Privacy Policy TopOne

1. Introduction and Our Commitment

TopOne takes seriously our responsibility to protect the privacy of every user on our online entertainment platform. This Privacy Policy explains in detail how we collect, process, store, and protect your personal data when you access the TopOne website or mobile app.

This document applies to all users who register an account, browse the website, use the mobile app, or interact with any service provided by topone. By continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Data We Collect

TopOne only collects data necessary to provide a secure, seamless, and personalised experience to each user. We do not collect information that is excessive or irrelevant to the platform's operations.

Data Categories	Sample Information	Purpose of Collection
Identity Data	Full name, date of birth, IC/passport number	Identity verification (KYC) & legal compliance
Contact Data	Email address, phone number	Account communications, notifications & customer support
Financial Data	Bank account details, transaction records	Deposit processing, withdrawals & fraud prevention
Technical Data	IP address, device type, web browser	Account security & platform improvements
Usage Data	Game history, preferences, browsing patterns	Personalise experience & game recommendations

3. How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. topone does not use your data beyond what is stated in this policy without first obtaining your additional consent.

• Verify your identity during registration and the KYC process to ensure account security
• Process deposit and withdrawal transactions accurately and securely
• Send important account notifications such as login confirmations, transaction receipts, and security alerts
• Detect and prevent fraudulent activity, money laundering, and security breaches
• Personalise your gaming experience based on your preferences and usage patterns
• Comply with applicable legal and regulatory obligations
• Improve the platform, resolve technical issues, and develop new features

4. Data Sharing With Third Parties

TopOne understands that your trust is our most valuable asset. We only share your personal data with third parties in limited and legitimate situations, namely:

• Approved payment providers: To securely process deposit and withdrawal transactions via FPX, DuitNow, Touch 'n Go, and other supported methods
• Technology service providers: Companies that help us operate the platform — such as cloud services, analytics, and cybersecurity providers — all bound by strict confidentiality agreements
• Relevant authorities: When required by Malaysian law, court order, or a legitimate regulatory authority
• Fraud prevention: With bodies or services that assist in detecting and preventing illegal activities, including money laundering

In all of the above situations, we ensure that recipients of your data maintain data protection standards equivalent to our own. We do not sell or transfer your data to advertisers, data brokers, or any commercial parties unrelated to our platform operations.

5. Cookies and Tracking Technologies

TopOne uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. Cookies are small text files stored on your device when you browse our website.

• Essential cookies: Required for core platform functions such as login authentication and session security; cannot be disabled
• Performance cookies: Collect information on how users use the platform for improvement purposes; can be disabled without affecting core functionality
• Preference cookies: Store your settings and preferences such as language and display options for a convenient future experience
• Analytics cookies: Help us understand overall usage patterns in aggregated, non-personally identifiable form

6. Data Retention Period

TopOne retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. Retention periods vary by data type:

• Active account data: Retained for the duration that your account remains active and in use on the platform
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial legal requirements
• KYC records: Retained for 5 years after account closure for compliance and audit purposes
• Security logs: Retained for 12 months for investigation and security purposes
• Support communication data: Retained for 3 years for reference and service improvement purposes

Once the designated retention period has ended, your data will be securely deleted or anonymised using procedures that comply with international security standards.

7. Your Rights as a User

Under the Personal Data Protection Act (PDPA) and the privacy principles we uphold, you have several important rights regarding your personal data stored in topone's systems.

• Right of Access: You may request a copy of the personal data we hold about you at any time
• Right to Rectification: If your data is inaccurate or out of date, you have the right to request immediate correction
• Right to Erasure: You may request deletion of your personal data, subject to legal obligations that may prevent full deletion within certain periods
• Right to Restriction of Processing: In certain situations, you may request that we limit how we use your data
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another service
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time

To exercise any of the above rights, please contact the TopOne customer support team. We will process your request within 30 business days of receipt. For further privacy enquiries, please refer to our FAQ us.

8. Data Security and Protection Measures

TopOne continuously invests in the latest security infrastructure to protect your personal data. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption for all data communications between client and server
• Two-factor authentication (2FA) that users can enable for an extra layer of protection
• 24/7 security monitoring by an experienced cybersecurity team
• Regular penetration testing by accredited independent parties
• Strict access control with minimum privilege principles for internal staff
• Automated data backups and a tested disaster recovery plan

9. Cross-Border Data Transfers

In operating the platform, some of your personal data may be processed or stored outside Malaysia by the cloud and infrastructure service providers we use. In all cases, topone ensures that such data transfers are carried out with protections equivalent to Malaysian legal requirements.

We only work with providers that hold recognised data security certifications such as ISO 27001 and SOC 2, and that operate under a robust and enforceable data protection framework.

10. Changes to This Privacy Policy

TopOne reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The "Last Updated" date at the top of this document will always indicate the date of the most recent revision.

For significant changes, we will notify you via your registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated terms. For enquiries related to this policy, visit the FAQ us or read our Terms and Conditions for full details.