Data We Collect and Why We Use It
We collect information in three main ways. First, account registration data — your name, email address, contact number and date of birth — used to verify your identity and keep your account active. Second, payment transaction data generated when you deposit or withdraw using Touch 'n
-
1
Go eWallet, Boost, GrabPay, DuitNow or FPX; this includes transaction reference numbers and amounts, but we never store your full e-wallet credentials on our servers. Third, device and session data — browser type, IP address, and login timestamps — used to detect unusual access patterns and
-
2
protect your account from unauthorised entry. We do not collect payment card numbers beyond what your chosen payment provider already encrypts on their end. Data is retained for as long as your account remains active and for the period required by applicable law after closure. If
-
3
you are in Melaka or anywhere else in Malaysia, the same data practices apply uniformly across your account. We may update this policy when our practices change; we will notify you via the email address on your account before any material change takes effect.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.