What Information We Collect and Why
When you register an account, we collect your name, email address, date of birth and contact number — the minimum needed to verify who you are and keep your account secure. When you fund your account through Touch 'n Go eWallet, Boost or GrabPay, our payment
-
1
processor records the transaction reference and amount; we do not store your full wallet credentials or PIN on our servers. If you use FPX or DuitNow, the bank reference number is logged against your account for reconciliation. We also collect device and session data — your
-
2
IP address, browser type and pages visited — so we can detect unusual login attempts and keep your account from being accessed without your knowledge. This session data is held separately from your personal profile and is not used for marketing without your consent. Where local
-
3
law requires us to verify your identity before processing a withdrawal, we may ask for a copy of your MyKad or equivalent document; that document is encrypted at rest and accessible only to our verification team. You can request a summary of everything we hold about
-
4
you at any time by reaching out to our support channel.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.