How We Collect and Use Your Information
We collect information in two ways: directly from you when you register, deposit or contact support, and automatically when your device interacts with our platform. Registration data includes your name, email address, date of birth and preferred payment method — whether that is Touch 'n Go
-
1
eWallet, GrabPay, Boost or FPX. When a deposit clears, our system logs the transaction reference and wallet identifier so our finance team can match it to your account without storing raw card or bank credentials. We also collect device and session data — browser type, operating
-
2
system, IP address and pages visited — to detect unusual login activity and keep your account from being accessed by someone else. This information is held only for as long as we need it to operate your account or meet any legal obligation that applies in
-
3
Malaysia. We do not sell your personal data to third parties. Where we share it — for example, with our payment processors or fraud-screening partners — those parties are bound by data-handling agreements that restrict use to the specific service they provide for us. If local
-
4
law in your region places additional conditions on how we handle your data, those conditions apply and take priority. Access to our platform and these data practices are available where local law permits.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.