Data We Collect and Why We Collect It
When you open an account, we collect the information needed to verify your identity and process your transactions — your name, email address, contact number, and the payment method you choose (Touch 'n Go eWallet, Boost, or GrabPay). This lets us match deposits to your account
-
1
wallet and confirm withdrawals to the right destination. We also log device data — browser type, operating system, and session timestamps — to maintain account security and detect unusual access patterns. If you contact our support team, the content of that conversation is stored so we
-
2
can follow up accurately. We do not store full wallet credentials; when you transact via Boost or GrabPay, the sensitive payment exchange happens on those platforms' own infrastructure. Usage data — which sections of the lobby you visit, how long sessions last — is collected in
-
3
aggregate to improve the mobile experience. None of this information is sold to advertisers or third parties outside what is required by applicable Malaysian law. Access to your data within our team is role-restricted: only staff whose work directly requires it can view identifiable account records.
-
4
Where local law requires us to share data with regulatory bodies, we comply; we will notify you where that is legally permissible. This policy applies to your use of kukup where local law permits access.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.