What We Collect and Why We Collect It
When you register, we collect your name, email address, phone number and date of birth to verify your identity and keep your account secure. When you make a deposit through Touch 'n Go eWallet, Boost or GrabPay, we record the transaction reference and amount — we
-
1
do not store your full wallet credentials or PIN. We also collect device and session data (browser type, IP address, session timestamps) to detect unusual login activity and protect your account from unauthorised access. Usage data — which sections of the lobby you visit, how long
-
2
sessions run — helps us improve the experience for you. We do not sell your personal data to third parties. Data may be shared with payment processors and identity-verification partners strictly to complete the services you request. Where local law requires us to retain records, we
-
3
hold them for the period the law specifies; after that, data is deleted or anonymised. Access to the platform and its services depends on local law and is available where local law permits. If you are in Kuching, Kota Kinabalu or anywhere else in Malaysia, the
-
4
same data practices apply to your account.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.