What We Collect and Why It Matters
When you open an account, we collect the information you provide directly — your name, contact details, and the e-wallet or banking method you connect, whether that is Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX. We also log technical data your device sends automatically:
-
1
IP address, browser type, and session timestamps. This is standard practice across platforms operating in Malaysia and helps us keep your account secure and functional. We do not collect more than we need. Payment data passed through local rails like Maybank2u or CIMB Clicks is handled
-
2
by those providers under their own security frameworks — we see confirmation of a transaction, not your banking credentials. Data collected during account verification is retained only as long as required by applicable rules in the jurisdiction you access us from. Where local law governs data
-
3
retention or deletion timelines, those rules apply. You remain in control: you may request a copy of the data we hold on your account, ask us to correct inaccuracies, or submit a deletion request through our support channel. Access to certain services depends on your local
-
4
law, and data handling follows the same condition.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.