Data Collection and Storage Practices
When you open an account, we collect your username, email, phone number and password. Every time you deposit through Touch 'n Go eWallet, Boost or GrabPay, we record the transaction ID, amount and timestamp so we can match your chip balance and resolve any query you
-
1
raise. Device fingerprints — browser type, IP address, operating system — are logged to detect unusual login patterns and prevent unauthorised access. We do not share this data with third parties for marketing purposes. Retention follows local law where your account is accessible; if you ask
-
2
us to close your account, transaction history remains in our archive for compliance purposes, but your login credentials are deleted within thirty days. Cookies track session state so you stay logged in across pages; you can refuse cookies in your browser settings, though some features may
-
3
stop working. Our servers encrypt data in transit and at rest using current industry standards. Access or eligibility depends on local law and is available where local law permits.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.