What This Privacy Policy Covers
We collect only what's needed to run your account safely: your registration details, device and login activity, and the transaction records created each time you move money through Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX online banking. When you fund your wallet or request
-
1
a withdrawal, our payment partners pass through a reference number and the amount — we don't ask for your banking app password, and you should never share it with anyone claiming to work for us. Account verification, used mainly to confirm a withdrawal matches the name
-
2
on your e-wallet or bank account, may require a photo ID or a screenshot of your Maybank2u or CIMB Clicks statement. How long we keep this data, who can access it, and what rights you have over it depends on local law and is available where
-
3
local law permits — this policy does not override the legal protections that already apply where you live. We don't sell your details to outside marketers, and we limit internal access to the support and verification staff who need it to process your request. If you
-
4
close your account, transaction records tied to payment compliance are kept only as long as required before they're archived or removed. Any change to how we collect or use your data will be reflected in an updated version of this page, dated at the point of
-
5
publication, so you can check back before your next deposit.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.