Privacy Policy TopOne –
Data Protection Players We

This Privacy Policy applies to all users who access the TopOne platform via the website, iOS and Android mobile apps, and any other service channels we provide. It covers all information you provide to us directly as well as information collected automatically when you use our services.

By registering an account or continuing to use the TopOne platform, you acknowledge that you have read and understood this Privacy Policy. If you are registering on behalf of another person or entity, you confirm that you have the authority to agree to this policy on their behalf.

This Policy does not apply to third-party websites or services that may be linked from our platform. We encourage you to read the privacy policy of any external service you use separately.

We only collect information that is strictly necessary to provide a safe, seamless, and legally compliant service. Below are the categories of data we collect and the purposes for which they are collected:

Every piece of data we collect is used for a clear and legitimate purpose. We never sell your personal data to third parties for external marketing or advertising. Here is how we use your information:

• Account Management – Creates and maintains your account, processes registration, and verifies identity through the KYC process as required by law.
• Payment Processing – Verifies and securely processes deposits and withdrawals, prevents financial fraud, and ensures compliance with AML requirements.
• Platform Security – Detects and prevents unauthorised access, fraudulent activity, system exploitation, and any other security threats to your account.
• Personalise Your Experience – Delivers relevant game recommendations, bonuses, and promotions based on your preferences and play history.
• Responsible Gaming – Monitors gameplay patterns to proactively identify signs of problem gambling and provide the necessary assistance.
• Service Communications – Sends important notifications relating to your account, transactions, security updates, and changes to terms.
• Legal Compliance – Fulfils reporting obligations to relevant regulatory authorities in accordance with applicable law.

Every use of your data is supported by a valid legal basis — whether contractual necessity, a legal obligation, our legitimate interests, or consent you have explicitly provided.

TopOne does not sell, rent, or trade your personal data to any third party for marketing purposes. However, there are limited situations where we need to share your information with others in order to deliver our services fully:

• Payment Service Providers – Payment gateways, banks, and eWallet processors that require transaction information to complete your deposits and withdrawals.
• Game Software Providers – Game studios and content providers that need to verify legitimate game sessions to ensure game integrity.
• Identity Verification Services – Third-party KYC providers that help us verify identity documents securely and efficiently.
• Regulatory Authorities – Regulatory bodies, law enforcement agencies, or courts when we are required to do so by law.
• Analytics & Security Services – Cybersecurity and analytics service providers that help us detect fraud and improve platform performance.

The security of your data is a responsibility we take extremely seriously. TopOne continuously invests in the latest security infrastructure to ensure your personal and financial information remains protected at all times.

• 256-bit SSL Encryption – All data transmitted between your device and our servers is encrypted using the latest TLS 1.3 protocol, ensuring no one can intercept or read your information in transit.
• Two-Factor Authentication (2FA) – An additional security layer available for all accounts. We encourage all players to enable 2FA for maximum protection against unauthorised access.
• PCI DSS Compliance – All financial and payment card data is processed in an environment compliant with the highest level of Payment Card Industry Data Security Standard (PCI DSS).
• Periodic Security Audits – Our infrastructure is regularly audited by independent security experts to identify and patch any vulnerabilities before they can be exploited.
• Internal Access Controls – Only staff who require access to specific data to perform their duties are permitted to do so — in accordance with the principle of least privilege.
• Secure Data Backups – Your data is automatically backed up to secure, redundant data centres to ensure service continuity and data recovery in the event of a technical incident.

The TopOne platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance and secure your login session. Cookies are small text files stored on your device when you visit our platform.

• Essential Cookies – Required for core platform functions such as login authentication, session security, and language settings. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies – Helps us understand how users interact with the platform so we can improve usability and performance. Data is collected in aggregate and does not identify individuals.
• Functional Cookies – Remembers your preferences such as language, display theme, and other personal settings for a more comfortable experience.
• Analytics Cookies – Collects anonymised usage data to help us understand usage patterns, optimise content, and improve overall services.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of some parts of the platform. Analytics and functional cookies can be turned off without impacting your core experience.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards, you have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, contact our privacy team by email at [email protected]. We will process your request within 30 days of receipt.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. The following are our data retention guidelines:

• Active Account Data – Retained for the duration your account is active, plus the legally mandated period following account closure.
• Financial Records & Transactions – Retained for a minimum of 7 years in compliance with Malaysia's taxation and AML legal requirements.
• KYC Documents – Retained for 5 years after the end of the business relationship in accordance with regulatory requirements.
• Security Logs – Retained for 12 months for fraud detection and security incident investigation purposes.
• Marketing Data – Retained until you withdraw your consent or request deletion, whichever comes first.

Once the applicable retention period has expired, your data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

TopOne reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When we make significant changes, we will notify you via:

• Email notifications sent to your registered address for significant material changes
• Prominent notice on the platform's home page during the transition period
• Update the "Last Updated" date at the top of this page

We encourage you to review this page periodically. Continued use of the platform after any changes take effect will be considered acceptance of the latest version of this Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):

You may also reach our general support team via live chat on the platform or by emailing [email protected] for enquiries that are general in nature and do not require formal handling by the DPO.