Data We Hold and Why We Hold It
When you register, we collect your name, contact details and the information needed to verify your account — this is standard practice for any operator running real-money transactions in Malaysia. Each time you fund your account through Touch 'n Go eWallet, Boost or GrabPay, we record
-
1
the transaction reference, amount and timestamp; we do not store your full e-wallet credentials or PIN. Your device identifiers and session data are logged to protect your account from unauthorised access — if we see a login from an unfamiliar device, we can flag it before
-
2
it becomes a problem. We may also collect your IP address and browser type to ensure the platform renders correctly on your phone or browser. Data collected during support conversations — whether via live chat or email — is retained only as long as it takes
-
3
to resolve your request, after which it is archived under our standard retention schedule. We share data with payment processors like Touch 'n Go eWallet, Boost and GrabPay solely to complete your transactions; we do not sell your personal information to third parties for marketing purposes.
-
4
Retention periods follow applicable data-protection obligations, and you may request a summary of the data we hold at any time through the contact path in the support section below.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.