What We Collect and Why We Keep It
We collect the information you provide when registering — your name, contact details, and account credentials — alongside transaction records tied to payment activity through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX. Device data such as your browser type and IP address is logged
-
1
automatically each session to support fraud prevention and account integrity checks. We do not collect more than is necessary, and we do not retain data beyond the period required to run your account or meet applicable legal obligations. Where identity verification is required under local law,
-
2
we hold the relevant documents only for as long as that obligation exists. Your payment history — including wallet transfers and FPX transactions — is stored in encrypted form and is not shared with marketing third parties. If you are in George Town or anywhere else
-
3
in Malaysia, these data practices apply in full where winmy15 services are available under local law. Access to your account data within our systems is restricted to staff with a clear operational need, and all internal access is logged and audited. Any data shared with payment
-
4
processors such as Boost or GrabPay is governed by their own privacy terms alongside ours — we encourage you to read those independently.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.