What Data We Collect and Why We Hold It
When you open an account with us, we collect the information you provide directly — your name, email address, date of birth, and the payment method you link to your account wallet. For Malaysia accounts, that includes transaction references tied to Touch 'n Go eWallet, Boost,
-
1
and GrabPay deposits and withdrawals. We also collect device data automatically: your browser type, IP address, and session timestamps. This helps us verify returning logins on mobile and maintain continuity when you switch between your phone and desktop mid-session. We use your data to process your
-
2
account, verify identity for withdrawals, deliver account communications, and maintain security logs. We do not use your data for any purpose beyond operating your account and improving how the platform works for you. Data shared with payment processors — including DuitNow and FPX routing partners —
-
3
is limited to what each transaction requires; we do not pass your full profile to them. Where local law requires us to retain data for a set period, we follow that obligation. Outside of that, we keep data only for as long as your account remains
-
4
active or as needed to resolve any open queries.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.