What Our Privacy Policy Actually Covers
Our privacy approach sits close to how your account actually works: the information we hold is tied directly to opening an account, funding your account wallet, and clearing a withdrawal. When you register, we ask for details that let us confirm it's really you — name,
-
1
contact number, and the payment account you use to top up, whether that's Touch 'n Go eWallet, Boost, or GrabPay. We also keep a record of each DuitNow or FPX transfer linked to your account, because that trail is what lets our account verification team match
-
2
a deposit or a payout to the right account without delay. We don't sell this information to outside parties for marketing. Where we share data — for example, with a payment processor to confirm a Touch 'n Go eWallet transaction cleared — it's limited to what's
-
3
needed to complete that one step. How long we can act on a request, what data we're required to hold, and what you're entitled to see all depend on local law, and our policy applies only where local law permits account access. If you're logging in
-
4
from Kota Kinabalu or anywhere else in Malaysia, the same account-security checks and the same data-handling rules apply. We review this policy from time to time as our payment partners or account tools change, and the version live on this page is the one that applies
-
5
to your account.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.