Last Updated: 1 January 2026

Privacy Policy top1 –
Malaysia Member Data Protection

Top1 takes your data privacy with the utmost seriousness. This document provides a transparent explanation of how we collect, use, store, and protect your personal information as a member of the top1 platform in Malaysia.

Top1's Six Pillars of Data Protection

Our commitment to your privacy is not just a document — it is our daily practice

256-bit SSL Encryption

All data transmitted between your device and top1's servers is protected with 256-bit SSL encryption — the same technology used by Malaysia's major banks, including Maybank and CIMB. No third party can intercept or read your information in transit.

Strict Access Controls

Access to top1 member personal data is restricted to staff who require it to perform their duties only. All access is logged and monitored. No staff member may access member data without valid authorisation and justification.

Malaysia PDPA Compliance

Top1 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. Your rights as a data subject — including the right to access, correction, and erasure — are respected and upheld by top1.

No Sale of Data to Third Parties

Top1 has never and will never sell, rent, or share members' personal data with third parties for marketing purposes without your explicit consent. Your data belongs to you — it is not a business commodity for top1.

Opt-Out Marketing

You have full control over the marketing communications you receive from top1. Unsubscribe from promotional emails or SMS notifications at any time through your account settings or by contacting our support team.

Secure Data Storage

Top1 member data is stored on servers protected by data-at-rest encryption, strict physical access controls, and redundant backup systems. These safeguards ensure your data remains safe even in the event of physical or cyber disruptions.

Welcome to the top1 Privacy Policy page. At top1, we understand that your personal data is valuable and sensitive. This document is written to give you a clear and honest picture of how top1 handles your information — not in hard-to-follow legal language, but in plain terms that every Malaysian member can easily read and understand. By using the top1 platform, you agree to the processing of your personal data as described in this policy. If anything is unclear, the top1 support team is ready to help you through live chat or email.

1. Introduction & Scope of This Privacy Policy

This Privacy Policy is issued by top1 ("we," "the platform," or "top1") and applies to all personal information we collect from you when you use the top1-bangla.com website, the top1 mobile app, or any related services we provide.

This policy explains what types of data we collect, why we need it, how we use it, who we may share it with under limited and controlled circumstances, how long we retain it, and what rights you have over that data. top1 is committed to ensuring that all data processing is carried out responsibly and in accordance with applicable laws, including Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy does not apply to third-party websites or services that may be linked to or integrated within the top1 platform. We encourage you to read the privacy policies of those third-party services separately before using them.

Important: This Privacy Policy is to be read together with top1's Terms & Conditions. Both documents together form the complete agreement between you and top1 regarding your use of the platform and the management of your personal data.
2. Personal Data We Collect

Top1 only collects personal data that is genuinely necessary to provide our services to you. We do not collect excessive or irrelevant data. The following are the categories of data we collect:

Registration & Identity Data: When you register a top1 account, we collect your full name, date of birth, identification card (IC) number, email address, Malaysian mobile number, and residential address. This information is required to verify your identity, confirm that you meet the minimum age requirement, and for legal compliance purposes (KYC).

Financial Data: To process deposits and withdrawals, top1 retains your financial transaction records, including the payment method used (Touch 'n Go, GrabPay, DuitNow, FPX, and others), deposit and withdrawal amounts, and transaction history. top1 does not store your full credit card numbers or bank account details — this sensitive information is processed directly by licensed payment providers.

Platform Activity Data: We collect your betting and gaming records, login and logout times, VIP programme achievement history, your communications with the top1 customer support team, and any preference settings you have saved in your account.

Technical Data: When you use the top1 platform, our systems automatically record your IP address, browser type and version, device type, operating system, screen resolution, and other usage data. This data is used for security purposes, fraud detection, and improving the user experience.

