Personal Data Protection

Top1toto Privacy Policy — Malaysian User Data Protection

Top1toto takes the protection of your personal data seriously. This document transparently explains how we collect, use, store, and protect your information as a user of our wagering platform.

Updated: January 2026
256-bit SSL
Encrypted Data
Secure KYC
No Data Sales
PDPA Compliance
How top1toto Protects Your Privacy

Privacy is more than just a word at top1toto — it is at the core of how we build and operate our platform for users in Malaysia.

Advanced Data Encryption

All data transmitted between your device and top1toto servers is protected by 256-bit SSL encryption. This means your personal information, financial details, and activity cannot be intercepted or read by any third party during transmission.

Secure Data Storage

Your personal data is stored on servers protected by strict access controls, multi-layer firewalls, and 24-hour intrusion detection systems. Only staff with specific authorisation may access user data for legitimate operational purposes.

No Sale of Personal Data

Top1toto never sells, rents, or transfers your personal data to third parties for marketing purposes. Your data belongs to you, and we use it solely to provide you with a better service.

Data Protection Act Compliance

The top1toto Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that all our data processing practices remain aligned with current legal requirements and the guidelines of the Malaysian Personal Data Protection Commissioner.

Privacy Controls in Your Hands

You have full rights to access, correct, or request the deletion of your personal data. Through your top1toto account settings, you can also manage your marketing communication preferences and choose the types of notifications you wish to receive.

Cookie Usage Transparency

Top1toto uses cookies to improve user experience and analyze platform traffic. We inform you clearly about cookie usage, and you can manage your cookie preferences through your browser settings or our platform.

Important Note: This Privacy Policy describes top1toto's personal data processing practices. By registering or using our platform, you acknowledge that you have read and understood this policy. If you do not agree, please discontinue use of the platform.

1Privacy Policy Introduction & Scope

This Privacy Policy is issued by top1toto ("we", "Platform") and applies to all users who access or use our services via the top1toto.vin website, the mobile app for Android and iOS, and all other related service channels.

We understand how important privacy is to you as a Malaysia user. Your trust is our most valuable asset, and we are committed to handling your personal data in a fully transparent, responsible and secure manner.

This Privacy Policy describes:

  • Types of personal data we collect from you
  • Purpose and legal basis for the processing of such data
  • How we share data with carefully selected third parties
  • Security measures we take to protect your data
  • Your rights as a data subject under Malaysian law
Legal Basis: The processing of personal data by top1toto complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all regulations established thereunder.

2Personal Data We Collect

Top1toto collects various types of personal data when you interact with our platform. This data collection is necessary to provide a secure, fair, and responsible service.

Data You Provide Directly:

  • Full name as stated on your identification document
  • Malaysia Identity Card number (MyKad) or passport number
  • Date of birth and gender
  • Current residential address
  • Active mobile phone number
  • Valid email address
  • Bank account details and digital wallet information for transaction purposes
  • Copy of identification document for the KYC process

Data Collected Automatically:

  • IP address and general location information
  • Device type, operating system and browser version
  • Activity logs and transaction records within the platform
  • Time and duration of usage sessions
  • Cookie data and related tracking technologies
  • Information about games played and bets placed
Data Category Examples of Information Primary Purpose
Identity Data Name, IC, date of birth KYC Verification & Compliance
Contact Data Email, phone number Account communications
Financial Data Bank account number, transaction records Deposit & Withdrawal Processing
Technical Data IP address, device type Security & fraud detection
Usage Data Activity logs, game records Responsible gaming & audits

3How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. top1toto does not use your data for any undisclosed purpose without your prior consent.

  • Identity Verification: Verifying that you are a legitimate individual who meets the age eligibility requirements to use the platform
  • Transaction Processing: Managing deposits, withdrawals and all financial transactions securely and efficiently
  • Account Security: Detecting and preventing unauthorised access, fraud and suspicious activity
  • Customer Support: Providing accurate and effective assistance whenever you need help
  • Responsible Gaming: Monitoring usage patterns to identify and assist users who may be experiencing problem wagering
  • Platform Enhancements: Analysing usage data to improve user experience and develop new features
  • Legal Compliance: Fulfilling the reporting and compliance obligations required under Malaysia law
  • Marketing Communications: Sending promotional offers and the latest updates, subject to your communication preferences
Data Minimisation Principle: top1toto only collects data that is strictly necessary for the stated purposes. We do not collect data excessively or retain it longer than required.

4Data Sharing with Third Parties

Top1toto does not sell or transfer your personal data to third parties for their own marketing purposes. However, there are limited situations where we may need to share your data with certain parties:

  • Payment Service Providers: Deposit and withdrawal processing requires sharing necessary transaction data with trusted banks and digital wallet operators.
  • Identity Verification Providers: Recognised third-party KYC partners help us verify user identities securely and efficiently.
  • Game Service Providers: Game software providers receive the minimum technical data required to deliver a smooth gaming experience
  • Regulatory Authority: We share necessary data with legal and regulatory authorities when required by law
  • Fraud Detection Services: Dedicated third-party systems help us identify and prevent fraudulent activity to protect all users.

