Updated: January 2026

Top1 Privacy Policy – Player Data Protection Malaysia

Your privacy is our priority. This document transparently explains how top1 collects, uses, stores, and protects your personal data as a member of our platform in Malaysia.

256-bit SSL Encryption

All your personal data and financial transactions on top1 are protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banks such as Maybank and CIMB.

No Sharing Without Consent

Top1 does not sell, rent, or share your personal data with third parties for marketing purposes without your consent. Data is shared only with parties that need it to support the delivery of our services.

Personal Data Protection Act Compliance

Top1 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your rights to access, correct, and delete your data are fully respected.

Minimum Required Data

Top1 collects only the data genuinely necessary to operate our services safely and effectively. We do not collect excessive or irrelevant personal data.

Secure Data Storage

Your personal data is stored on servers protected by strict access controls, continuous monitoring, and robust cybersecurity procedures to prevent unauthorised access.

Control Is in Your Hands

You have the right to access your personal data, request corrections, request deletion in certain circumstances, and withdraw your marketing consent at any time through your top1 account settings.

Top1's Privacy Commitment to Malaysian Players

This Privacy Policy clearly and transparently explains how top1 manages your personal data. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the top1 platform, you agree to the practices described in this document.

1

Introduction

This Privacy Policy is published by top1 operating through the website top1-khelo.com. It describes how we collect, use, disclose, store, and protect your personal information when you register for and use our online Sports Betting and casino platform.

We understand that by registering with top1 and entrusting your personal data to us, you are placing a great deal of trust in us. We do not take that trust lightly. Every decision we make regarding your personal data is guided by a commitment to your privacy and security as a member of our platform in Malaysia.

Top1 is the data controller for all personal information you provide when registering an account, using our services, or interacting with our platform in any way. We are responsible for ensuring your data is handled securely and in compliance with applicable laws, including Malaysia's Personal Data Protection Act 2010 (PDPA).

Effective Date: This Privacy Policy is effective from 1 January 2026. The latest version is always accessible on this page.

2

Personal Data We Collect

Top1 collects your personal data through several channels — directly from you during registration and platform use, automatically as you use our services, and in certain cases from legitimate third parties for identity verification purposes.

2.1 Data You Provide Directly

Data Category Example Information Purpose of Collection
Identity Information Full name, MyKad number, date of birth Identity verification (KYC), AML compliance
Contact Information Malaysian phone number, email address Account communications, OTP verification, support
Financial Information Bank account number, e-wallet information Processing deposits and withdrawals
Login Information Username, password (encrypted) Account security and access
Communication Support chat records, emails, complaints Customer service, dispute resolution

2.2 Automatically Collected Data

When you use the top1 platform, our systems automatically collect certain technical information required to deliver our services securely and efficiently:

  • Your device's IP address and general location information (country/state)
  • Device type, operating system, and web browser used
  • Account login and logout records with timestamps
  • Betting and gaming activity history within the platform
  • Complete financial transaction records including date, time, and payment method
  • Session data such as pages visited and duration of play sessions

2.3 Data from Third Parties

In certain circumstances, top1 may receive your personal data from legitimate third parties, including payment service providers (such as Touch 'n Go, GrabPay, DuitNow, and FPX) to verify transactions, identity verification agencies for KYC purposes, and relevant regulatory bodies where required by law.

3

How We Use Your Personal Data

Top1 uses your personal data solely for legitimate and necessary purposes in the operation of our platform services. We do not use your data for any purpose beyond the scope stated below without first obtaining additional consent from you.

3.1 Account Management & Services

Your personal data is primarily used to operate and manage your top1 account. This includes processing new account registrations and identity verification, authenticating each login to prevent unauthorised access, securely processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX, processing withdrawal of winnings to your Malaysian bank account or e-wallet, and delivering Sports Betting services covering Malaysia Super League football, EPL, BWF badminton, e-sports, and other sports available on top1.

3.2 Security & Compliance

Top1 uses your personal data to fulfil applicable legal compliance obligations, including Anti-Money Laundering (AML) procedures, identity verification (KYC), and compliance with Malaysia's Personal Data Protection Act 2010. Account activity data is used to detect and prevent fraud, bonus abuse, and other activities that violate Terms & Conditions top1.

