What We Collect and Why It Matters
We collect personal information in three main situations: when you register your account, when you make a transaction, and when you contact our support team. Registration data includes your name, email address, and a contact number so we can verify your identity and keep your account
-
1
secure. Transaction data covers the payment method you used — for example, whether a deposit was made via Touch 'n Go eWallet, Boost, or GrabPay — along with the amount and timestamp, which we hold for account reconciliation. If you reach out to support via live
-
2
chat, we keep a record of that exchange so we can follow up consistently. We do not sell your personal data to third parties. Data shared with payment processors — including those handling DuitNow or FPX transfers — is limited to what those processors need to
-
3
complete your transaction and is governed by their own policies. Where local law requires us to retain certain records, we follow that obligation; outside of those requirements, we aim to hold data only as long as your account remains active or as needed to resolve any
-
4
outstanding queries. Access to your data within our systems is role-restricted, meaning only staff whose job requires it can view your account details. Your account password is stored in an encrypted format and is never visible to our team.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.