Reference

How Your Account Data Is Handled

One page tells you what we collect, why we collect it and how long we keep it, written the way we would explain it on live chat.

Data you can ask aboutCookie controls on your devicePayment references stay tied to youOne place to send a request
galaxy178 How Your Account Data Is Handled
COOKIES AND SECURITY

Cookies, Login Security and Retention

Data handling here is deliberately plain. We keep cookies short-lived, tie wallet records to the single account that created them, and let you switch off the optional cookies that sit outside a sign-in session. Security leans on your registered phone number: one-time passcodes, a device check on new logins, and a manual check before payout details change. Retention follows the same rule, holding what your account needs and what local rules require, then clearing the rest. Requests for a copy, a correction or a deletion go to the support team you already use, and we answer from the address on file.

Cookie choices

Session cookies keep your sign-in alive while you move around the site. Preference and analytics cookies are optional, and you can block them in your browser without losing access to your account or wallet pages.

Account security

A one-time passcode goes to your registered number before any wallet change, and a new device has to clear a check before it reaches your profile or your payout details.

Data retention

We hold account, wallet and verification records while your account is open and while local rules require them, then clear whatever is no longer needed for either purpose.

Requesting changes

Ask support for a copy, a correction or a deletion from the email on your account, and we will confirm in writing what we can action for someone in your region.

ASK US DIRECTLY

Reach the Team About Your Data

A question about your own records should never sit unanswered. Reach us on live chat inside the app or on the site, reply to any email we have already sent you, or use the privacy desk address shown on your account page. Tell us which part of the policy you are asking about and which account you mean, and we can pull the right records before we answer. Chat and email land with the same local support team, so you are not bounced between departments while you wait.

Live chat Open the app, tap Help and start a chat with a real person. Give us the email on your account and what you want changed, then ask for the transcript to keep for your own records.
Privacy desk email Write to us from the email address registered on your account, since that is how we confirm the account is really yours. Mark the subject as a data request so it reaches the right team first time.
Your account page Sign in and open your profile to see the contact details and login devices attached to your account. Corrections you can make yourself are editable there; anything else we handle for you by chat or email.

Privacy Questions We Get Often

These are the questions that land in our inbox most weeks, answered in plain words. If yours is not here, drop it into live chat and a person will reply — you never need a reason to ask about your own records. Whether you bank through Maybank2u, keep a balance in Touch 'n Go eWallet or move money by FPX, the answer works the same way on every account we run.

Your sign-up details, the identity documents used for account verification, wallet references from Touch 'n Go eWallet, Boost, GrabPay or DuitNow transfers, and basic device data logged when you sign in.

Yes. Session cookies are needed to keep you signed in, but preference and analytics cookies can be blocked in your browser settings without breaking your account, your wallet or your table pages.

Email the privacy desk from the address on your account and say you want a copy. We match the request to your account details and reply to that same address once it is ready.

Only what a transfer needs. When you add funds through Touch 'n Go eWallet, Boost or GrabPay, we pass the reference that confirms the payment and nothing else about you.

We stop using it for day-to-day account work, keep only the records local rules require us to hold, and clear everything else once that period ends.

Use live chat in the app or reply to any email from us. Tell us what happened and which account it concerns, and the support team will look into it and reply to you directly.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.