Data We Collect and Why We Use It
When you create an account, we collect your name, contact details, date of birth and the payment method you link — whether that is Touch 'n Go eWallet, Boost or GrabPay. Each time you top up or withdraw, we record the transaction reference and amount so
-
1
we can reconcile your wallet balance and keep your account history accurate. We also collect device identifiers, browser session data and your IP address to detect unusual login activity and maintain session continuity when you switch between mobile and desktop. Game activity — which titles you
-
2
open, how long sessions run — is logged for account management and to meet the reporting obligations that apply where local law requires it. We do not sell your personal data to third-party marketers. Where we share data with payment processors, it is only to complete
-
3
the transaction you initiated, and those processors operate under their own data agreements. Your data is retained for as long as your account remains active and for the period required by applicable local law after closure. Access to your account data is restricted internally on a
-
4
need-to-know basis. Players in Shah Alam and elsewhere in Malaysia have the right to request a copy of what we hold.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.