3.3 Service Improvement

Anonymised and aggregated usage data is used by the top1 technology team to understand platform usage patterns, identify areas for improvement, and ensure the best possible user experience. Individual data is never used for this purpose without prior anonymisation.

3.4 Service Communications

Top1 uses your phone number and email address to send you important account-related communications — including transaction confirmations, critical security notices, updates to our Terms or Privacy Policy, and responses to your customer support requests. With your consent, we also send promotional information about bonuses and the latest offers on top1.

4

Legal Basis for Data Processing

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), top1 processes your personal data on one or more of the following legal bases:

Contract Fulfilment Processing necessary to fulfil the service agreement between you and top1 — including account management, bet processing, and payment handling.
Legal Obligation Processing required to fulfil top1's legal obligations under applicable Malaysian law — including KYC and AML procedures.
Legitimate Interests Processing required for top1's legitimate interests that does not override your fundamental rights — such as fraud detection, platform security, and service improvement.
Consent Processing for direct marketing and promotional communications, based on the explicit consent you provided during registration or subsequently through your account settings.
5

Data Sharing with Third Parties

Top1 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. We share your personal data only in limited circumstances as described below, and strictly to the extent necessary for the relevant purpose.

5.1 Trusted Service Providers

Top1 works with carefully selected third-party service providers to help us operate the platform effectively. These providers have limited access to your personal data only to the extent necessary to carry out their specific functions, and are bound by strict confidentiality and data protection agreements:

  • Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks (Maybank2u, CIMB Clicks, RHB Now) — to securely process financial transactions
  • Game Providers: Licensed Live Casino and slots providers — to deliver audited, fair-play games
  • Identity Verification Services: Licensed third-party KYC providers — to verify member identity in accordance with compliance requirements
  • IT Infrastructure Services: Licensed server hosting and CDN providers — to keep the top1 platform fast and consistently available

5.2 Legal Requirements

Top1 may disclose your personal data to the relevant authorities when required by applicable Malaysian law, a valid court order, or directions from a regulatory body with jurisdiction. In such situations, top1 will endeavour to notify you in advance, unless such notification is itself prohibited by the relevant law or order.

Important: top1 never sell your personal data to advertisers, data brokers, or any third party for their own marketing or commercial purposes. This is our absolute commitment.

6

Data Security

Top1 makes serious investments in cybersecurity infrastructure to protect your personal data. We take a layered approach to security — meaning there are multiple levels of protection that an attacker must breach before gaining access to our members' data, with each layer designed on the assumption that the one before it may fail.

6.1 Technical Security Measures

  • Transmission Encryption: All communications between your device and top1's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate — data in transit cannot be read even if intercepted
  • Storage Encryption: Sensitive data such as financial information and identity documents are stored in encrypted form on top1's servers
  • Internal Access Controls: Only top1 staff with a legitimate business need have access to your personal data, and all access is logged and monitored
  • 24/7 Monitoring: Automated security monitoring systems operate around the clock to detect any suspicious activity or unauthorised access attempts
  • Regular Security Audits: top1 undergoes regular security audits by independent third parties to identify and address potential vulnerabilities before they can be exploited

6.2 What You Can Do

The security of your account also depends on the steps you take yourself. top1 recommends using a strong, unique password for your top1 account (at least 12 characters combining uppercase letters, lowercase letters, numbers, and symbols), not sharing your login credentials with anyone, enabling two-factor authentication (2FA) where available, and contacting top1 support immediately if you suspect any unauthorised activity on your account.

top1 will never ask for your account password via email, SMS, or Live Chat. If you receive any communication requesting your password, it did not come from top1 — please report it to our support team immediately.

7

Data Retention Period

Top1 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

Active Account Data Retained for the duration your account is active and for the period required by law following account closure
Financial Transaction Records Minimum 7 years from the date of transaction, in line with Malaysian legal compliance requirements
Support Communication Records 3 years from the date of last communication for dispute resolution purposes
Security & Access Logs 12 months for fraud detection and security investigation purposes
KYC Documents For the duration of active membership and a minimum of 5 years after account closure

When your personal data is no longer needed and there is no legal obligation to retain it, top1 will securely delete or anonymise it so that it can no longer be associated with you personally.

