What We Collect and Why It Matters
We collect the information you provide when registering — your name, contact details, and account credentials — alongside transactional records tied to your deposits and withdrawals via Touch 'n Go eWallet, Boost, and GrabPay. Device identifiers and session logs are captured automatically to detect unusual access
-
1
patterns and protect your account balance. We do not sell your personal data to third parties, and we do not share it beyond what is required to process your payments or comply with applicable legal obligations. Where local law in Malaysia requires us to retain certain
-
2
records, we keep them for the minimum period specified and then delete them. Your payment reference numbers and e-wallet transaction IDs are stored in encrypted form; our team can see that a transaction occurred but cannot retrieve your full wallet credentials. Access to your stored data
-
3
is restricted to staff with a direct operational need. If you are accessing our platform from a region where local law restricts online account services, eligibility depends on that local law and is available only where it permits. We review this policy periodically; any material change
-
4
will be communicated through your registered contact details before it takes effect.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.