Rujukan Laman

How bgrich Handles Your Personal Data

At bgrich, your personal data belongs to you, and we take the steps needed to keep it that way.

Data Collected With Your ConsentTouch 'n Go & GrabPay Transactions ProtectedYour Right to Access Your DataSecure Account StorageMalaysian Law Applies
bgrich How bgrich Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you have a question about how bgrich uses your personal data, want to request a copy of the data we hold, or need to report a concern about data handling, our…

Email Privacy Team Send your data-access or deletion request to our dedicated privacy inbox. Include your registered account email so we can locate your records and respond accurately within the stated timeframe.
Live Chat Support Our live chat agents can log a privacy request on your behalf and escalate it to the data team. Available around the clock, so you can raise a concern at any hour from Shah Alam or anywhere else in Malaysia.
Support Ticket Portal Submit a formal privacy ticket through your account dashboard. Each ticket is assigned a reference number so you can track the status of your request from submission through to resolution.
HOW WE PROTECT YOUR DATA

Six Ways We Safeguard Your Account Data

Protecting the data attached to your bgrich account involves technical controls, clear retention limits and a transparent process for you to exercise your rights.

Encrypted Data Storage

All personal data — including contact details and payment method references — is stored using AES-256 encryption at rest. Only authorised staff with a verified operational need can query the encrypted database.

Cookie Transparency

We use session cookies for login continuity and analytics cookies to understand how pages perform. You can adjust cookie preferences via the consent banner shown on your first visit or through your browser settings at any time.

Payment Data Isolation

Touch 'n Go, GrabPay, Boost dan FPX transaction data is handled by each provider's own secure gateway. We receive only a tokenised confirmation; your full payment credentials are never stored on bgrich servers.

Defined Retention Periods

Active account data is retained while your account remains open. If you close your account, we keep only the minimum records required under applicable Malaysian statutory obligations, then delete or anonymise the remainder.

Account Security Controls

Two-step verification is available for all accounts. Suspicious login attempts trigger an automatic alert to your registered email address, and repeated failed attempts result in a temporary account lock pending identity confirmation.

Data Correction & Deletion Requests

You can request a copy, correction or deletion of your personal data at any time through your account dashboard or by contacting our privacy team directly. We confirm receipt within 24 hours and resolve the request within five business days.

Common Questions About Your Data Rights

The questions below cover what we collect, how we use it, who can see it, and what steps you can take to manage your personal data on bgrich. If your question is not listed here, our support team is available via live chat or the privacy email channel at any time.

We collect your name, email address, contact number and date of birth during registration. Once you transact, we also log payment method references — such as your Touch 'n Go or GrabPay confirmation tokens — and records of deposit and withdrawal activity linked to your account.

We share data only with service providers that are essential to operating your account — such as payment gateways like Boost dan FPX, and identity-verification partners. We do not sell your personal data. Every third-party partner is contractually bound to protect your data to the same standard we apply.

After account closure, we retain only the records required by Malaysian statutory obligations — typically transaction histories for tax or audit purposes. All other personal data is deleted or fully anonymised within 90 days of your account being closed at your request.

Yes. Submit a data-access request via your account dashboard or email our privacy team directly. We will compile and send you a readable copy of the personal data we hold within five business days of verifying your identity.

Some fields — like your display name or contact number — can be updated directly in your account settings. For fields that require staff intervention, raise a support ticket labelled as a data-correction request, and our team will process the change within five business days.

We use strictly necessary cookies for session management and optional analytics cookies to improve page performance. The cookie consent banner on your first visit lets you accept or decline optional cookies. You can also clear or block cookies at any time through your browser settings.

Reach our privacy team via the dedicated privacy email, live chat or the support ticket portal in your account dashboard. We acknowledge every concern within 24 hours and aim to resolve it within five business days, escalating to management if the matter requires further review.