Policy Rules for Malaysia Account Records
We collect only the data needed to run your account, secure login sessions, process wallet activity, answer support chats, and meet legal duties that apply to our Malaysia operation. That can include your name, contact details, device identifiers, IP address, cookie signals, account activity, payment reference
-
1
codes, and messages you send us. We use those records to confirm account ownership, reconcile Touch 'n Go, GrabPay, Boost dan FPX transactions, detect misuse, maintain audit logs, and respond to data requests. We do not sell your personal data. Access to the lobby, account rewards,
-
2
or account functions depends on local law and is available where local law permits. Where a third-party processor helps with hosting, analytics, fraud checks, or payment verification, we share only the fields needed for that task and require restricted handling.
Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.