What We Collect and Why We Hold It
We collect information in two broad ways. First, what you give us directly: your name, contact details, and the payment method you choose — whether that is Touch 'n Go eWallet, Boost, or GrabPay — when you register or transact. Second, what your device sends automatically:
-
1
session data, browser type, and the pages you visit inside the platform. We use this to confirm identity during login, match your wallet details when processing a DuitNow or FPX withdrawal, and flag unusual account activity early. We do not sell your data to third parties
-
2
for marketing. Retention periods depend on the type of record — payment transaction logs are held for as long as our financial obligations and applicable local law require; session data is shorter-term. If you are in George Town or anywhere else in Malaysia, this policy applies
-
3
to you under the same terms, and access to our platform depends on whether local law in your region permits it. We review this policy whenever our data practices change, so check back if you want to see what is current.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.