What This Privacy Policy Covers and Why It Matters
When you open an account with us, we collect the information needed to verify your identity and process your payments — your name, contact details, and transaction records tied to payment methods like Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX. We also collect device
-
1
and session data when you access your account from a mobile browser or saved session, so returning-user flow works correctly across devices. This data is used strictly for account management, fraud prevention and service improvement — never for marketing to third parties. We retain your data
-
2
only as long as your account is active or as required under applicable local law. If you close your account, you can request that non-legally-required records be removed. Access to your stored data is restricted to authorised personnel and is protected by industry-standard encryption at rest
-
3
and in transit. Where local law applies conditions on data handling in Malaysia, we follow those conditions. Any payment-rail data — such as your linked GrabPay or Maybank2u reference — is held only in tokenised form and is never stored as a raw credential. This policy
-
4
applies to the mag4d website at mag4d and any mobile browser session tied to your account.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.