What We Collect and Why
When you open an account with us, we collect the information needed to run it — your contact details, login credentials, and the payment methods you connect, including Touch 'n Go eWallet, Boost, and GrabPay. Transaction records are kept to process deposits and withdrawals accurately and
-
1
to meet the fraud-prevention checks that protect your account balance. We also collect device and session data — browser type, IP address, and pages visited — to keep the platform stable and to detect unusual access patterns. You can log in from Subang Jaya or anywhere
-
2
else in Malaysia and the same data rules apply. We do not sell your personal data to third parties. Data shared with payment processors like DuitNow or FPX is limited to what those processors need to complete your transaction. Retention periods vary by data type: account
-
3
identity data is held while your account is active; transaction logs are kept for the period required under applicable law; session and cookie data is cleared on a rolling basis. Access to your data is restricted to staff with a direct operational need. All data in
-
4
transit between your device and our servers is encrypted. Where access or eligibility is discussed, availability depends on local law.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.