measure page performance. You can adjust non-essential cookie preferences at any time through the cookie settings panel in your account.

Retention Schedule

Account data is retained for as long as your account remains active and for a defined period after closure, as required by Malaysian financial regulations. After that window, personal records are securely deleted.

Access Requests

You may request a full export of your personal data at any time. We prepare and deliver the export file within five working days via a secure download link sent to your registered email address.

Correction & Deletion

If any detail in your account profile is incorrect, contact us and we will update it promptly. Requests to delete your account data are reviewed against legal retention obligations before processing.

Third-Party Limits

We share data with Boost, FPX and other payment processors only to the minimum extent needed to complete a transaction. No marketing third parties receive your personal data without your explicit consent.

Your Privacy Questions, Answered

The questions below cover the situations we hear about most often — from data access rights to how payment details are stored. If your question is not listed here, reach out through the live chat or email channel and our team will respond with a specific answer for your account.

We collect your full name, email address, phone number and payment identifiers linked to Touch 'n Go, GrabPay, Boost dan FPX. We also log your IP address and device type to protect your account from unauthorised access.

We retain your data for the period required under Malaysian personal data protection and financial regulations after account closure. Once that retention window expires, all personal records are permanently and securely deleted from our systems.

Yes. Submit a data access request via email or live chat. We will prepare a structured export of everything tied to your account and send it to your registered email within five working days as a secure file.

No. We do not share your personal data with advertisers or marketing partners. Data is only shared with payment processors such as Boost dan FPX to the minimum extent needed to complete a transaction on your behalf.

Contact us through live chat or the privacy email inbox with your account details and the specific change you need. Corrections are made promptly; deletion requests are reviewed against legal retention requirements before we action them.

We use session cookies to keep you logged in and analytics cookies to measure page performance. You can turn off non-essential cookies at any time through the cookie settings panel inside your account dashboard.

Yes. Our data practices are conducted in accordance with applicable Malaysian personal data protection legislation. Access to our platform and related data processing is subject to local law and available only where local law permits.