Data We Hold and Why We Hold It
When you register, we collect your name, email address, contact number and the account credentials you set. When you transact — whether that's a Touch 'n Go eWallet top-up, a Boost transfer, or a GrabPay deposit — we log the transaction reference, amount in RM, and
-
1
timestamp. We do not store your full wallet PIN or banking password at any point. Device data such as your IP address, browser type and session duration is captured automatically to help us detect unusual access patterns and keep your account safe. Players in Melaka and
-
2
across Malaysia are covered by the same data practices. We share your information only where required by applicable law or to process your payment through the relevant payment rail. We do not sell personal data to third parties for marketing. Your data is retained for as
-
3
long as your account remains active and for the period required by applicable law after closure. Where local law governs data access rights, those rights apply in full — including the right to request a copy of what we hold or to ask us to delete
-
4
it.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.