Privacy Policy Topup77 – Our Commitment to Protecting Your Data

Topup77 collects several categories of personal information from users. Below is a detailed breakdown of what we collect and how it is collected:

Information You Provide Directly

• Your full name as it appears on your Malaysian identity card.
• An active Malaysian mobile number for topup77 account verification and important communications.
• The password you create for your topup77 account (stored as an unreadable hash, never as plain text).
• Identity verification documents (KYC) such as a copy of your national identification card, when requested by topup77 for age verification or legal compliance purposes.
• Information you provide when contacting topup77 customer support via live chat, email, or Telegram.

Automatically Collected Information

• Your IP address and country/state-level geolocation data for security and legal compliance purposes.
• The type of device, operating system, and browser you use to access the topup77 platform.
• Activity log data includes pages visited, login and logout times, and actions taken within the topup77 platform.
• Cookie data and similar tracking technologies (see Section 5 for more information).
• Financial transaction records including deposit amounts, withdrawals, and betting activity on the topup77 platform.

Topup77 uses your personal data solely for the following legitimate and necessary purposes in order to operate our services:

Topup77 does not use your data for any purpose beyond those listed above without first obtaining your additional consent. Should topup77 wish in the future to use your data for a new purpose that differs materially from those listed, you will be notified and given the choice to consent or decline.

Topup77 does not sell, rent, or trade users' personal data to any third party for their own marketing purposes. topup77 only shares user data in the following limited and necessary circumstances:

• Payment Providers: Topup77 shares the necessary information with approved payment gateways — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u via FPX, and CIMB Clicks — to process your deposits and withdrawals. These providers are bound by strict data protection agreements.
• Game Providers: Topup77 shares the minimum necessary information with our casino and slots game providers to grant you access to those games. Data shared is limited to anonymised user identifiers, with no full name or financial information included.
• Regulatory Bodies & Law Enforcement: Topup77 will disclose personal data to the relevant authorities where required by Malaysian law or a valid court order. This includes information for the purposes of fraud prevention and anti-money laundering.
• Technical Service Providers: Topup77 uses selected cloud service and technical infrastructure providers to host our platform. These providers act as data processors under topup77's instruction and are not permitted to use user data for their own purposes.

All third parties with whom topup77 shares user data are bound by confidentiality and data protection agreements that require them to handle your data to the same security standards as topup77. topup77 conducts regular due diligence reviews of all third-party data processors.

Topup77 invests seriously in security infrastructure to protect your personal data. The key security measures we have implemented include:

• Data Encryption at Rest: All personal data stored in topup77's databases is encrypted using AES-256 — rendering it unreadable even in the event of a server breach.
• Data Encryption in Transit: All communications between your browser/app and topup77's servers are protected with the latest SSL/TLS version using verified certificates.
• Layered Access Control: Access to user data within the topup77 system is governed by the principle of least privilege — each staff member can only access data that is directly relevant to their job function.
• Monitoring & Threat Detection: topup77's systems are monitored continuously 24/7 to detect suspicious activity, intrusion attempts, or any security anomalies requiring immediate attention.
• Regular Security Audits: topup77 conducts regular security assessments and penetration testing carried out by independent third parties to identify and address any vulnerabilities before they can be exploited.
• Secure Data Backup: Topup77 maintains encrypted data backups stored across geographically separate locations to ensure rapid data recovery in the event of any system failure.

Topup77's data retention periods are as follows: active account data is retained for as long as your account remains active; financial transaction data is retained for a minimum of 7 years for legal compliance; activity log data is retained for 2 years; and customer support communication data is retained for 3 years from the date of the last interaction.

The topup77 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly. Below are the types of cookies topup77 uses:

• Essential Cookies (Required): These cookies are required for the topup77 platform to function at a basic level — including managing your login session, CSRF protection, and other security functions. They cannot be disabled.
• Preference Cookies: These cookies remember your settings and preferences on the topup77 platform — such as your chosen language and favourite sports display — so you do not have to reconfigure them each time you log in.
• Analytics Cookies: topup77 uses anonymised analytics data to understand how users interact with our platform. This helps us identify areas for improvement and new features users want. This analytics data is not linked to your personal identity.
• Security Cookies: These cookies are used to detect suspicious activity patterns, prevent unauthorised login attempts, and protect your topup77 account from security threats.

