Policy Scope and Local Rules
We collect only the details needed to open and protect your account, process deposits and withdrawals, answer support requests, and meet record-keeping duties. That can include your name or nickname, contact details, login history, device data, cookie signals, and transaction trails from Touch 'n Go, GrabPay,
-
1
Boost dan FPX when you choose those rails. If a local rule changes what we may hold or share, we follow that rule first and narrow the processing to what is allowed. We keep some records longer when we need them for dispute handling, fraud checks,
-
2
audit trails, or tax duties, then remove or anonymise them when the retention period ends. When you submit a privacy request, we may ask for a match against the account email, phone, or recent login details before we act.
Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.