What Information We Collect and Why
When you open an account with us, we collect the details needed to verify your identity and process your transactions — your name, email address, mobile number, and payment reference data tied to Touch 'n Go eWallet, Boost, or GrabPay transactions. We also capture device and
-
1
session data such as your IP address, browser type, and pages visited, so we can detect unusual activity and keep your account secure. Payment data is handled through encrypted channels; we do not store full wallet credentials on our servers. Where you use DuitNow or FPX
-
2
for transfers, the transaction reference is logged to match your account ledger and reconcile any pending amounts. We collect only what we need for the purpose it was collected — account management, fraud prevention, and where local law permits, improving the platform experience for you. Data
-
3
held for transaction verification is retained for the period required under applicable Malaysian financial and data regulations; data no longer needed for those purposes is deleted or anonymised. Your access to this platform and its features depends on local law and is available where local law
-
4
permits.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.