Data We Collect and Why We Use It
We collect the information you give us when you register — name, email address, phone number and date of birth — along with transaction records generated when you deposit or withdraw via Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX. We also capture device and
-
1
browser session data automatically so your account stays consistent whether you switch between mobile and desktop mid-session. That session data helps us detect unusual login patterns and flag anything that looks out of place on your account before it becomes a problem. Payment data is handled
-
2
only to the extent needed to process, confirm and record each transaction — we do not store your full e-wallet credentials on our servers. Retention periods follow what is required under applicable law and are reviewed periodically. We do not sell your personal information to third
-
3
parties, and we do not share it with advertising networks. Any data sharing with service providers — for example, identity verification partners or payment processors — is governed by data-processing agreements that bind those partners to the same handling standards we apply internally. Access to your
-
4
data within our team is role-restricted; only staff with a clear operational need can view account-level records. Where local law applies, you have the right to request a copy of the data we hold on you or ask us to correct any inaccuracies.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.