What Information We Hold and Why We Hold It
We collect your name, email address, and the phone number you register with — this is the minimum needed to create and secure your account. When you fund your account using Touch 'n Go eWallet, Boost, or GrabPay, we receive a transaction reference and the wallet
-
1
ID associated with that transfer; we do not store your full wallet credentials or PIN. For DuitNow or FPX transfers, we log the reference number and transfer amount for reconciliation. We also record device type, browser session data, and your approximate location region so we can
-
2
detect unusual login activity and block unauthorised access attempts. All data we collect has a stated purpose — account creation, payment verification, security monitoring, or legal compliance where applicable under Malaysian jurisdiction. We do not sell your personal data to third parties for marketing. Data shared
-
3
with payment processors like Touch 'n Go eWallet and Boost is limited to what those processors need to confirm a transaction. Retention periods vary by category: account login records are kept for the life of the account; payment references are held for up to seven years
-
4
in line with standard financial record-keeping practice. You may request a copy of all data we hold on you at any time by contacting our support team. Access to and use of this platform depends on local law and is available only where local law permits.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.