All third parties we work with are bound by strict data protection agreements and are only permitted to use your data for the stated purposes. We ensure all partners comply with security standards equal to or higher than our own.

International Data Transfers: In certain circumstances, your data may be processed outside Malaysia by recognised service providers. When this occurs, we ensure that protections equivalent to Malaysia's PDPA are applied through appropriate contractual mechanisms.

5Encryption & Security Measures

Your data security is the absolute priority of top1toto. We continuously invest in the latest security infrastructure to ensure your data is always protected against increasingly sophisticated cyber threats.

Technical Security Measures We Use:

  • 256-bit SSL/TLS Encryption: All communications between you and the platform are encrypted using the highest available encryption standards.
  • Data-at-Rest Encryption: Sensitive data stored in our databases, including financial details and KYC documents, is encrypted using the AES-256 algorithm
  • Two-Factor Authentication (2FA): Additional verification is available to protect your account from unauthorized access.
  • 24/7 Monitoring: Automated monitoring systems detect and respond to any suspicious activity in real time.
  • Network Isolation: User data servers are isolated from other systems using a layered network architecture
  • Regular Security Audits: Penetration testing and security audits are conducted regularly by independent security experts.
Shared Responsibility: While we take all reasonable steps to protect your data, account security also depends on you. Please use a strong password, enable 2FA, and never share your login credentials with anyone.

6Use of Cookies and Tracking Technologies

Top1toto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of Cookies We Use:

  • Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled
  • Performance Cookies: Collecting information on how you use the platform to help us improve performance and functionality
  • Functional Cookies: Remembering your preferences such as language, region and display settings for a more personalised experience
  • Analytics Cookies: Helping us understand platform usage patterns in aggregate and anonymised form for product development purposes

You can manage or disable non-essential cookies through your browser settings or via our cookie management panel. Please note that disabling certain cookies may affect the functionality and your experience on the platform.

7Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 and top1toto's internal policies, you have the following rights regarding your personal data:

Right of Access

You have the right to request and obtain a copy of the personal data we hold about you in a readable format.

Right to Rectification

If any of your personal data is inaccurate or outdated, you have the right to request that we correct it promptly.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data, subject to applicable legal obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time via your account settings.

Right to Data Portability

You have the right to receive your personal data in a structured, reusable format for transfer to another platform.

Right to Restriction of Processing

Under certain circumstances, you may request a temporary restriction on the processing of your personal data while an issue is being resolved.

How to Submit a Request: To exercise any of the above rights, contact the top1toto customer support team via in-app or platform live chat. We will process your request within 14 business days and may require identity verification before proceeding.

8Data Retention Period

Top1toto retains your personal data only for as long as necessary to fulfill the purposes stated in this policy or as required by Malaysian law.

Data Types Retention Period Reason
Active Account Data Throughout the active account period Ongoing account management
Transaction Records 7 years after transaction Financial legal requirements
KYC Documents 5 years after account closure Anti-money laundering compliance
Communication Logs 2 years Customer support & audits
Technical Data & Logs 12 months Security & fraud detection

Once the retention period expires, data will be securely deleted or anonymised using methods that ensure it cannot be recovered. Where data is required for ongoing litigation or investigations, it may be retained beyond the standard retention period.

9Children's Privacy

Top1toto services are exclusively for individuals who are of age 18 years and above. We do not intentionally collect or process personal data from individuals under the age of 18.

If we find that personal data of an underage individual has been collected without proper age verification, we will take immediate action to:

  • Closing the account in question immediately
  • Deleting all personal data associated with the account
  • Returning any deposited funds through the appropriate channels
  • Reporting the incident to the relevant authorities if necessary
Parents & Guardians: If you believe your underage child has registered on our platform, please contact our customer support immediately. We will investigate and take full action within 24 hours.

10Changes to This Privacy Policy

Top1toto reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements in how we protect user data.

When we make significant changes to this policy, we will:

  • Updating the "Last Updated" date at the top of this document
  • Sending notifications via email to all registered users
  • Displaying a clear notice on the platform's home page for at least 14 days
  • In the event of major changes affecting your rights, seek your consent again where required

We encourage you to review this Privacy Policy periodically so you are always informed of how we protect your information. Continued use of the platform after any changes have been notified is considered acceptance of the updated policy.

11Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, we are always ready to listen and assist.

You may contact the top1toto Data Protection Officer through the following channels:

  • Live Chat: Available 24 hours a day, 7 days a week via the top1toto app or website.
  • Privacy Email: [email protected] (displayed as text — no clickable link)
  • Mailing Address: Data Protection Division, top1toto, Malaysia

We aim to respond to all privacy-related enquiries within 5 working days. For more complex complaints, we will provide a progress update within 14 working days and resolve the issue within a reasonable timeframe.

Our Commitment: top1toto will never penalize or discriminate against you for exercising your privacy rights. We take every privacy request and complaint seriously and ensure it is handled professionally and respectfully.

Your Data Is Safe With Us

With top-tier data protection and a full commitment to your privacy, register a top1toto account today and enjoy a safe, trusted, and enjoyable wagering experience.

Bahasa Melayu