Reference

Your Rights and Our Obligations at carta4

These legal terms set out exactly what you agree to when you open an account with carta4, how your data is handled, and what you can expect from us in return.

Account terms apply on registrationMalaysian jurisdiction contextData handled under privacy rulesTouch 'n Go eWallet, Boost, GrabPay transactions coveredLegal contact available via live chat
carta4 Your Rights and Our Obligations at carta4
DATA AND ACCOUNT SECURITY

How We Handle Your Account and Data

Security at carta4 runs across every layer of your account — from the moment you register to every transaction you make. We use SSL encryption on all data in transit, and your account credentials are stored using one-way hashing so we never see your raw password. Every withdrawal request triggers an identity verification step; this is not optional and applies regardless of whether funds leave via GrabPay, Boost or a bank transfer through FPX.

Data Retention

We keep transaction records and account data for the period required by our operational policy. You may request a summary of what we hold on your account at any time via email.

Cookie Policy

Cookies on carta4 track session state and account preferences only. We do not use cookies to sell your behaviour data to advertisers or third-party marketing platforms.

Account Access Control

Login to your account uses OTP verification sent to your registered mobile number. If you suspect unauthorised access, contact live chat immediately to freeze the account.

Data Request Rights

You have the right to request a copy of your personal data, ask for corrections, or request deletion where it does not conflict with our legal retention obligations.

LEGAL CONTACT PATHS

How to Reach Us on Legal Matters

If you have a question about these terms, want to request a copy of your data, or need to raise a formal concern, our support team handles all of that. You can reach us through live chat directly inside your account, by email for written records, or through our dedicated account help desk for payment-related disputes.

Team online

Live Chat

Open your account and start a live chat session. This is the fastest path for urgent legal queries, account-access issues or any dispute related to a transaction.

Email Support

Send a written request to our support email for formal data access requests, account closure queries or documented complaints that need a paper trail.

Account Help Desk

For disputes involving Touch 'n Go eWallet, Boost or GrabPay transactions, the account help desk can pull the relevant records and respond with a detailed breakdown.

Common Questions About Our Legal Terms

The questions below cover what we hear most often from people reading through our terms for the first time. Each answer is specific to how carta4 operates for players in Malaysia.

Yes. The same account terms apply regardless of which payment method you use. Touch 'n Go eWallet, Boost and GrabPay are all covered under the standard transaction terms.

Send a written request to our support email from the address registered to your account. We will confirm receipt and provide your data summary within a reasonable period.

You can request deletion of personal data that is not subject to our legal retention obligations. Contact the support team via email and we will advise which data can be removed.

Access depends on local law and is available only where local law permits. Accounts identified as operating from restricted regions may be reviewed and limited without prior notice.

Raise any dispute involving a Boost, GrabPay or FPX transaction through the account help desk. We will pull the transaction record and respond with a full breakdown of what occurred.

We will notify you of material changes to our terms via your registered email or a notice inside your account before the changes take effect. Continued use after that constitutes acceptance.
Reference

Legal

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.