What We Collect and Why
When you open an account with candy888, we collect the information needed to verify your identity, process transactions, and keep your account secure. This includes your name, contact details, and payment method data — for example, when you deposit via Touch 'n Go eWallet, Boost, or
-
1
GrabPay, we record the transaction reference and amount to reconcile your account wallet accurately. We also collect device and session data (browser type, IP address, session timestamps) to detect unusual access and protect your account. We do not sell your personal data to third parties. Data
-
2
shared with payment processors like Touch 'n Go eWallet, Boost, and GrabPay is limited strictly to what those processors need to complete your transaction. Where we rely on third-party service providers for platform operations, those providers are bound by data-processing agreements that restrict how they handle
-
3
your information. You have the right to access the personal data we hold about you, request corrections, and in certain circumstances ask us to delete it. Eligibility for specific data rights depends on applicable local law.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.