Data We Collect and Why We Need It
When you open an account, we collect your name, contact details, and the payment method you use — whether that is Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX. This information is needed to process deposits, verify withdrawals, and keep your account secure. We also
-
1
collect device and session data automatically: your browser type, IP address, and interaction logs. This helps us detect unusual login attempts and keep your account accessible from your phone or desktop without exposing it to unauthorised access. For payment transactions, we store the reference number and
-
2
amount — not your full wallet credentials. Your Touch 'n Go eWallet or Boost PIN is never passed through our servers. When you contact our support team, the conversation history is retained so our team has context for follow-up queries. We do not collect data beyond
-
3
what is needed for these operational purposes. Access to your data is available where local law permits, and our handling of it is shaped by the applicable data protection framework for Malaysia. If you are in George Town or anywhere else in Malaysia, the same rules
-
4
apply to your account.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.