What We Collect and Why We Hold It
We collect your name, contact details, and account credentials when you register. Payment-related data — such as your Touch 'n Go eWallet reference, Boost transaction ID, or GrabPay account identifier — is captured at the point of deposit or withdrawal to verify the transaction and match
-
1
it to your account. We do not store your full e-wallet credentials; only the reference tokens needed for reconciliation are kept. Device identifiers and session data are logged to detect unusual access patterns and protect your account from unauthorised activity. We may also collect your preferred
-
2
language and region settings to serve relevant content. All data is held only for as long as it is needed to fulfil these purposes or as required under applicable Malaysian law. You can request a copy of your stored data, ask us to correct inaccuracies, or
-
3
submit a deletion request by contacting our support team directly. Your data is never sold to third parties. Access to your records within our system is restricted to authorised staff with a specific operational need. Where local law permits and is applicable, we comply with the
-
4
Personal Data Protection Act 2010 (PDPA) framework in managing your information.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.