Personal Data We Hold and Why
We collect the information you give us during account registration — your name, email address, contact number and payment details linked to your chosen method, whether that is Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX. When you deposit or request a withdrawal, our system
-
1
records the transaction reference, amount in RM and the payment channel used, so we can verify your account and resolve any query quickly. We also collect device data — browser type, IP address and session timestamps — to detect unusual access patterns and keep your account
-
2
secure. We do not store your full e-wallet PIN or your Maybank2u or CIMB Clicks login credentials; those stay entirely with your bank or e-wallet provider. Data we hold is kept only as long as is reasonably necessary for account management and compliance with applicable local
-
3
law. Where local law in Malaysia requires us to retain certain transaction records, we follow that requirement. You can ask us at any time what data we hold on your account, and we will respond within a reasonable period. Access to your stored data is restricted
-
4
to staff who need it to operate and support the platform.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.