What We Collect and Why We Collect It
When you open an account with us, we collect the information required to verify your identity, process transactions and deliver support. This includes your name, contact details, device identifiers and payment method references — for example, the masked wallet ID linked to your Touch 'n Go
-
1
eWallet, Boost or GrabPay transaction. We do not store full card numbers or full wallet credentials on our servers. Session data such as login timestamps, browser type and IP address is logged to detect unusual access patterns and protect your account. We may share data with
-
2
payment processors and fraud-prevention partners strictly to complete your requested transaction or investigate a dispute. We do not sell your personal data to third parties for marketing. Retention periods follow applicable local law; account data is kept for as long as your account is active and
-
3
for a legally required period after closure. Access to this platform and the applicability of this policy depend on local law and are available where local law permits. If you are in Kuching, Kota Kinabalu or anywhere else in Malaysia, the same policy applies to your
-
4
account.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.