  • Approximate location data (state/city) based on IP address for regional verification
  • Cookies and session data for a better user experience
  • Communication records via live chat, email, or WhatsApp with top1 support
  • Feedback and survey responses you provide voluntarily
3. How We Use Your Personal Data

Top1 uses your personal data only for legitimate and necessary purposes. We do not use your data for purposes not stated in this policy without notifying you in advance. The following are the primary purposes for which your data is used:

Account Management & Services: Your data is used to create and manage your top1 account, verify your identity at login, accurately process deposits and withdrawals, manage your VIP Rewards programme, and provide responsive customer support.

Security & Fraud Prevention: top1 uses technical and transaction data to detect and prevent fraud, money laundering, unauthorised access, and platform abuse. This includes analysing suspicious activity patterns and identifying multiple accounts.

Legal & Regulatory Compliance: Some of your data is retained to fulfil legal obligations, including KYC requirements, reporting transactions to relevant authorities where required by law, and internal audits.

Communications & Marketing: With your consent, top1 uses your email address and phone number to send account-related notifications, promotional offers, and platform updates. You may withdraw this consent at any time in your account settings.

Platform Improvements: Usage data and user feedback help top1 understand the needs of our Malaysian members, identify areas for improvement, and develop new features that are more useful and relevant.

Note: top1 does not make fully automated decisions that significantly affect your rights or interests without an appropriate element of human review, except in cases of clear fraud detection that require immediate action.
4. Legal Basis for Data Processing

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles, top1 processes your personal data on one or more of the following legal bases:

  • Contract Performance: Processing required to provide the services you have requested, including account management and payment processing
  • Legal Obligation: Processing required to meet applicable legal and regulatory obligations, including PDPA and financial compliance requirements
  • Legitimate Interests: Processing for the purposes of platform security, fraud prevention, and service improvement that does not prejudice your rights and interests
  • Consent: Processing for marketing purposes and promotional communications, subject to your right to withdraw consent at any time

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal. Withdrawing marketing consent will not affect your ability to use top1's core services.

5. Sharing Data with Third Parties

Top1 does not sell, rent, or trade members' personal data to any third party for their marketing purposes. However, in the course of operating the platform, top1 needs to share certain data with a limited and strictly controlled set of third-party categories:

Payment Providers: To process deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX, the necessary transaction data is shared with the relevant licensed payment providers. All these providers are subject to their own privacy policies and security standards as regulated by Bank Negara Malaysia.

Game Providers: Live casino and online game providers partnering with top1 may receive the technical data required to deliver games to you. Only the minimum necessary data is shared, and all providers are bound by strict data confidentiality agreements.

Identity Verification Services: For KYC purposes, top1 may use licensed third-party identity verification services to verify the documents you submit. This data is not used for any other purpose.

Authorities: top1 will disclose personal data to government authorities or law enforcement when required by applicable law, court order, or in efforts to prevent financial crime. top1 will notify you of any such disclosure unless prohibited by law.

Our Commitment: Every third party that receives top1 member data is bound by a strict data processing agreement. They may only use the data for the specified purpose and must comply with the security standards set by top1.
6. International Data Transfers

As an online platform operating in Malaysia, top1's servers and technical infrastructure may be located across multiple geographic locations to ensure platform performance and reliability. This means your personal data may be transferred to, and processed in, locations outside Malaysia.

Top1 ensures that all international data transfers are carried out with adequate protections in place. These measures include ensuring that data recipients outside Malaysia are subject to data protection laws of equivalent or greater strength, or are bound by data transfer agreements that establish appropriate safeguards in accordance with Malaysia's PDPA standards.

In all cases of international data transfers, top1 ensures that the confidentiality and security of your data is maintained to the same standard as if it were stored in Malaysia. You have the right to request details about any international data transfers involving your data by contacting our privacy team.

7. Data Retention Period

Top1 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. Once the retention period has ended, data will be securely deleted or anonymised.

