Explore How We Handle Data
We collect only the details needed to run your account, check your requests, and keep records for security, fraud checks and dispute handling. That can include your name, contact details, login history, device signals, cookie data and transaction references from Touch 'n Go, GrabPay, Boost dan
-
1
FPX. We do not treat every record the same: some items are kept because the law requires it, while others are removed or masked once they are no longer needed. If a rule in Malaysia or another applicable jurisdiction asks for a different retention period, that
-
2
rule takes priority. Where local law permits, you can ask us to correct, restrict or delete data through support, and we will verify the request before we act on it.
Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.