You can manage your cookie settings through your web browser. Most browsers allow you to view, delete, and block cookies from specific websites. Please note, however, that disabling essential cookies may affect the functionality of the topup77 platform and prevent you from logging in or making transactions.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and topup77's privacy policy, you have the following rights regarding your personal data held by us:

• Right of Access: You may request a copy of all personal data topup77 holds about you. topup77 will process this request within 21 business days and may charge a nominal processing fee as permitted by law.
• Right to Rectify: If any personal data held by topup77 is inaccurate or outdated, please contact us to have it corrected. Basic account details such as your phone number can be updated directly through your topup77 account settings.
• Right to Request Deletion: You may request topup77 to delete your personal data. Such requests will be processed taking into account topup77's legal obligations to retain certain records (such as financial transaction records for a minimum of 7 years). Topup77 will inform you of which data can be deleted and which must be retained, along with the reasons.
• Right to Object to Marketing: You may object to the use of your personal data for direct marketing purposes at any time, without giving any reason. Topup77 will stop sending you marketing communications within 5 business days of receiving your request.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing carried out prior to the withdrawal.

To submit any privacy rights request, please contact topup77 via email at support@topup77.best or through 24/7 live chat. Please include your username and registered phone number to help us verify your identity and process your request more efficiently.

Topup77 pays particular attention to the security of users' financial data given its sensitivity. Here is how topup77 handles your payment-related data:

• topup77 does not directly store credit or debit card numbers, bank account numbers, or any similar sensitive financial information in our systems. All payments through Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX are handled entirely by authorised third-party payment gateways.
• topup77 only retains transaction tokens and payment confirmation records necessary for settlement, customer support, and audit purposes.
• All financial transaction records at topup77 are encrypted at rest, and access to these records is strictly limited to staff with a legitimate operational need.
• Withdrawals from your topup77 account are only processed to the same payment method used for the deposit, or to a method that has been verified in the name of the registered user, as a safeguard against fraud and money laundering.
• topup77 complies with applicable Anti-Money Laundering (AML) requirements and will report suspicious transactions to the relevant authorities in Malaysia where required by law.

If you suspect any unauthorised activity involving your topup77 account or financial transactions, please contact topup77 support via live chat or email support@topup77.best immediately. Topup77 will take every report seriously and take appropriate action to protect your account.

Topup77 would like to keep you informed about promotions, special offers, and the latest news relevant to your betting interests. However, we will only do so in a manner that respects your preferences and privacy:

• Important Service Communications: Topup77 will send SMS notifications or messages regarding important matters relating to your account — including deposit confirmations, withdrawal notifications, security alerts, and material changes to our terms of service. These communications are essential and cannot be unsubscribed from.
• Marketing Communications (Optional): With your consent given at registration, topup77 may send you information about new promotions, special bonuses during the Malaysia Super League or EPL football season, exclusive BWF badminton offers, and platform updates. You may opt out of these communications at any time.
• How to Unsubscribe: To stop receiving marketing communications from topup77, you can click the "unsubscribe" link in any marketing message, update your notification settings within your topup77 account, or contact topup77 support to request a full opt-out.
• No Excessive Communication: Topup77 respects your time and attention. We maintain a reasonable communication frequency and will not flood you with irrelevant or repetitive messages.

Topup77 does not share your contact information with third-party advertisers for their own direct marketing purposes. Any topup77-related marketing communications you receive will always come exclusively from topup77's official channels.

Topup77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, legal requirements, or updates to the topup77 platform. We are committed to keeping you informed of any material changes:

• Any material changes to topup77's Privacy Policy will be communicated to registered users via in-platform notifications or SMS at least 14 days before the changes take effect.
• The "Updated" date at the top of this page will reflect the date of the latest version of topup77's Privacy Policy.
• Your continued use of the topup77 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the revised policy.
• If you do not agree with any changes made to the Privacy Policy, you have the right to close your topup77 account and request deletion of your data before the changes take effect.

For any questions, concerns, or requests relating to this Privacy Policy or topup77's handling of your personal data, please reach us through the following channels:

• Email: support@topup77.best (state "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24 hours a day, 7 days a week via the chat button on the topup77 platform
• Telegram: topup77's official support channel (details available upon login)

Topup77 is committed to responding to all privacy inquiries within 5 business days. For formal data rights requests under Malaysia's PDPA, the response period is within 21 business days from the date the request is received.