Privacy Policy top1toto – Your Data Protection

Top1toto ("we", "Platform", or "Company") respects the privacy of every individual who uses our services at top1toto.fun. This Privacy Policy is established to provide full transparency regarding our data handling practices and to fulfil our obligations under Malaysia's Personal Data Protection Act 2010 (PDPA).

As an online gaming platform serving Malaysian users, we understand that your trust is our most valuable asset. Every decision we make regarding the handling of your personal data is guided by the principles of security, transparency, and respect for your rights as a user.

This policy applies to all information collected through the top1toto.fun website, mobile app, and any of our official communication channels. Please read this document carefully and contact our support team if you have any questions.

Top1toto collects various categories of personal data depending on how you interact with our platform. Below is a summary of the data that may be collected:

We only collect data that is strictly necessary to deliver our services. The principle of data minimisation is central to our privacy approach.

Your personal data is collected through various transparent and lawful methods:

3.1 Information You Provide Directly

This includes information you provide during account registration, the KYC verification process, deposit or withdrawal requests, communications with our customer support team, and participation in surveys or promotions.

3.2 Automatically Collected Data

When you use our platform, our systems automatically record technical information such as your IP address, web browser type and version, device operating system, login and logout timestamps, and navigation patterns within the platform. This data is used solely for security purposes, fraud detection, and improving the user experience.

3.3 Information from Trusted Third Parties

In certain circumstances, we may receive information about you from our integrated payment service providers, recognised identity verification bodies, or fraud prevention agencies. This information is used solely to verify your identity and ensure the security of your financial transactions.

Top1toto uses your personal data for the following lawful and transparent purposes:

• Account management: Creating, managing, and maintaining your member account, including the KYC identity verification process required by law.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions securely and accurately through our integrated payment methods.
• Platform security: Detecting and preventing fraud, money laundering, unauthorised access, and activities that violate our terms of use.
• Legal compliance: Fulfilling reporting and disclosure obligations required by Malaysian law, including PDPA requirements and anti-money laundering regulations.
• Service improvement: Analysing usage patterns to improve platform performance, enhance the user interface, and develop better new features.
• Service communications: Sending important notifications regarding your account, transactions, security updates, and changes to terms that affect you.
• Targeted marketing: Sending promotional offers, bonuses, and relevant VIP programme information — only if you have consented to receive marketing communications.
• Customer support: Processing and resolving enquiries, complaints, and assistance requests you submit to our support team.

We do not use your data for any purpose other than those stated above without first obtaining your renewed consent.

Top1toto does not sell or trade your personal data. However, there are certain situations where we need to share information with selected third parties:

5.1 Trusted Service Providers

We partner with trusted third-party service providers to handle certain operations, including integrated payment gateway providers, certified cloud service providers, identity verification service providers, and licensed gaming platform providers. All providers are bound by strict confidentiality agreements and may only use your data for the specified purposes.

5.2 Legal Obligations

Top1toto may disclose your personal data to government authorities, law enforcement bodies, or courts if required to do so by Malaysian law or a valid court order. We will inform you of any such disclosure where permitted by law.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of company assets, members' personal data may be transferred as part of that business transaction. Members will be notified in advance and their rights under this Privacy Policy will be upheld.

Protecting your personal data is top1toto's highest priority. We implement multiple layers of technical and organisational safeguards to ensure the security of your information:

• Data encryption: All sensitive data is encrypted using AES-256 technology during storage and SSL/TLS 1.3 during transmission.
• Two-factor authentication (2FA): 2FA is available for all member accounts, adding an extra layer of protection against unauthorised access.
• 24/7 security monitoring: Our security team continuously monitors systems to detect any suspicious activity or security threats.
• Periodic penetration testing: Our infrastructure undergoes periodic penetration testing by independent third parties to identify and address any security vulnerabilities.
• Role-based access control: Only staff who genuinely require access to specific data to perform their duties are permitted to do so, and every access is logged for audit purposes.
• Incident response plan: top1toto has tested incident response procedures in place to ensure any security breach is managed swiftly and efficiently.

While we take all reasonable precautions, no system can guarantee absolute security. We encourage you to also take personal protective measures, such as using a strong password and not sharing your login credentials.

Top1toto retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law:

• Active account data: Retained for the duration your account remains active, plus any additional period required by law.
• Financial transaction records: Retained for a minimum of seven (7) years in compliance with Malaysia's anti-money laundering legal requirements.
• Support communication logs: Retained for two (2) years from the date of communication for reference and dispute resolution purposes.
• Technical data and system logs: Retained for 90 days for security and fraud detection purposes, then automatically deleted.
• Closed account data: Upon account closure, your personal data will be retained for five (5) years for legal compliance purposes before being permanently deleted.

Under Malaysia's PDPA and our Privacy Policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our data protection team via the in-platform help centre. We will process your request within 14 working days from the date of receipt. In complex cases, this period may be extended by up to 30 days with prior notification to you.

Top1toto uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

9.1 Necessary Cookies

These cookies are essential for the platform's core functions and cannot be disabled. They include login session cookies, security cookies to prevent CSRF attacks, and your language preference cookies. Without these cookies, the platform cannot function properly.

9.2 Analytical Cookies

We use analytics cookies to understand how users interact with our platform — which pages are visited most frequently, how long users stay on the platform, and common navigation paths taken. This information is used to improve the overall user experience. Analytics data is collected in aggregate and cannot be traced back to any specific individual.

9.3 Functional Cookies

These cookies allow the platform to remember your preferences such as display settings, game settings, and communication choices. They make your experience more personalised and convenient without needing to reset your preferences every time you log in.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of some platform features. More information on managing cookies is available in your account settings.

Top1toto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. All amendments will take effect as soon as the updated version is published on this website.

For material changes — that is, changes that significantly affect how we collect, use, or share your personal data — we will send a notification to your registered email or display a clear notice on the platform at least 14 days before the changes take effect.

Continued use of the top1toto platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. The "Last Updated" date at the top of this document will always reflect the latest version in effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the top1toto Data Protection Officer (DPO) team is ready to assist you.

You can reach us via:

• In-Platform Help Centre: Click the customer support icon within the platform — available 24 hours a day, 7 days a week
• Privacy Email: [email protected] (displayed as text, not a link)
• FAQ Page: Answers to frequently asked questions are available at FAQ page us

We are committed to responding to all privacy-related enquiries within 3 working days. For cases involving more complex data subject access requests, we will notify you of a more precise processing timeframe.

If you believe we have not addressed your privacy concerns satisfactorily, you have the right to file a complaint with the Department of Personal Data Protection Malaysia under the Personal Data Protection Act 2010.