What We Collect and Why We Use It
When you open an account with us, we collect your name, email address, contact number and payment identifiers — for example, the wallet reference tied to your Touch 'n Go eWallet or Boost transaction. This lets us verify deposits, process withdrawals and match your account to
-
1
the correct payment record. We also log device type, IP address and session timestamps to detect unusual access patterns and keep your account safe. Cookies and similar tools track which pages you visit so we can improve how the lobby loads on your device. We do
-
2
not sell your personal data to third parties. Data shared with payment processors — including GrabPay and DuitNow — is limited to what those processors need to complete your transaction. Retention periods vary by data type: transaction records are kept as long as required under applicable
-
3
financial regulations, while session logs are cleared on a rolling basis. Access to your data is restricted to staff who need it to operate or support your account. Where local law governs how we may collect or process your information, we follow those requirements; availability of
-
4
certain features depends on what local law permits in your region.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.