Data We Hold and the Reason for Each Type
When you register, we collect your name, email address, contact number, and the account credentials you create. When you deposit or withdraw through Touch 'n Go eWallet, Boost, or GrabPay, we log the transaction reference, amount in RM, and timestamp — but we never store your
-
1
full e-wallet PIN or password. Session data such as your device type, browser version, and IP address is captured automatically to keep your account secure and to detect unusual activity. Where local law requires identity verification before a withdrawal is processed, we may request a copy
-
2
of a Malaysian identity document; that document is held in encrypted storage and is not shared with third parties except where the law specifically requires it. Use of our platform is subject to local law and available only where local law permits. Data retention periods follow
-
3
the schedule required by applicable regulations, and any data we no longer need for operational or legal purposes is deleted on a rolling basis.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.