Data Protection

Privacy Policy top77 — Protection of Malaysian Members' Personal Data

We understand how important privacy is to you. This policy clearly explains how top77 collects, uses, stores, and protects the personal information of every member in Malaysia.

Last Updated: 1 January 2026
Our Commitment

How top77 Protects Your Privacy

Six core pillars that shape our approach to protecting every member's personal data.

256-bit SSL Encryption

All data transmitted between your device and top77's servers is protected by industry-standard 256-bit SSL encryption — the same technology used by leading financial institutions worldwide.

No Sharing Without Consent

Top77 has never sold, rented or shared members' personal information with third parties for marketing purposes. Your data is used solely for purposes to which you have given explicit consent.

Secure Data Storage

All personal information is stored on servers protected by strict access controls, multi-layered firewalls, and round-the-clock security monitoring to prevent any unauthorised access.

Full Control in Your Hands

You have the right to access, update, correct, or request deletion of your personal data at any time. Our support team is ready to process your request promptly.

Legal Compliance

Top77's Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection legislation governing our platform's operations.

Breach Notification

In the event of any data security incident involving your information, top77 is committed to notifying affected members within the timeframe required by law.

This Privacy Policy applies to all services provided by top77, including the website, mobile app, and all related services. Please read it carefully. By using our platform, you agree to the terms set out in this Privacy Policy.

1 Introduction

Top77 ("we", "Platform") takes the privacy of every member using our services very seriously. This Privacy Policy has been carefully drafted to explain how we collect, process, store and protect your personal information when you use the top77 platform.

We operate with full transparency and uphold the principle that your personal data belongs entirely to you. We only use it for legitimate, necessary purposes for which you have given consent — whether explicitly during registration or implicitly through your use of our services.

This policy should be read together with the Terms and Conditions and Responsible Gaming Policy us, all of which together form the entire agreement between you and top77.

2 Data We Collect

Top77 collects various types of information depending on how you interact with our platform. This information is divided into three main categories:

a) Information You Provide Directly

  • Full name as shown on official identification documents
  • Identity card number (MyKad) or passport
  • Date of birth and gender
  • Email address and mobile phone number
  • Current residential address
  • Bank account details for deposit and withdrawal purposes
  • Selfie and copy of identity document for the KYC process

b) Information Collected Automatically

  • IP address and device location information
  • Web browser type and operating system in use
  • Platform usage data including pages visited and session duration
  • Transaction records and wagering history within the platform
  • Login data including access time, date, and location

c) Information From Third Parties

  • Identity verification data from recognised KYC service providers
  • Fraud prevention data from security service providers
  • Payment processing data from licensed payment providers
We do not collect sensitive data such as health information, religious beliefs, or political views unless required by applicable law.

3 How We Use Your Data

All data collected by top77 is used responsibly for clearly defined and legitimate purposes. The table below outlines the primary uses of your personal data:

Purpose of Use Data Type Requirement
Account registration & verification Name, IC, date of birth, email Mandatory
Deposit & withdrawal processing Banking information, transaction records Mandatory
Fraud prevention & security IP, login, activity records Mandatory
Customer support Name, email, account history Mandatory
Legal compliance & KYC Identity document, photo Mandatory
Personalisation of user experience Game history, preferences Options
Promotional communications & notifications Email, phone number Withdrawable

Top77 will not use your personal data for any purpose other than those stated above without first obtaining your additional consent. You may withdraw consent for promotional communications at any time by contacting our support team.

4 Legal Basis for Processing

Top77 processes your personal data on lawful legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA). These bases are as follows:

  • Consent — You have provided explicit consent upon registering a top77 account and accepting our Terms and Conditions
  • Contract Performance — Processing is necessary to execute the service contract between you and top77
  • Legal Obligation — All of which together form the entire agreement between you and top77.
  • Legitimate Interest — Processing required for fraud prevention and overall platform security purposes
You have the right to withdraw your consent at any time. However, doing so may affect our ability to continue providing services to you.

