How We Treat Local Account Data
Our policy is written for Malaysia account activity: registration details, sign-in records, wallet references, cookie IDs, device signals and messages you send to us. We use that data to run your account, protect the wallet, answer privacy requests, meet record-keeping duties and handle access only where
-
1
local law permits. Payment data from Touch 'n Go, GrabPay, Boost dan FPX is treated as transaction context, not as open banking access. We keep records only for a lawful purpose, restrict staff access, and ask service providers to handle data under written terms. Some records
-
2
may need to remain for fraud checks, dispute handling or legal duties before removal is possible.
Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.