What We Collect and Why We Hold It
We collect information you give us directly — your name, contact details, and the payment method you choose when funding your account, whether that is Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX. We also record transaction references so we can reconcile deposits and process
-
1
account withdrawals accurately. Device data, such as your browser type and the IP address associated with your session, is logged for security purposes — specifically to detect unusual login patterns and flag potential account compromise early. We do not sell your data to advertisers or share
-
2
it with unrelated third parties. Data shared with payment processors is limited to what each processor needs to complete your transaction and nothing more. Where local law in Malaysia requires us to retain records for a defined period, we follow that requirement and delete data once
-
3
the retention window closes. Access to your stored data internally is restricted to staff with a direct operational need. If your account has been dormant and you want to know what we hold, reach out through our live chat channel and we will walk you through
-
4
the data request process.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.