What We Collect and Why It Matters
When you open an account, we collect the details you submit during registration — full name, email address, mobile number and, where account verification requires it, a copy of your identity document. When you make a deposit or withdrawal using Touch 'n Go eWallet, Boost, GrabPay,
-
1
DuitNow or FPX, we record transaction references, amounts in RM and timestamps. We do not store your full e-wallet PIN or online banking password — those stay inside your payment provider's environment. We also collect device and session data: your IP address, browser type and the
-
2
pages you visited within our lobby. This helps us detect unusual login patterns and keeps your account from being accessed by someone who is not you. We retain account data for as long as your account remains active and for a defined period after closure, as
-
3
required under applicable Malaysian data-handling obligations. Marketing preferences — such as whether you want email or SMS updates from us — are stored separately, and you can change them at any time through your account settings. Your data is not sold to third parties. It is
-
4
shared only with payment processors, identity verification services and technology partners who are contractually required to protect it to the same standard we apply internally. Access to your data within our team is restricted to staff who need it to operate or support your account.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.