Youtrip Biometric Verification

I haven’t used Youtrip in a while but recently logged in as I’m going on a trip soon. I realize they have implemented biometric verification requiring users to send their face scans to them (not Apple FaceID).

Other than SingPass and government related services, I’ve never had apps requesting for such private information. Is it safe to provide biometric information to private companies and is this required by law?

I’m concerned what happens to the data when leaks happen given such data is essentially like fingerprint and can’t be changed. How can we protect ourselves as consumers?