What We Collect and Why We Collect It
We collect the information you give us when you register — your name, contact details and login credentials — alongside transaction records generated each time you deposit or withdraw via Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX. Device identifiers and session data are captured
-
1
automatically to detect unusual activity on your account. We do not collect more than is necessary for those purposes. Payment data tied to your wallet transactions is used solely to process and reconcile those transactions; it is not shared with advertisers or unrelated third parties. Where
-
2
we engage service partners — for example, payment processors that support your DuitNow or Maybank2u transfers — those partners receive only the minimum data required to complete the task, and they are bound by confidentiality terms. Your account data is stored on secured infrastructure. Access is
-
3
restricted to authorised personnel only. If you are in Kuantan or anywhere else in Malaysia, the same data practices apply uniformly across your account. We keep your data for as long as your account remains active and for the period required by applicable law after closure.
-
4
Eligibility to hold an account depends on local law; data collected reflects only the activity of accounts that are permitted where local law applies.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.