Rujukan Laman

How elsa78 Handles Your Personal Data

At elsa78, we take the handling of your personal data seriously — this page sets out exactly what we collect, why we collect it, and how we keep…

Data collected only for account operationNo sale of personal data to third partiesYou may request, correct or delete your dataTouch 'n Go, GrabPay, Boost dan FPX transaction data protectedPolicy applies to all devices and sessions
elsa78 How elsa78 Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Data

If you want to access, correct or remove any personal data we hold on your account, our team is available through three direct channels.

Live Chat Start a live chat from any page on elsa78.my to raise a data request directly. Our team is available daily and will log your request with a reference number so you can track its progress.
Email Send your data access or deletion request to our privacy inbox at elsa78.my. Include your registered account email and describe what data you are asking about so we can respond accurately and promptly.
Help Centre The Help Centre at elsa78.my has a dedicated privacy request form. Fill in your account details and the nature of your request — a member of our data team will pick it up within two business days.
DATA HANDLING PRACTICES

How We Protect and Manage Your Information

We have structured our data practices around six pillars so your account data — including payment identifiers from Touch 'n Go, GrabPay, Boost dan FPX — stays secure and within your control…

Data Collection

We collect only what is necessary to operate your account: your registration details, session activity, device type and payment method identifiers. No additional profiling data is collected without your knowledge or a clear reason tied to your account.

Cookie Use

Cookies on elsa78.my are used to keep you logged in, remember your language preference and measure which pages load correctly on your device. You can adjust cookie preferences through your browser settings at any time without losing your account.

Account Security

Your account password is stored in hashed form — we do not hold it in plain text and our staff cannot retrieve it. If you suspect unauthorised access, change your password immediately and contact live chat so we can flag the session logs.

Data Retention

We keep your account data for as long as your account remains active. Once you close your account, we retain only what is required by legal obligations. Any data beyond that window is deleted from our systems on a scheduled basis.

Your Access Rights

You have the right to request a copy of all personal data we hold on your account. Submit your request through live chat or the Help Centre and we will provide a structured data export within a reasonable timeframe, subject to identity verification.

Requesting Changes

If any data on your account is incorrect — a misspelled name, outdated contact number or wrong payment identifier — contact our team with the correct details and supporting documentation. We aim to update records within three business days of verification.

Your Privacy Policy Questions

These are the questions we receive most often about how elsa78 handles personal data. If your question is not covered here, send it through live chat or the Help Centre and our data team will respond directly.

We collect your name, email address, contact number, date of birth and account login credentials during registration. When you transact, we also record the payment method reference — such as your Touch 'n Go or GrabPay identifier — and the transaction amount and timestamp.

No. We do not sell, rent or trade your personal data to third parties for their own marketing or commercial use. Data is shared only with payment processors like GrabPay, Boost dan FPX and FPX to complete your transactions, and only to the extent those processors require.

After you close your account, we retain only the data we are legally required to keep — typically transaction records for audit and compliance purposes. All other personal data is deleted on our scheduled data-purge cycle once that obligation period has passed.

Yes. Submit a data access request through our Help Centre or live chat, providing your registered email and a form of identity verification. We will compile and deliver a structured export of your account data within a reasonable timeframe as required under applicable law.

Contact our team via live chat or the privacy email address listed in the Help Centre. State clearly that you are requesting deletion, include your account reference, and we will process the request after verifying your identity and confirming no legal hold applies to your records.

We use session cookies to keep you logged in, functional cookies for language and region preferences, and analytics cookies to identify page errors. You can disable non-essential cookies through your browser settings — doing so will not close your account or affect your ability to deposit.

Yes, the same policy covers all access to elsa78.my regardless of whether you are on a smartphone, tablet or desktop browser. Session data collected on mobile — including device type and login timestamps — is handled under the same retention and security standards described in this policy.