What We Collect and Why It Matters
When you open an account with us, we collect the details you provide — full name, email address, mobile number and, where verification requires it, a copy of your identification document. Every time you add funds via Touch 'n Go eWallet, Boost or GrabPay, we record
-
1
the transaction reference, amount and timestamp against your account. We do not store your e-wallet PIN or full card number at any point. On top of account data, we also capture device identifiers, browser type and session logs when you access the platform. This helps us
-
2
detect unusual login patterns and keep your account secure — for example, if a login attempt comes from a device you have never used before, we flag it for verification. Your data is processed to fulfil your account contract with us, to carry out payment transactions,
-
3
and where required by applicable law in the regions where we operate. We keep data for as long as your account is active and for a period after closure as required by the legal framework that applies to your jurisdiction. You have the right to request
-
4
a copy of the data we hold, correct inaccurate entries, or ask us to delete data where that right applies under local law.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.