What We Collect and Why It Matters
We collect your name, email address, phone number and account credentials when you register. If you fund your account via Touch 'n Go eWallet, Boost or GrabPay, we log the transaction reference and amount — not your wallet PIN or full card details. Device data such
-
1
as your browser type, operating system and session timestamps are recorded automatically to protect against unauthorised access. We do not sell your personal information to third parties. Where we share data with payment processors or platform security partners, we do so under data processing agreements that
-
2
limit their use to the service they provide. Data is retained while your account is active and for a period after closure, as required by applicable law. If you are in Malaysia, your data is handled in accordance with Malaysian personal data protection law where that
-
3
law applies to our processing. Access to and eligibility for our services depends on local law and is available where local law permits. You can request a summary of the data we hold on you, ask us to correct errors, or ask about deletion — all
-
4
through the contact path listed in this policy.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.