Personal Data We Collect and Why We Hold It
We collect the information you provide when registering your account — your name, email address, date of birth, and contact number. When you make a deposit or withdrawal using Touch 'n Go eWallet, Boost, or GrabPay, we record the transaction reference, amount in RM, and timestamp
-
1
against your account. We do not store your full e-wallet credentials or banking PINs at any point. Beyond account registration, we also collect device data — browser type, IP address, and session behaviour — to keep your account secure and detect unusual activity. If you contact
-
2
our support team, the conversation log is held on file to help us follow up accurately. Data collected through payment rails like DuitNow or FPX is handled in line with what those payment providers share with us under their own terms. We hold your personal data
-
3
only for as long as your account is active or as required to meet our legal obligations. Where local law in Malaysia requires us to retain certain transaction records for a set period, we follow those requirements. Access to your stored data is restricted to authorised
-
4
staff only, and all records are kept on encrypted servers. You may request a copy of your personal data or ask us to correct inaccuracies at any time through our support channel.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.