Rujukan Laman

Understand Our Terms Before You Start

Every account on 2winapp operates under a clear set of legal terms covering data use, account conduct, fund handling and your rights as an account holder.

Account TermsPrivacy PolicyCookie PolicyData RetentionGoverning Law
2winapp Understand Our Terms Before You Start
REACH OUR LEGAL DESK

Contact Us About Any Policy Matter

If you have a question about how our terms apply to your account, need to make a formal data request, or want clarification on a specific clause, our support team has direct paths for legal and compliance queries. We aim to acknowledge all legal enquiries within one business day and resolve them within seven.

Team online

Email Support

Send your legal or privacy query to our support address and we will route it to the right team. We aim to respond within one business day for all policy-related messages.

Live Chat

Our chat agents can handle account-level questions about terms and data. For formal data access or deletion requests, they will escalate directly to our compliance team on your behalf.

In-Account Message

Log into your 2winapp account and use the internal message centre to raise a policy dispute or request a copy of your data. Every message is timestamped and tracked to resolution.

HOW WE PROTECT YOUR ACCOUNT

Explore Our Data and Security Practices

Security and data integrity are built into every layer of the account system. From encrypted sessions to structured data-retention schedules, here is exactly how we handle what you share with us and…

Data Handling

Personal details you provide during registration are stored on servers with AES-256 encryption. We do not sell your data to third parties and share it only with payment processors like Touch 'n Go, GrabPay and Boost when clearing a transaction.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand how pages in Petaling Jaya and wider Malaysia load and perform. You can adjust cookie preferences in your account settings at any time.

Account Security

Two-factor authentication is available on every account. We log every login attempt with IP address and device fingerprint; if an unfamiliar device attempts access, we send an immediate verification prompt to your registered email.

Data Retention

Transaction and account records are retained for a minimum of five years to meet financial-compliance obligations. After that window closes, personal data not required for legal purposes is deleted on a rolling quarterly schedule.

Who to Contact

Our Data Protection Officer handles all formal privacy requests. Reach them via the in-account message centre or the legal contact email listed in our privacy notice — they must respond to access requests within 30 days.

Requesting Changes

You may request correction, export or deletion of your personal data at any time. Submit the request through live chat or email; we will verify your identity, then process the change within the timeframe set out in the privacy notice.

Answers to Common Legal Questions

The questions below cover the areas account holders ask about most — your data rights, how terms apply, what you can request and how to dispute a decision. If your question is not here, our live chat team can point you to the right clause in the full policy document.

Yes. Submit a data access request through the in-account message centre or via our legal support email. We will verify your identity and send a structured export of your account data within 30 days of receiving the request.

Contact support via live chat or email and ask for a deletion request form. Once submitted and identity-verified, we delete personal data not required for legal or financial-compliance purposes within 30 days; transaction records are retained as required by law.

Access to the platform depends on local law and is available where local law permits. For Malaysian account holders, the governing jurisdiction and applicable law are set out in full in the Terms and Conditions document linked at the bottom of every page.

We do not store full card or e-wallet credentials. Payment tokens from processors such as Touch 'n Go, GrabPay, Boost dan FPX are held only long enough to complete the transaction and are then discarded per each processor's own security standards.

We notify you by email and in-account message before any material policy change takes effect. If you do not agree with the updated terms, you may close your account and request a final data export before the change comes into force.

Raise a formal dispute through the in-account message centre. Our compliance team will acknowledge it within one business day and provide a written outcome within 14 days. You may escalate unresolved disputes to the contact specified in the governing-law clause.

Access and the specific obligations under these terms depend on local law. For Malaysian account holders, the full terms are available in English and apply where local law permits use of the platform. Regional variations are noted within the terms document itself.