What We Collect and Why We Hold It
We collect the information you provide when you register — your name, email address, contact number and date of birth. When you make a deposit or withdrawal through Touch 'n Go eWallet, Boost or GrabPay, the transaction reference and wallet ID are recorded against your account
-
1
for verification and reconciliation. We also capture device type, browser session data and IP address each time you access the platform, including from Shah Alam or anywhere else in Malaysia where access is permitted under local law. This data is used to verify your identity, process
-
2
payments, detect unusual activity on your account and deliver account-level communications. We do not sell your personal data to third parties. Data shared with payment processors — including the rails behind DuitNow and FPX transfers — is limited to what those processors need to complete your
-
3
transaction. We keep your account data for as long as your account remains active plus any period required by applicable law. You may request a copy of what we hold or ask us to correct inaccuracies at any time through our support channel.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.