What We Collect and Why We Hold It
We collect personal information in three main ways: account registration, payment processing, and site activity. When you sign up, we record your name, email address and contact details. When you fund your account using Touch 'n Go eWallet, Boost or GrabPay, we store a transaction reference
-
1
— not your full wallet credentials. We also log session data such as your device type, browser version and pages visited, which helps us keep the account environment stable and detect unusual access patterns early. We do not sell your data to third parties. Information shared
-
2
with payment processors — including DuitNow and FPX — is limited to what those rails need to complete a transaction. Where local law requires us to retain records for a defined period, we comply with that obligation and delete data once the retention window closes. Your
-
3
account information is stored on servers with encryption in transit and at rest. Access to your account data internally is restricted to staff with a direct operational need. This policy applies to accounts held by persons in regions where access is permitted under local law. If
-
4
you are in a jurisdiction where using this platform is restricted, eligibility depends on local law and is available only where local law permits.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.