Data We Hold and Why We Hold It
When you register, we collect your name, email address, contact number and, where account verification requires it, identification documents. Every time you make a deposit or withdrawal — whether via Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX — we log the transaction reference, amount
-
1
in RM, and the wallet or bank channel used. This is necessary to reconcile your account balance and investigate any dispute you raise. We also collect device identifiers and session data when you access tony99 from your phone or browser. That information helps us detect unusual
-
2
login attempts and keep your account from being accessed without your knowledge. We do not sell your personal data to third parties. Payment processors who handle your Touch 'n Go eWallet or Boost transactions receive only the data they need to complete the transfer — nothing
-
3
more. Marketing communications, if you have opted in, are sent through our own channels; we do not share your contact details with external advertisers. Data is retained for as long as your account remains active and for a further period as required by the applicable financial
-
4
record-keeping obligations in force where local law permits. You may request deletion of non-essential data at any time by contacting our support team directly.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.