What We Collect and Why It Matters
When you open an account, we collect the details needed to verify your identity and process transactions — your name, contact details, and payment method identifiers. If you deposit through Touch 'n Go eWallet, Boost, or GrabPay, we receive a transaction reference from the payment processor,
-
1
not your wallet credentials. We also collect device and session data automatically when you browse: your IP address, browser type, and session timestamps. This helps us detect unusual access patterns and keep your account secure. We do not collect more than what is operationally necessary. Data
-
2
is stored on servers with encryption at rest and in transit. Access to personal records is restricted to staff with a direct operational need. Where local law in Malaysia requires us to retain certain transaction records, we hold them for that period only — no longer.
-
3
If you close your account, we will confirm the retention period that applies to your records at that point. Your use of this platform is subject to the laws and regulations of the jurisdiction in which you access it, and this policy applies where local law
-
4
permits.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.