Reference

What You Agree to When You Use mbi123

Before you open an account or make a deposit via Touch 'n Go eWallet, Boost, or GrabPay, these terms set out your rights, our obligations, and the conditions that apply where local law permits.

Account TermsData & PrivacyPayment ConditionsUser RightsJurisdiction Notice
mbi123 What You Agree to When You Use mbi123
DATA & ACCOUNT SECURITY

How We Handle Your Data and Protect Your Account

Your account data — including payment details linked to Touch 'n Go eWallet, Boost or GrabPay — is handled under a clear retention and access policy. We collect only what is necessary to operate your account and process transactions. You can request a copy of your stored data or ask us to correct any inaccurate record by contacting support directly.

Data Retention

We retain account and transaction records for the period required by applicable financial compliance rules. After that period, data is deleted or anonymised per our internal schedule.

Cookie Policy

Cookies are used to maintain your session, remember your payment preference and measure page performance. You can manage cookie settings in your browser at any time without losing your account.

Account Security

Login uses a one-time password (OTP) sent to your registered mobile number. If you suspect unauthorised access, change your credentials immediately and contact live chat to flag the session.

Data Access Requests

To request, correct or delete your personal data, reach us via email support with your account name and the specific data category. We aim to respond within the timeframe local law requires.

LEGAL CONTACT PATHS

How to Raise a Legal or Account Query

If you have a question about how these terms apply to your account, or you need to request a data correction, you have three direct ways to reach us. Each channel is monitored by staff who can escalate account-level issues to the right team without delay.

Team online

Live Chat

Use live chat from your account dashboard for real-time help on terms disputes, account holds or identity verification queries. No queue — connect directly.

Email Support

Send detailed legal or data requests to our support address. Include your registered account name and the specific clause or transaction in question for a faster response.

Account Help Centre

The Help Centre inside your account lists common policy questions with step-by-step resolution paths, including how to flag a payment discrepancy or request data access.

Common Legal and Policy Questions

These are the questions we hear most from account holders in Malaysia about how our terms work, what rights you have, and what happens when a dispute or data issue comes up. Each answer reflects how we actually handle the situation — not a generic policy template.

Access depends on local law. Where permitted, you can open an account and fund it via Touch 'n Go eWallet, Boost or GrabPay. Players in Melaka and elsewhere follow the same eligibility check at registration.

Any mismatch between your registered name and your GrabPay, Boost or Touch 'n Go eWallet account triggers a manual identity verification step. The transaction is held until we confirm the details match.

Yes. Email our support team with your registered account name and the specific data categories you want. We will respond within the timeframe required by applicable Malaysian consumer and data protection rules.

We post all updates on this page with a revised effective date. Continuing to use the platform after that date means you accept the updated terms. We recommend checking this page periodically.

Raise it via live chat first, referencing the transaction date and payment method used — for example, a DuitNow or FPX transfer. Our team will review the record and respond with a resolution or escalation path.

Your account wallet balance remains accessible as long as your account is active. To withdraw, complete the standard verification step and select your preferred withdrawal method — Boost, GrabPay or FPX — in the cashier section.
Reference

Legal

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.