What We Collect and Why It Matters
We collect personal data in two situations: when you register an account, and when you carry out a transaction. Registration data includes your name, contact number, and email address — the minimum needed to verify your identity and send account alerts. Transaction data covers payment references
-
1
generated when you fund your account through Touch 'n Go eWallet, Boost, or GrabPay; we store the reference and amount, not your full wallet credentials. We also collect device and session data — browser type, operating system, IP address region — to detect unusual login attempts
-
2
and keep your account from being accessed by someone else. Usage data such as pages visited and session length helps us improve the platform for Malaysia accounts specifically. We do not sell your personal data to third parties. Sharing happens only with payment processors who facilitate
-
3
your Touch 'n Go eWallet, Boost, or GrabPay transaction, and with service providers bound by the same data-protection obligations we follow. Access to this platform depends on local law and is available only where local law permits. If you are accessing from Kuching or anywhere else
-
4
in Malaysia, the same data terms apply consistently across all regions.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.