What Data We Collect and Why We Hold It
We collect your name, email address, mobile number and date of birth when you register. If you fund your account through Touch 'n Go eWallet, Boost or GrabPay, we record the transaction reference and amount — we do not store your full wallet credentials on our
-
1
servers. For DuitNow or FPX transfers, we retain the bank reference number for reconciliation purposes only. Beyond account data, our platform logs the device type, browser version and session timestamps each time you access the lobby — this helps us detect unusual activity on your account.
-
2
We also place cookies that remember your language setting and login state; these can be cleared through your browser settings at any time. Data is held for as long as your account remains active and for a period after closure as required by applicable record-keeping obligations.
-
3
Access to your stored data is restricted to staff with a specific operational need. We do not sell personal data to third parties, and we share it with payment processors only to the extent required to complete a transaction. Where local law applies additional obligations around
-
4
personal data handling, we follow those requirements for accounts in those regions.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.