How your policy applies
For Malaysian accounts, this notice explains how we collect, use, keep and correct records tied to your profile. If your activity touches Touch 'n Go, GrabPay, Boost or FPX, the related ledger entries and messages are kept only as long as needed for reconciliation, dispute handling
-
1
and audit checks. We may update the wording when local law changes, and the version shown to you is the one that applies in your region. Where local law permits, you can ask us to review, amend or close data tied to your account after any
-
2
required checks. We do not keep material just because it exists; we keep it when there is a clear operational or legal reason, then archive or remove it under the retention schedule. If a request needs identity matching, we will ask for the smallest set of
-
3
details needed to complete the check.
Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.