What We Collect and Why It Matters
We collect the information you give us when you register — your name, email address, contact number and account credentials. When you fund your account using Touch 'n Go eWallet, Boost or GrabPay, we record the transaction reference, amount in RM and timestamp. We do not
-
1
store your full wallet PIN or banking password at any point; that credential lives only inside your wallet app. Beyond account data, we collect device identifiers and session logs so we can detect unusual login activity and protect your account from unauthorised access. Cookies on our
-
2
site track which pages you visit and how long your session runs — this helps us keep the lobby responsive on mobile. We also collect your IP address and general region to confirm that access is within jurisdictions where local law permits our service. All data
-
3
is processed for one or more of these purposes: account management, payment verification, fraud prevention and improving how the platform functions. We do not sell your personal data to third parties, and we do not share it with advertisers. Where we engage third-party processors — for
-
4
example, payment gateway partners who route your Boost or DuitNow transfers — those processors are bound by data-handling agreements consistent with this policy.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.