What Data We Collect and Why
When you open an account, we collect the details you submit — name, email address, contact number and date of birth — to verify your identity and keep your account secure. Payment data connected to Touch 'n Go eWallet, Boost and GrabPay transactions is processed solely
-
1
to complete your deposit or withdrawal request; we do not store full wallet credentials on our servers. We also collect device and session data automatically — IP address, browser type, pages visited — to detect unusual activity and keep the platform stable. If you reach out
-
2
via live chat or email, those conversation records are kept to resolve follow-up queries. Your data is processed only for the purposes stated here: account management, payment processing, fraud prevention and customer support. We do not sell your personal data to third-party marketers. Data shared with
-
3
payment processors, including those handling DuitNow and FPX transfers, is limited to what each processor needs to complete the transaction. Retention periods depend on the nature of the data — account records are held while your account is active and for a period thereafter in line
-
4
with applicable law. Where you access dolphinreef depends on local law, and your data rights are available where local law permits.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.