  • Active account data: Retained for the duration your account is active and for a reasonable period after account closure for dispute resolution and legal compliance purposes
  • Financial & transaction records: Retained for a minimum of 7 years in accordance with applicable financial legal requirements
  • KYC & identity verification records: Retained for the period specified by the relevant compliance requirements, typically 5–7 years after account closure
  • Support communication logs: Retained for up to 3 years for quality assurance and dispute resolution purposes
  • Technical & log data: Retained between 90 days and 12 months depending on data type
  • Consent-based marketing data: Retained until you withdraw consent or request deletion

Once the relevant retention period has lapsed, top1 will delete your data using secure deletion procedures to ensure it cannot be recovered. In cases where immediate deletion is not possible (for example, because the data is integrated within backup systems), the data will be stored securely and isolated from active processing until it can be fully deleted.

8. top1 Data Security Measures

Top1 invests seriously in cybersecurity infrastructure to protect the personal data of our Malaysian members. Our security approach is multi-layered — no single mechanism is considered sufficient on its own to safeguard your data.

Technical Security: All communications between your browser and the top1 platform are secured with 256-bit SSL encryption (TLS 1.3). Data stored on top1 servers is protected with AES-256 data-at-rest encryption. Access to databases containing member information is restricted through strict role-based access controls (RBAC).

Access Controls: Two-factor authentication (2FA) is available for all top1 member accounts and is strongly recommended. All internal top1 staff access to sensitive data requires multi-factor authentication and is fully logged for audit purposes. Staff passwords are never stored in plain text.

Monitoring & Response: The top1 security team monitors systems 24/7 to detect suspicious activity, intrusion attempts, and abnormal access patterns. Detailed incident response procedures are in place to ensure prompt and effective action in the event of a security breach.

Data Breach Notification: In the event of a data breach that may significantly affect your rights or interests, top1 will notify you within a reasonable timeframe and in accordance with applicable legal requirements. The notification will include details of what occurred, the data involved, and the steps we are taking to address the situation.
9. Your Personal Data Rights

As a top1 member residing in Malaysia, you have certain rights regarding the personal data we process about you. top1 respects and facilitates the exercise of these rights:

🔍
Right of Access

You have the right to request a copy of the personal data we hold about you. top1 will provide this information in a readable format within 30 business days.

✏️
Right to Rectification

If the personal data in top1's records is inaccurate or out of date, you have the right to request a correction. Simple updates can be made directly in your account settings.

🗑️
Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to top1's legal obligations to retain certain records for specified periods.

⛔
Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Your objection will be actioned immediately, with no justification required.

📦
Right to Data Portability

You have the right to receive the personal data you have provided to top1 in a structured, machine-readable format, for the purpose of transferring it to another service provider.

⏸️
Right to Restriction of Processing

In certain circumstances, such as disputes over data accuracy, you may request that top1 restrict the processing of your data while the matter is being resolved.

To exercise any of the above rights, contact the top1 privacy team by email at support@top1-bangla.com with the subject line "Data Privacy Rights Request", or via live chat within the platform. top1 will respond to your request within 30 business days. For complex requests, this period may be extended to up to 60 business days, with advance notice to you. top1 reserves the right to verify your identity before processing any data-related request, to ensure your rights are protected from unauthorised access by third parties.

10. Cookies & Tracking Technologies

Top1 uses cookies and similar tracking technologies to enhance your platform experience, ensure security, and gather analytics data that helps us understand how the platform is used. The types of cookies we use are as follows:

You can manage cookie settings through your web browser settings or via the cookie preference panel available on the top1 platform. Disabling essential cookies may affect core platform functions, including login and account security. Optional cookies can be disabled without affecting access to top1's core services.

11. Children's Data Protection

The top1 platform is strictly for individuals aged 21 and above. top1 does not knowingly collect or process personal data from individuals under the age of 18. Should we discover that personal data of a minor has been collected without proper age verification, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian who believes your child has registered a top1 account without your consent, please contact us immediately at support@top1-bangla.com. top1 will take the matter seriously, investigate thoroughly, and take appropriate action within 24 hours.

