Rujukan Laman

How kfc4 Protects Your Personal Data

At kfc4, your personal data is handled with care — we collect only what we need to operate your account, process deposits via Touch 'n Go, GrabPay, Boost…

Data MinimisationEncrypted StorageYour Right to AccessMalaysian Law AppliesContact Us Anytime
kfc4 How kfc4 Protects Your Personal Data
REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

If you have a question about how we handle your personal data, want to correct an inaccuracy, or wish to submit a formal data access request, our privacy team is ready to…

Live Chat Connect with our privacy team directly through the live chat widget on the kfc4 website. Available seven days a week during operational hours for account data queries and correction requests.
Email Support Send your data access or deletion request to our dedicated privacy inbox. Include your registered account email so we can verify your identity and locate your records quickly.
Online Request Form Use the structured request form in your account settings to submit formal privacy queries. The form ensures we capture all the details needed to process your request under Malaysian personal data law.
HOW WE HANDLE DATA

Six Ways We Safeguard Your Account

Every technical and procedural measure described below is applied consistently across all kfc4 accounts.

Encrypted Data Storage

All personal data we store — including your contact details and payment method identifiers — is encrypted at rest using industry-standard protocols. Decryption keys are held separately and rotated on a scheduled basis to limit exposure.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand how pages are navigated. You can adjust cookie preferences in your browser at any time; opting out of analytics cookies does not affect your ability to use your account.

Account Security Controls

Your account password is stored as a salted hash — we never hold it in plain text. Two-factor authentication is available and we recommend enabling it. Suspicious login attempts trigger an automatic alert sent to your registered email.

Data Retention Schedule

Transaction records are retained for the period required under Malaysian financial regulations. Account profile data is held for as long as your account remains active, and for a defined period after closure. We delete or anonymise data once the retention window expires.

Third-Party Data Sharing

We share data with Touch 'n Go, GrabPay, Boost dan FPX processors only to the extent required to settle a transaction. We do not share your data with advertising networks or data brokers. Any third-party processor we use is bound by a data processing agreement.

Your Rights and How to Exercise Them

Subject to what local law permits, you may request access to, correction of, or deletion of your personal data at any time. Submit a request via live chat, email, or the in-account form. We will acknowledge your request within one working day and resolve it within three.

Your Privacy Questions, Clearly Answered

The questions below cover the situations our account holders ask about most when it comes to personal data — from what we collect at sign-up to how long we keep payment records. If something is not covered here, reach out through live chat or email and we will provide a direct answer.

We collect your name, email address, mobile number, and the payment identifiers linked to your chosen method — Touch 'n Go, GrabPay, Boost, or FPX. We also log your device type and IP address to protect your account from unauthorised access.

Payment data is passed directly to the relevant processor — Touch 'n Go, GrabPay, Boost, or FPX — over an encrypted connection. We retain only the transaction reference and status; we do not store full card or wallet credentials on our servers.

Yes, where local law permits you may request a full data export. Submit your request via the in-account form or by emailing our privacy inbox with your registered email address. We will respond within three working days.

Log in and update basic details directly in your account settings. For details you cannot edit yourself — such as identity documents submitted during verification — contact our privacy team via live chat or email and we will correct the record after verifying your identity.

Transaction records are retained for the period required under Malaysian financial and anti-money-laundering regulations. Profile data is held for a defined period after account closure, after which it is deleted or anonymised in line with our retention schedule.

We use session cookies to maintain your login and analytics cookies to measure page performance. You can disable analytics cookies in your browser settings at any time without losing access to your account or any platform features.

Reach our privacy team through live chat, email, or the in-account request form. If you are not satisfied with our response, you may escalate your complaint to the relevant Malaysian data protection authority as permitted under local law.