Reference

What governs your account and how we handle it

Before you open an account or make a deposit via Touch 'n Go eWallet, Boost, or GrabPay, it helps to know exactly what you agree to and what rights you hold.

Account termsData handlingCookie policyYour access rightsContact & requests
mrace8 What governs your account and how we handle it
HOW WE HANDLE THIS

Data, cookies, security and your right to request changes

Your account data is not sold to third parties. We collect what is needed to run the account, process wallet transactions — including those cleared through FPX or Maybank2u — and meet anti-fraud obligations. Cookies on this site track session state and browsing patterns for functional and analytical purposes; you can adjust cookie preferences through the settings panel available in your account dashboard. Security on the account level uses encrypted connections for every login and transaction step, so your PIN or OTP sent during a Touch 'n Go eWallet confirmation stays protected in transit.

Data Retention

We keep account and transaction records for the period required by the legal framework applicable to your access region. You may request a summary of what we hold at any time.

Cookie Controls

Functional cookies keep your session active; analytical cookies help us see which lobby sections you use most. Turn off non-essential cookies in your account settings without losing core functions.

Account Security

Every login triggers an OTP step. If you suspect unauthorised access — for example after a GrabPay or Boost transaction you did not initiate — contact support immediately to freeze account activity.

Right to Request

You may request access to, correction of, or deletion of your personal data by emailing us with your account ID. We aim to respond within a reasonable period, subject to verification of identity.

LEGAL CONTACT PATHS

How to reach us on legal or account matters

If you need to raise a legal concern, request a copy of your account data, or flag a terms dispute, use the channels below. Our support team handles account-level queries directly; legal data requests require a written submission so we can verify your identity before processing any change or disclosure.

Live Chat Raise a terms question or account access concern directly via live chat. Available from the account page — no email thread needed for straightforward queries.
Email — Legal Requests Submit data access, deletion or correction requests by email. Include your registered account ID so we can verify ownership before acting on the request.
Account Help Centre The Help Centre covers account suspension appeals, identity verification steps, and the process for disputing a flagged transaction under our fraud review policy.

Answers to common legal questions about your account

These questions come up most often when it comes to terms, data rights, and account eligibility. If your question is not here, reach us via live chat or email with your account ID — we will give you a direct answer rather than a template reply.

Access depends on local law and is available where local law permits. You are responsible for confirming your own eligibility before opening an account or making any deposit.

Yes. Email us with your registered account ID and we will compile the data we hold on your profile. Identity verification is required before we release any account data to protect against unauthorised requests.

Transaction records — including DuitNow transfers and Boost wallet top-ups — are retained for the period required by applicable legal obligations. Closing your account does not automatically erase stored transaction logs.

We post the revised version on this page. Continued use of your account after an update constitutes acceptance. We recommend checking this page periodically, especially before making a large deposit.

Contact support immediately via live chat — available from your account page. Provide the transaction reference so we can flag the entry and initiate a fraud review on that account activity.

You can submit a deletion request by email with your account ID. We will process it subject to any legal retention requirements that override deletion — such as anti-fraud or regulatory record-keeping obligations.
Reference

Legal

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.