What We Collect and Why
When you create an account or make a deposit via Touch 'n Go eWallet, Boost, or GrabPay, we collect the information needed to process that transaction and maintain your account — your registered name, contact details, payment reference numbers, and session activity. We do not store
-
1
your full e-wallet credentials; payment authentication happens directly through the respective payment provider's own secure channel. Device identifiers and browser session data are logged to detect unusual access patterns and protect your account from unauthorised login. We retain transaction records as required under applicable Malaysian financial
-
2
regulations, and we keep them only for as long as that obligation requires. Access to your stored data is restricted to authorised internal teams on a need-to-know basis. Where local law permits, you may request a copy of the personal data we hold on your account
-
3
by contacting our support team directly. Availability of certain account features depends on local law and is accessible only where local law permits.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.