Parental Advisory: top1 applies an age verification process at registration, but we also rely on the cooperation of parents and guardians to ensure the platform is not accessed by minors. Please ensure that devices used by children or teenagers do not have access to any top1 account.
12. Privacy Policy Amendments & How to Contact Us

Top1 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make significant changes to this policy, we will provide appropriate notice through:

  • In-platform notifications on top1 that will appear when you log in
  • An email to the address you registered with top1 at least 7 days before the changes take effect
  • Update the "Last Updated" date at the top of this document

Continued use of the top1 platform after the effective date of any policy changes will be considered your acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account and request a withdrawal of any eligible balance before the new policy takes effect.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by top1, please contact us via:

  • Email: support@top1-bangla.com (subject: Data Privacy Inquiry)
  • Live Chat: Available 24/7 within the top1 platform
Current Version: This document is the version of the top1 Privacy Policy in effect from 1 January 2026. Any prior versions are no longer applicable.

Your Data Is Safe with top1

Top1 is committed to protecting the privacy of every Malaysian member. Register with confidence today — we take our responsibility for the security of your information seriously.

FAQ – top1 Privacy Policy

Quick answers to the most frequently asked questions about privacy and data at top1

No. top1 does not sell, rent, or share your personal data with advertising agencies, marketing companies, or any third party for their marketing purposes. Your data is only shared in very limited circumstances — with licensed Malaysian payment providers such as Touch 'n Go and DuitNow to process your transactions, with game providers as required to deliver services, and with authorities when required by law. All such sharing is done on a strictly need-to-know basis and is subject to confidentiality agreements.

You can opt out of promotional emails from top1 in two easy ways. First, click the "Unsubscribe" link found at the bottom of any promotional email we send. Second, log in to your top1 account, go to Account Settings, and disable the marketing communications option under Notification Preferences. Changes will take effect within 48–72 hours. Please note that even after opting out of promotional emails, we will still send you important account-related communications such as transaction confirmations and security notifications.

After your account is closed, top1 retains your data for varying periods depending on the data type. Financial and transaction records are kept for a minimum of 7 years in accordance with financial regulatory requirements. Identity verification (KYC) records are retained for 5–7 years after account closure as required for compliance. Customer support communication logs are kept for up to 3 years. Technical data and cookies are deleted earlier, typically within 90 days. Data retained for legal compliance purposes cannot be deleted early upon request, but it will not be used for marketing or any commercial activity after your account is closed.

In the event of a data breach that may significantly affect your rights or security, top1 has a detailed incident response procedure in place. First, the top1 security team will immediately contain and investigate the incident. We will assess the scope of the breach and the data involved. If the breach poses a significant risk to you, we will notify you directly within a reasonable timeframe and in accordance with applicable legal requirements. The notification will include an explanation of what occurred, the type of data involved, the steps we have taken, and what you can do to protect yourself. We will also report significant breaches to the relevant authorities as required by applicable law.

Yes, you have the right to request access to the personal data we hold about you under the access rights guaranteed by Malaysia's PDPA. To make this request, contact the top1 privacy team by email at support@top1-bangla.com with the subject line "Personal Data Access Request", or via live chat. For security purposes, we will verify your identity before processing the request. top1 will provide a summary of the personal data we hold within 30 working days of receiving a valid request, in a readable and understandable format. Certain limitations apply — for example, information that could compromise a security investigation or affect the privacy rights of third parties may not be fully disclosed.

Related Documents

Read other important documents related to the use of the top1 platform

Terms & Conditions

The full terms of use for the top1 platform, covering betting rules, deposits, withdrawals, and bonuses.

Read Terms & Conditions

Responsible Gaming

A guide to self-exclusion tools, betting limits, and support resources for top1 Malaysia members.

Read the Guide

About Us

Learn about top1's story, mission, and core values — Malaysia's trusted betting platform since 2017.

Learn More

FAQ

Comprehensive answers to questions frequently asked by top1 members about accounts, payments, and games.

View FAQ
Bahasa Melayu