Data We Hold and How We Use It
We collect the information you provide when registering — your name, email address, contact number and date of birth — alongside the details generated through your activity on the platform. When you deposit via Touch 'n Go eWallet, Boost, or GrabPay, we record the transaction reference,
-
1
amount in ringgit (RM) and timestamp; we do not store your full e-wallet credentials. Your browsing behaviour within the lobby, including which sections you visit and how long you spend there, is captured through session analytics to help us improve load times and navigation. Device identifiers
-
2
and IP addresses are logged for account security — specifically to flag logins that look out of place compared to your usual pattern. We may also hold correspondence you send through live chat or email support. All data sits on servers with SSL encryption in transit
-
3
and at rest. We retain your account data for as long as your account remains active; once you request closure, we hold the minimum required for audit compliance under applicable law, then delete it. You may request a copy of your data, ask us to correct
-
4
inaccuracies, or submit a deletion request at any time through the contact paths listed below. Access to your data and account services depends on local law and is available only where permitted.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.