What We Collect and Why We Hold It
When you open an account, we collect the details you submit — name, email address, phone number, and date of birth — alongside payment identifiers linked to your chosen method, whether that is Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX. We also log device
-
1
identifiers, IP addresses, and session activity to keep your account secure and to meet our obligations under applicable law. Payment transaction records are retained for the period required by financial compliance rules; account profile data is held for as long as your account remains active and
-
2
for a defined period after closure. We do not sell your personal data to third parties. Data is shared only with payment processors, fraud-prevention services, and regulatory bodies where required — each bound by confidentiality obligations. If you are in Subang Jaya or anywhere else in
-
3
Malaysia, the same data-handling standards apply to your account. Access to this service depends on local law and is available where local law permits.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.