What This Privacy Policy Covers
When you open an account or make a deposit through Touch 'n Go eWallet, Boost, or GrabPay, we collect the information needed to process that transaction and keep your account secure. This includes your registered name, contact details, device identifiers, and payment reference numbers — nothing
-
1
beyond what the transaction requires. We do not store your full e-wallet credentials; payment authentication happens inside your own wallet app and the reference is passed back to us as a confirmation token. Your data is held on servers with SSL encryption and access is restricted
-
2
to staff who need it to operate your account. We retain transaction records for as long as required under applicable Malaysian financial regulations, after which they are deleted or anonymised. We do not sell, rent, or share your personal data with third-party marketers. Data shared with
-
3
payment processors like DuitNow or FPX is governed by their own privacy terms, and we recommend reviewing those separately. If you access bossku96a from George Town or anywhere else in Malaysia, the same data handling rules apply across the board.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.