Data We Hold and How We Use It
We collect personal data across three main areas. First, account registration details — your name, email address, and phone number — used solely to verify your identity and keep your account secure. Second, payment activity: when you deposit via Touch 'n Go eWallet, Boost, or GrabPay,
-
1
we record transaction amounts, timestamps, and wallet references so your account balance stays accurate and disputes can be resolved quickly. Third, device and session data — browser type, IP address, and page interactions — collected to detect irregular access and keep the platform running correctly for
-
2
you. We do not sell your data to third parties, and we do not share it with advertisers. Data shared with payment processors like Touch 'n Go eWallet or GrabPay is limited to what those processors need to complete your transaction. Where local law in Malaysia
-
3
requires us to retain records for a set period, we follow that requirement; outside of that, we hold data only as long as your account remains active. If you close your account, we begin the deletion process within the period specified under applicable Malaysian data protection
-
4
rules. Access to your stored data is restricted to authorised staff and our verified payment and security partners.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.