I am not sure for how long, but they do keep the log. Even dynamic IP (they have date/time tie to your account)

Why not use wifi at mamak and seat at corner with your back facing the wall? Just remember to turn off your phone because they do keep location log too (seriously).

encrypted and ISP only knew the packet goes/come to/from first TOR node. If they request your IP from let say google or facebook, they can only see the last TOR node.

I heard many nodes are run but gov agencies as honey trap. not our gov, mostly US, europe, china. etc. But then again, those agency don't give a damn if you insult our politician/royalty.