8

Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data held by top1. We fully respect and facilitate the exercise of these rights.

Right of Access

You have the right to obtain a copy of the personal data we hold about you, including details of how it is used and with whom it is shared.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you, either through your account settings or by contacting customer support.

Right to Withdraw Consent

You may withdraw your consent to marketing communications at any time through your top1 account settings or by contacting our support team.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data — subject to top1's legal obligations to retain specific records.

Right to Object to Processing

You have the right to object to the processing of your data in certain circumstances, particularly for direct marketing purposes carried out without your consent.

Data Portability Right

You have the right to receive your personal data in a machine-readable format for transfer to another service provider where applicable.

To exercise any of the above rights, please contact the top1 customer support team via Live Chat or email at support@top1-khelo.com. We aim to respond to all privacy-related requests within 14 working days. In complex cases, this period may be extended by up to 30 days, with notice provided to you.

9

Cookies & Tracking Technologies

The top1 platform uses cookies and similar tracking technologies to enhance the user experience, maintain account security, and understand how our platform is used. Below is an overview of the types of cookies we use:

You can manage cookies through your web browser settings. However, disabling essential cookies may impair the functionality of the top1 platform and prevent you from accessing certain features. Analytics and functional cookies can be disabled without affecting the platform's core functionality.

10

Cross-Border Data Transfers

In operating the top1 platform, some of your personal data may be processed or stored outside Malaysia — for example, when we use international cloud computing services or game providers that operate from studios abroad.

When your personal data is transferred outside Malaysia, top1 ensures that such transfers are carried out with adequate safeguards and in compliance with Malaysia's PDPA requirements. This includes ensuring that data recipients outside Malaysia are bound by data processing agreements that require a standard of protection equivalent to Malaysian requirements, and that transfers are limited strictly to data necessary for the relevant purpose.

All international service providers we work with are bound by contract to protect your data in accordance with high security standards and to use it solely for the purposes we specify.

11

Child Protection

Adults Only Platform: top1 services are intended for individuals aged 18 years and above only. top1 does not knowingly collect personal data from individuals under the age of 18.

Top1 takes the protection of children's privacy extremely seriously. Our platform employs age verification procedures during registration and KYC procedures to ensure only adults can use our services. Should top1 discover that personal data has been collected from someone under the age of 18, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and believe that your child under the age of 18 has registered an account on top1, please contact us immediately via Live Chat or email support@top1-khelo.com so we can take the necessary action.

12

Privacy Policy Amendments

Top1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. The latest version of the Privacy Policy is always accessible on this page, with the "Updated" date indicating when the most recent amendment was made.

When we make material changes to this Privacy Policy — changes that significantly affect how we collect, use, or protect your data — we will notify you via an in-platform notification on top1 when you log in, or by email to the address registered to your account. We encourage you to review this Privacy Policy periodically, especially after receiving notice of any amendments.

Continued use of the top1 platform after any amendments to the Privacy Policy take effect will be considered acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and may close your account by contacting top1 customer support.

13

Contact Us – Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way top1 handles your personal data, our team is ready to assist you through the following channels:

Live Chat
The fastest way to reach us for privacy enquiries — available 24 hours a day, 7 days a week including Malaysian public holidays. Typical response time is 1 to 3 minutes.
Privacy Email
For more detailed written enquiries, please email support@top1-khelo.com with the subject line "Privacy Inquiry". Response time is under 2 hours during operating hours.

For formal requests concerning your rights under Malaysia's PDPA — such as data access, correction, or deletion requests — please clearly state the type of request and include your top1 account number to help us process it promptly. We aim to respond to all formal privacy requests within 14 business days.

🔒

Your Data Is Safe with top1

We take the protection of your personal data seriously — 256-bit SSL encryption, no sharing without consent, and full control in your hands. Join over 500,000 Malaysian players who already trust top1 for their online entertainment. Free registration, minimum deposit RM 20.

SSL 256-bit PDPA Compliance 24/7 Support No Data Sharing

* Subject to Terms & Conditions. For players aged 18 and above only. Gambling can be addictive — play responsibly. See Responsible Gaming.

Bahasa Melayu