How We Handle Your Information
We process personal data only where local law permits and only for the purposes you agreed to when you opened your account. The information we collect includes your registered mobile number, account wallet balance, deposit and withdrawal records tied to Touch 'n Go eWallet, Boost and
-
1
GrabPay transactions, and session timestamps that help us detect unusual activity. We do not sell, rent, or share your data with third parties for marketing purposes. Payment processors receive only the transaction amount and your wallet identifier; they do not receive your full account history. Session
-
2
cookies help you stay logged in across device switches and expire after fourteen days of inactivity. We store transaction records for the period required by local financial record-keeping standards, after which they are deleted unless you request earlier removal. Account verification documents are encrypted at rest
-
3
and accessible only to our compliance team. If you close your account, we retain only the minimum data required to meet legal obligations — typically transaction summaries and timestamps — and delete everything else within ninety days. You can request a copy of the data we
-
4
hold, ask us to correct an error, or request deletion by contacting the support channels listed below. Where local law requires explicit consent for certain processing activities, we will ask for that consent separately and give you the option to withdraw it at any time.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.