What Data We Collect and Why
We collect three categories of information. First, registration data: your name, email address, date of birth, and the account credentials you set when you join. Second, payment data: transaction references tied to your Touch 'n Go eWallet, Boost, or GrabPay activity — we do not store
-
1
your full e-wallet credentials, only the reference needed to match your deposit or withdrawal to your account. Third, session data: device type, browser session tokens, and IP address, retained to detect unusual access patterns and protect your account from unauthorised logins. We do not collect payment
-
2
card numbers directly. All data processing operates subject to local law and is available only in regions where local law permits. If you are in George Town or anywhere else in Malaysia, your data sits within the same framework — location within the country does not
-
3
change your rights under this policy. We keep your registration data for as long as your account remains active and for a defined period after closure, as required by applicable rules. You may request a copy of what we hold, ask us to correct inaccuracies, or
-
4
submit a deletion request through the contact path listed below.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.