What Information We Hold and Why
We collect information you provide directly — your name, contact details, and account credentials — alongside transaction records generated when you deposit or withdraw via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX. Device identifiers and session data are logged automatically when you access the
-
1
platform from your phone or browser; this helps us detect unusual login attempts and keep your account secure. We do not collect more than is necessary for account operation and payment verification. Payment data is handled through encrypted channels; we do not store full card or
-
2
wallet credentials on our own servers. Your transaction history is retained for the period required under applicable Malaysian financial and anti-fraud obligations, after which it is purged from active records. Access to your stored data is restricted to staff and systems that require it to process
-
3
your account activity — no broader internal sharing beyond that scope. If you fund your account from Kuantan or anywhere else in Malaysia, the same data handling rules apply consistently across all regions. This policy applies to accounts where access is permitted under local law.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.