What We Collect and Why We Hold It
When you open an account, we collect the details you submit — name, contact information, and payment identifiers linked to your Touch 'n Go eWallet, Boost, or GrabPay wallet. We also log device and session data automatically when you access the platform, including IP address, browser
-
1
type, and pages visited. This data serves three purposes: verifying your identity before a withdrawal is processed, detecting unusual account activity, and improving how the platform responds on your device. We do not collect data beyond what is needed for these functions. Payment data passed through
-
2
DuitNow or FPX channels is handled under the respective payment provider's own security standards, and we do not store full card or bank credentials on our servers. Retention periods vary by data type — account verification records are held for as long as your account remains
-
3
active and for a period after closure as required by applicable law. You may request a copy of the data we hold on you, ask us to correct inaccurate records, or request deletion where no legal obligation requires us to keep it. Eligibility for certain data
-
4
rights depends on local law and applies where local law permits.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.