Our Data Collection and Use Policy
When you register an account, we collect your name, email address, date of birth, and contact number to verify your identity and process your transactions. When you fund your account through Touch 'n Go eWallet, Boost, or GrabPay, we record transaction references — not your wallet
-
1
credentials or PIN — so our payments team can match deposits to your account accurately. We also collect device identifiers, browser type, and IP address to protect your account from unauthorised access and to serve the lobby correctly on your phone or desktop. Session data such
-
2
as pages visited and time on site is gathered via cookies and analytics tools to improve how the lobby loads and how our support team responds to account queries. We do not sell your personal data to third parties. Data shared with payment processors is limited
-
3
to what those processors require to complete your transaction under their own privacy frameworks. Where local regulations in Malaysia require us to retain transaction records, we comply with those retention periods and no longer. You may request a copy of the data we hold on you,
-
4
or ask us to correct inaccurate details, by contacting our support team directly.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.