Rujukan Laman

How expressking Handles Your Personal Data

At expressking, your personal data belongs to you — we collect only what we need to operate your account, process deposits via Touch 'n Go, GrabPay, Boost dan…

Data Collected Only As NeededTouch 'n Go & GrabPay Transactions ProtectedYour Right To Access & DeleteMalaysia-Applicable PolicyContact Us Anytime
expressking How expressking Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Our Data Protection Team

If you have questions about how your data is used, want to request a copy of what we hold, or wish to ask us to delete your information, our data protection team…

Email Us Directly Send your data access or deletion request to our privacy team by email. Include your registered account email so we can locate your record and respond accurately within five working days.
Live Chat Support Open the live chat window from any page on expressking.pro and ask to speak with our data team. Available daily; our agents will log your request and escalate it to the correct department.
Support Ticket Form Submit a formal privacy request through our support ticket form. Select the Privacy & Data category, describe your request clearly, and we will send a written response to your registered email address.
DATA HANDLING PRACTICES

How We Protect and Manage Your Information

Security and transparency are the two principles that shape how we handle account data at expressking.

Encrypted Data Storage

All account data — including payment identifiers for Touch 'n Go, GrabPay and Boost — is stored using AES-256 encryption. Only authorised system processes and verified staff with a documented need can access your records.

Cookie Usage Policy

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You can manage cookie preferences in your browser settings; disabling analytics cookies does not affect account access or payments.

Account Security Measures

Your account is protected by password hashing and optional two-factor authentication. Login attempts from unrecognised devices — including those of players in Kuala Lumpur accessing via mobile — trigger an email verification step before access is granted.

Data Retention Schedule

Transaction records are held for as long as required under applicable Malaysian law, typically seven years for financial data. Non-transactional profile data is deleted within 30 days of a confirmed account closure request.

Third-Party Data Sharing

We share data only with payment processors handling your Touch 'n Go, GrabPay, Boost dan FPX transactions, and with identity verification providers where local law requires it. No marketing third parties receive your personal data.

Your Right To Correct Data

You can request a correction to any inaccurate personal data we hold — name, contact number, or linked payment details. Submit a correction request via live chat or the support ticket form, and we will confirm the update within three working days.

Frequently Asked Questions About Your Privacy

The questions below cover the data rights we see asked about most by account holders in Malaysia. If your question is not answered here, use any of the contact channels listed above to reach our data protection team directly — we will respond in writing to every formal request.

We collect your name, email address, phone number, and payment identifiers linked to Touch 'n Go, GrabPay, Boost or FPX. We also record device and session data to verify that account access is authorised and secure.

Yes. Submit a data access request via email or the support ticket form, selecting the Privacy & Data category. We will compile and send a full copy of your personal record to your registered email within five working days.

Contact our data team through live chat, email, or the support ticket form and request account deletion. We remove non-transactional data within 30 days. Financial transaction records are kept for the period required under Malaysian law.

No. We share data only with payment processors — for Touch 'n Go, GrabPay, Boost dan FPX transactions — and with identity verification services where local law requires it. Your data is never passed to marketing or advertising third parties.

Payment identifiers for Touch 'n Go, GrabPay, Boost dan FPX are encrypted using AES-256 and accessible only to authorised payment-processing systems. We do not store full card or wallet credentials on our own servers.

You have the right to correct any inaccurate details — name, contact number, or linked payment method. Raise a correction request via our support ticket form or live chat, and we will confirm the update within three working days.

This policy applies to all accounts opened through expressking.pro where local law permits access. Your data rights and our obligations remain the same regardless of which region in Malaysia you access the platform from.