Data We Collect and How We Use It
When you open an account, we collect the details you submit — your name, email address, phone number, and identity verification documents where required by local law. Your payment activity is recorded each time you transact via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX;
-
1
we store transaction references, amounts in RM, and timestamps. We do not store your full e-wallet credentials or online banking password — those are handled directly by the payment provider. We use the data we hold to verify your account, process your withdrawals, and respond to
-
2
any account queries you raise. Where local law in Malaysia requires us to retain certain records, we follow that obligation and do not hold data beyond the period it specifies. We may share limited data with our payment processing partners where a transaction requires it, and
-
3
with law enforcement where we receive a lawful request. We do not sell your personal data to third parties for marketing. Access to stored account data is restricted to our internal operations teams on a need-to-know basis, and all transfers of data between your device and
-
4
our systems are protected with SSL encryption.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.