What We Collect and Why It Matters
We collect the information you provide when registering your account — your name, contact details, and the payment method you choose to fund your account, whether that is Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX. Transaction records are kept to verify deposits and withdrawals
-
1
and to meet our internal audit requirements. When you access sh365 from your mobile device, we may collect device identifiers and session data to keep your account secure and to detect unusual access patterns. We also log IP addresses for security purposes. We do not sell
-
2
or rent your personal information to marketing companies or unrelated third parties. Data shared with payment processors — for example, when your Touch 'n Go eWallet or Boost transaction is routed — is limited to what those processors need to complete the transfer. All data we
-
3
hold is kept for as long as your account is active and for a reasonable period after closure, as required by our internal retention schedule. Access to your data is restricted to authorised staff only. Where local law applies, your rights over your data are governed
-
4
by the laws of Malaysia, and this policy is available where those laws permit.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.