What We Collect and Why We Hold It
When you open an account, we collect your name, email address, date of birth, and the payment details you link — whether that is a Touch 'n Go eWallet number, a Boost account reference, or a GrabPay-linked mobile number. We record transaction history so that deposits
-
1
via DuitNow or FPX can be reconciled against your account wallet accurately. Device identifiers and session logs are stored to detect irregular login patterns, not to profile your browsing habits outside our platform. We do not sell your personal data to third parties. Data shared with
-
2
payment processors — including the e-wallet providers you choose at checkout — is limited to what those processors need to complete the transaction. Retention periods follow the obligation under applicable law in the jurisdictions where we operate; when data is no longer required, it is deleted
-
3
or anonymised. If you are in Subang Jaya or anywhere else in Malaysia, your rights under local law apply, and access to this service is available where local law permits. You may request a full copy of the data we hold on your account, or ask
-
4
us to correct inaccurate records, through our support channels at any time.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.