What Information We Hold and Why
We collect your name, contact details and account credentials when you register. When you fund your account via Touch 'n Go eWallet, Boost, or GrabPay, we record transaction references, amounts in RM and timestamps — enough to verify the transfer and credit your account correctly. We
-
1
do not store your full e-wallet PIN or password at any point. Device data such as IP address, browser type and session duration is logged automatically to detect unusual access patterns and protect your account. If you contact our support team, that conversation history is retained
-
2
so we can follow up accurately. We may also collect data you provide voluntarily, such as preferred language or notification settings. All data is processed in accordance with applicable Malaysian privacy law and is available only where local law permits. We do not sell your personal
-
3
data to third parties. Data shared with payment processors — including the rails that power Touch 'n Go eWallet, Boost and GrabPay settlements — is limited strictly to what those processors need to complete the transaction. Retention periods vary by data type: account identity records are
-
4
kept for as long as your account remains active; transaction logs are held for the period required under applicable financial record-keeping obligations. You may request a copy or deletion of your data at any time.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.