What We Collect and Why We Keep It
When you create an account, we collect your name, email address, contact number and the payment method you link — this includes e-wallet identifiers for Touch 'n Go eWallet, Boost and GrabPay, as well as DuitNow and FPX references where those rails are used. Transaction records
-
1
are kept to reconcile deposits and withdrawals against your account wallet. We also log device and browser session data — not to track you across the web, but to detect unusual login patterns and protect your account from unauthorised access. If you contact us through live
-
2
chat or email support, those conversations are stored so our team can follow up accurately. We do not sell your personal data to third parties, and we do not share payment identifiers with anyone outside the payment processor involved in your specific transaction. Data is held
-
3
for as long as your account remains active and for a retention period required under applicable local law after closure. Where local law in Malaysia requires disclosure to a regulatory body, we comply with that requirement — but we will not share data beyond what that
-
4
obligation requires. You may request a copy of the data we hold on you, ask us to correct inaccurate records, or request deletion where no legal retention obligation applies. Access or eligibility for certain features depends on local law and is available where local law permits.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.