How We Handle Your Data
We only collect the data needed to run your account, process requests and meet legal duties. That can include sign-in details, contact details, device signals, cookie data and records linked to Touch 'n Go, GrabPay, Boost dan FPX when those rails are used. We use that
-
1
data to verify requests, keep records readable, prevent misuse and answer disputes. If a service partner helps host, send messages or verify data, it receives only the fields needed for that task. We do not sell your personal data. We keep records for as long as
-
2
needed for account support, fraud checks and legal retention periods, then remove or de-identify them where local law allows. Access, correction or deletion requests depend on local law and are available where local law permits.
Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.