Rujukan Laman

How vr7 group Handles Your Personal Data

At vr7 group, we are clear about what personal data we collect from your account, why we collect it, and how long we keep it.

Data collected only as neededMalaysian accounts coveredTouch 'n Go & GrabPay contextRight to access your dataClear retention periods
vr7 group How vr7 group Handles Your Personal Data
REACH OUR PRIVACY TEAM

Contact Us About Your Privacy Rights

If you have a question about how your data is stored, want to request a copy of the information we hold on your account, or need…

Email Privacy Request Send a written data request or deletion query to our dedicated privacy inbox at…
Live Chat Support Open the live chat window on vr7group.
Account Help Centre Log in to your account on vr7group.
HOW WE PROTECT YOU

Six Data Practices We Keep Consistent

Our approach to data security is built around specific, auditable practices rather than broad claims.

Encrypted Data Storage

All personally identifiable information stored in our systems is encrypted at rest using current-standard protocols. This includes account credentials, contact details and any payment method identifiers linked to Touch 'n Go or GrabPay.

Cookie Transparency

We use session cookies to keep you logged in and analytics cookies to understand how our lobby is navigated. A cookie consent prompt appears on first visit, and you can update your preferences at any time through your browser settings.

Account Security Controls

Your account is protected by password hashing and optional two-factor authentication. We never store your raw password in any form, and login anomalies trigger automated alerts that flag unusual access attempts to our security team.

Data Retention Schedule

We keep active account data for as long as your account remains open, plus any legally required period after closure. Transaction logs — including Boost and FPX records — are held for the minimum period required by applicable financial regulations.

Third-Party Data Sharing

Personal data is shared only with payment processors and identity-verification partners who are contractually bound to handle it under terms no less protective than our own policy. We do not pass data to advertisers or data brokers.

Requesting Changes to Your Data

You can request access to, correction of, or erasure of your personal data by contacting us via the email or live chat channels listed on this page. We will confirm receipt and act within the timeframes required by applicable law.

Common Questions About Your Data at vr7 group

We have pulled together the questions our account holders ask most about data privacy, cookies and how to exercise their rights. If your question is not answered here, reach us directly through the support channels on this page.

We collect your name, email address, date of birth, contact number and, during payment processing, the identifiers associated with your chosen method — such as your Touch 'n Go or GrabPay wallet reference. We collect only what is needed to run and secure your account.

When you transact via Boost or FPX, the payment processor receives only the data required to complete that specific transfer. We do not store full card or wallet credentials on our servers; tokens are used in place of raw payment details after the first verification.

Yes. Send a data access request to our privacy inbox or raise a ticket through the Help Centre in your account. We will compile and deliver a copy of your account data within the timeframe required by applicable local law, usually within 14 days.

Contact our privacy team via email or live chat and state that you wish to request erasure of your personal data. We will process the request after verifying your identity, retaining only the records we are legally required to keep under financial regulations.

We use session cookies for login continuity and analytics cookies to understand page usage. You can decline non-essential cookies via the consent prompt on first visit, or adjust settings at any time through your browser. Disabling analytics cookies does not affect your ability to use the platform.

Access to personal data is restricted to staff whose role requires it — primarily account security, payment verification and customer support teams. All staff with data access operate under confidentiality obligations, and access logs are reviewed regularly by our security function.

After account closure, we retain transaction records and identity verification data for the minimum period required by applicable law in your jurisdiction. Once that retention period expires, your personal data is securely deleted or anonymised from our active and archived systems.