Explore how local law applies here
We apply the same legal structure to every account, then adjust where Malaysian law or other local rules require a different step. That covers how we collect sign-in details, device signals, and transaction records, how long we keep them, and when we need to confirm your
-
1
identity before release or correction. Payment records that pass through Touch 'n Go, GrabPay, Boost dan FPX are kept as part of the account trail, not for display, and only for verification, dispute handling, and statutory retention. If a rule changes, we update the relevant notice
-
2
and use the current version for new actions from that point forward. Any access request, correction request, or objection is handled only where local law permits and after we have enough detail to match it to your account.
Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.