What We Collect and Why We Need It
When you create an account with us, we collect your name, email address, contact number, and the account credentials you set. During a deposit or withdrawal — whether you use Touch 'n Go eWallet, Boost, or GrabPay — we log transaction references, amounts in RM, and
-
1
timestamps. We do not store your full e-wallet PIN or password; those stay on your wallet provider's side. We also collect device identifiers and session data when you access the lobby through a mobile browser, which helps us detect unauthorised login attempts. Log data — the
-
2
pages you navigate, the time you spend on each section — is retained for a limited period to resolve disputes and improve account security. If you are in Subang Jaya or anywhere else in Malaysia, the same data practices apply. Access to our services is subject
-
3
to local law, and we process your data only in regions where we are permitted to operate. Any third-party payment processors we work with, such as those handling DuitNow and FPX transfers, receive only the transaction data they need to complete your request — nothing more.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.