Data Handling Depends On Local Law
Our privacy policy sits alongside the account terms you agree to when you open a rapid97 account, and it applies the same way whether you reach us through the browser or the app on your phone. We record what's needed to verify who you are and
-
1
to process transactions — your name, contact number, date of birth, device identifiers and the payment trail from Touch 'n Go eWallet, Boost, GrabPay or DuitNow transfers. None of this goes to outside marketers; it stays inside the systems we use for account verification, fraud checks
-
2
and customer support. Because access to rapid97 depends on local law and is available where local law permits, the exact protections that apply to your data can shift depending on where you're signing in from — we keep our policy aligned with Malaysia's data protection framework
-
3
rather than a one-size-fits-all global statement. Cookies on our pages help remember your login state and your preferred payment chip row so you don't have to reset it every session; you can clear these through your device settings anytime. If you switch devices — say, moving
-
4
from the rapid97 app to a desktop browser — your account history carries over because it's tied to your verified profile, not the device itself. We check how we store payment metadata every so often, and any material change to this policy gets posted on this
-
5
page rather than buried in a separate notice.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.