What We Collect and Why We Collect It
We gather personal data in two main ways: what you give us directly when you register or verify your account, and what we observe when you use the platform — device type, session timestamps and payment method references such as your Touch 'n Go eWallet or
-
1
GrabPay transaction IDs. We use this data to verify your identity, process withdrawals, resolve disputes and keep your account safe from unauthorised access. We do not sell your data to third parties. Where we share it — for example, with a payment processor handling your Boost
-
2
or DuitNow transfer — that processor is bound by a data-handling agreement. We retain your account data for as long as your account is active and for a reasonable period after closure, in line with applicable Malaysian financial and anti-fraud requirements. When access or eligibility is
-
3
discussed, availability depends on local law and is available where local law permits. If you want to know exactly what data we hold about you, you can submit a subject-access request through our live chat or by email — both channels are listed in the section
-
4
below.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.