Rujukan Laman

How apatu Handles Your Personal Data

This Privacy Policy explains what personal data apatu collects when you open an account, make a deposit via Touch 'n Go, GrabPay, Boost atau FPX, or browse our…

Data Collected TransparentlyMalaysian Law CompliantSecure Account StorageYour Rights ProtectedDirect Contact Available
apatu How apatu Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to access, correct or request deletion of your personal data held by apatu, our privacy team is ready to respond.

Live Chat Open the chat widget on any apatu page and select the Privacy enquiry category. A support agent will acknowledge your data request and escalate it to our privacy team within one business day.
Email Support Send your privacy request directly to our dedicated privacy inbox. Include your registered account email so we can locate your records quickly and respond within the stated thirty-day window.
In-App Request Log in to your apatu account, navigate to Account Settings and select Data and Privacy. You can submit a data access or deletion request from there without leaving the app.
HOW WE PROTECT YOU

Data Handling, Cookies and Account Security

apatu applies layered security measures across data storage, account login and payment processing to keep your information safe.

Data Encryption

All personal data transmitted between your device and apatu servers is encrypted using TLS. Payment details processed through Touch 'n Go, GrabPay, Boost atau FPX pass through encrypted channels and are never stored on our servers in plain text.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You can manage cookie preferences through your browser settings at any time. Declining analytics cookies does not affect your ability to use your account.

Account Security

Your account is protected by password hashing and optional two-factor authentication. We log login attempts and flag unusual access patterns automatically. You will be notified by email if we detect a login from an unrecognised device.

Data Retention

We retain your account data for as long as your account remains active and for a period required by applicable law after closure. Transaction records linked to FPX or GrabPay payments are kept for the minimum period mandated by financial regulations.

Third-Party Sharing

Personal data is shared only with service providers who process payments or operate account infrastructure on our behalf. Each provider is bound by a data processing agreement that restricts them from using your data for any other purpose.

Your Access Rights

You have the right to request a copy of the data we hold about you, ask us to correct inaccurate records, or request deletion subject to our legal retention obligations. Submit any of these requests through the contact paths listed on this page.

Common Questions About Your Privacy at apatu

These questions cover the most common concerns about how we handle your data, your rights as an account holder, and how to get in touch when you need to make a data request. If your question is not answered here, reach us via live chat or email and we will respond promptly.

We collect your name, email address, phone number, date of birth and country of residence during registration. Once you transact, we also record payment method references for Touch 'n Go, GrabPay, Boost atau FPX, along with your transaction history.

We share data only with payment processors required to complete your deposits and withdrawals, and with infrastructure providers who host our platform. All third parties are contractually restricted from using your data beyond the specific service they provide to us.

After account closure, we retain records for the minimum period required by applicable Malaysian financial and legal regulations. Once that retention period ends, your data is securely deleted or anonymised so it can no longer be linked back to you.

Log in, navigate to Account Settings and select Data and Privacy, then submit a data access request. Alternatively, email our privacy team with your registered account address. We aim to deliver your data package within thirty calendar days of receiving your request.

Yes. Submit a deletion request through Account Settings or by emailing our privacy team. We will erase your data unless a legal obligation requires us to retain specific records, in which case we will inform you of what we must keep and why.

We use essential cookies to keep your session active and analytics cookies to measure page performance. You can accept, decline or customise non-essential cookies through your browser settings. Declining them does not block access to your account or the lobby.

Contact our privacy team directly via the in-app request form, live chat or email. If you are not satisfied with our response, you may also refer your concern to the relevant data protection authority in your jurisdiction, depending on where local law applies.