What Personal Data We Collect and Why
We collect information you give us directly — your name, contact details and account credentials when you register — and data generated by how you use the platform, such as login timestamps, session activity and transaction records tied to your chosen payment method. When you fund
-
1
your account via Touch 'n Go eWallet, Boost or GrabPay, we receive a transaction reference and amount; we do not store your full e-wallet credentials or PIN. For DuitNow or FPX transfers, we record the bank reference number for reconciliation only. We also collect device identifiers
-
2
and browser session data to detect unusual login patterns and keep your account secure. This data is never sold to third parties. We may share the minimum necessary details with payment processors and fraud-screening partners strictly to complete your transactions. Your data is processed in accordance
-
3
with applicable Malaysian law, and access to the platform is available where local law permits. If you are in Kuching or Kota Kinabalu, the same data handling rules apply across all regions we serve.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.