What This Privacy Policy Covers
This privacy policy sets out how city345 handles the data tied to your account — your registration details, login activity and the payment data that passes through Touch 'n Go eWallet, Boost or GrabPay when you fund your wallet. We collect only what's needed to open
-
1
an account, confirm a deposit, or check a withdrawal request: your name, contact number, and the reference number your e-wallet app generates when you send funds. We don't ask for your banking PIN or your Touch 'n Go eWallet password, and we never store full card
-
2
numbers where FPX or DuitNow transfers are used instead. Where access to city345 depends on your local jurisdiction, this policy applies only in regions where local law permits online account registration — if you're unsure whether that includes where you live, check with your own legal
-
3
adviser before opening an account. Session data, such as device type and browser, helps us flag unusual login patterns and protect your account from unauthorized access. We keep transaction records for as long as needed to resolve a withdrawal dispute or answer a support query, then
-
4
the data is retired from active systems. This policy sits alongside our terms of use and doesn't replace them — read both before you submit your first deposit. Any update to how we handle your data will be reflected here, with the revision date shown at
-
5
the top of the page, so returning account holders can see what's changed since their last visit.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.