Where This Policy Applies
This policy covers the personal data we collect when you create an account, sign in, send a support request or use Touch 'n Go, GrabPay, Boost dan FPX for account funding and payment checks. That can include your name, contact details, device and browser data, cookie
-
1
signals, transaction status, and the messages you send us, but only for the purposes of running your account, confirming activity and handling disputes. We also keep logs for security monitoring, abuse checks and tax or audit duties, then delete or anonymise them when the holding period
-
2
ends. Where we work with processors, they receive only the fields needed to do their job, and they must stay within the limits we set. If you access from Ipoh or elsewhere in Malaysia, the same approach applies where local law permits, and any extra right
-
3
you ask for will be checked against the rules that apply to your request. We do not use the data for unrelated purposes, and we keep the scope narrow so your record stays tied to the reason it was collected.
Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.