What We Collect and Why We Collect It
When you create an account, we collect the registration details you submit — name, contact number, email address and the payment method you choose to fund with, whether that is Touch 'n Go eWallet, Boost or GrabPay. During account activity we also log session data: the
-
1
device type, connection region and pages visited within the lobby. This lets us verify your identity, process deposits and withdrawals, and detect unusual access patterns that could signal unauthorised use. Payment transaction records — including DuitNow reference numbers and FPX bank confirmation codes — are retained
-
2
for the period required under applicable Malaysian financial regulations. We do not sell or rent your personal data to third parties for marketing. Where we share data with processing partners (for example, a payment gateway that routes your GrabPay deposit), those partners are bound by confidentiality
-
3
agreements aligned to our own data handling standards. Access to this platform and the data rights described here are available where local law permits. If your location or eligibility changes, the scope of data we hold may also change accordingly. We review this policy periodically; the
-
4
current version is always published at this address.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.