What We Collect and Why We Keep It
We collect your name, contact details, and account credentials when you register. When you fund your account using Touch 'n Go eWallet, Boost, or GrabPay, we record the transaction reference and amount — not your full wallet credentials. We also collect device and session data automatically
-
1
through your browser to detect unusual login patterns and flag access from unrecognised devices. Your IP address and approximate region are logged to apply access rules where local law requires. We do not sell your personal data to third parties. Data shared with payment processors is
-
2
limited to what those processors need to verify and complete a transaction. We keep your account data for as long as your account remains active and for a further period required by applicable law. If you close your account, you can request deletion of data that
-
3
falls outside any legal retention obligation. Cookies and local storage are used to remember your session state, language preference, and recently accessed account sections — you can manage these through your browser settings. Where access or eligibility is discussed, availability depends on local law and is
-
4
available only where local law permits.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.