What We Collect and Why It Matters
We collect information in three main ways. First, account registration: your name, contact details and date of birth, which we need to verify eligibility and maintain your account. Second, payment processing: when you transact via Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX, we record
-
1
transaction references and amounts to reconcile your account wallet — we do not store your full e-wallet credentials or banking PIN. Third, device and session data: your device type, browser version and session timestamps help us keep the account secure and flag unusual access. We also
-
2
use cookies to remember your login state and preferences across sessions. All data is held on servers with SSL encryption in transit. We do not sell your personal data to third parties. We share data only where required to complete a payment, verify an account, or
-
3
comply with a lawful request. Retention periods follow the nature of the data: active account data is kept while your account is open; transaction logs are retained for the period required under applicable law in the jurisdiction where access is permitted. Where local law affects eligibility
-
4
or access, this policy applies to the extent permitted in your region.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.