What This Policy Covers in Malaysia
We only keep the data needed to run your account, confirm the choices you make, and answer privacy requests. That can include name or nickname, contact details, login records, device signals, cookie IDs, and transaction references tied to Touch 'n Go, GrabPay, Boost dan FPX when
-
1
they appear in your account history. We do not keep more than we need for the purpose shown at the time, and we review older records so they can be removed or anonymised when the retention period ends. If a law in Malaysia requires a different
-
2
handling rule, we follow that rule for the request in question and tell you what we can change. We also limit staff access to the teams that need it for support, checks or legal handling.
Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.