5 Data Sharing

Top77 does not sell, rent or disclose members' personal information to any third party for their own marketing purposes. However, there are certain situations where we need to share your data with specific parties:

  • Payment Service Provider — DuitNow, FPX, Touch 'n Go, Boost and other licensed payment providers that process your financial transactions
  • KYC Service Provider — Third parties authorised to carry out identity verification for legal compliance
  • Game Provider — Game software companies providing content on the top77 platform, limited strictly to the technical data required
  • Statutory Authority — Law enforcement agencies or regulatory bodies when required by court order or applicable law
  • Technical Service Provider — Hosting, cybersecurity and infrastructure companies that support the operation of our platform

All third parties receiving personal data of top77 members are bound by strict confidentiality agreements and are only permitted to use that data for the specified purposes. We conduct periodic audits to ensure third-party compliance with our privacy standards.

6 Cookies & Tracking Technologies

Top77 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates smoothly. The types of cookies we use are:

  • Essential Cookies — Required for core platform functions such as login, user sessions and security. Cannot be disabled.
  • Performance Cookies — Collects anonymised data on how users use the platform for technical improvement purposes
  • Functional Cookies — Stores user preferences such as language and display settings to deliver a better experience
  • Analytics Cookies — Helps us understand overall platform usage patterns to improve our services

You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect specific features on the top77 platform. For more information on managing cookies, refer to your web browser's help guide.

We do not use cookies to collect personally identifiable information without your consent. All analytics data is collected in aggregate and anonymised form.

7 Data Security

Protecting your personal data is top77's highest priority. We implement multiple layers of technical and organisational security to ensure your data remains protected at all times:

  • 256-bit SSL/TLS encryption for all data transmissions between you and our servers
  • Encryption at rest for sensitive information stored in our databases
  • Role-based access control (RBAC) — only authorised staff may access members' personal data
  • 24/7 security monitoring by our in-house cybersecurity team
  • Periodic penetration testing conducted by independent security experts
  • Two-factor authentication (2FA) for administrative access to internal systems
  • Automatically encrypted data backups stored at separate locations

While we take all reasonable precautions, no security system can be guaranteed 100% safe. In the event of any material data breach, we will notify affected members and the relevant authorities within the timeframe required by law.

8 Data Retention Period

Top77 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or for as long as your account remains active, whichever is longer. General data retention guidelines are as follows:

  • Active account data — Retained for as long as your account is active and for 7 years after account closure for legal compliance purposes
  • Financial transaction records — Retained for a minimum of 7 years in accordance with financial and tax legal requirements
  • KYC Documents — Retained for 5 years after the date of last verification or account closure
  • Support communication logs — Retained for 3 years for reference and service improvement
  • Cookie and analytics data — Raw data retained for no more than 26 months

Once the retention period expires, your personal data will be securely deleted or converted into an anonymised format that cannot be identified as belonging to any specific individual.

9 Your Rights

As a top77 member, you hold important rights regarding your personal data under applicable data protection laws. We are committed to facilitating the exercise of these rights:

Right of Access

Request a copy of all personal data we hold about you at any time.

Right to Rectification

Request correction of inaccurate or incomplete data in your account.

Right to Erasure

Request deletion of your personal data, subject to applicable legal obligations.

Right to Restrict Processing

Request that we restrict how your data is processed under certain recognised circumstances.

Right to Data Portability

Receive your personal data in a structured, machine-readable format.

Right to Object

Object to the processing of your personal data for specific purposes, including direct marketing.

To exercise any of the above rights, contact the top77 support team via Live Chat on the platform. We will process your request within 30 business days from the date the application is received.

10 International Data Transfers

In the course of its operations, top77 may transfer your personal data to servers or service providers located in other countries. All such transfers are carried out with adequate safeguards to ensure your data remains protected.

The safeguards we apply for international data transfers include:

  • Ensuring recipient countries maintain an equivalent or higher level of data protection
  • Using internationally recognised standard contractual clauses with all external vendors
  • Conducting data protection impact assessments before any new transfer
  • Ensuring third-party vendors outside Malaysia comply with our established privacy standards
International data transfers only occur when necessary to deliver the services you use. We do not transfer your data to countries that lack adequate privacy protection.

11 Children's Privacy

The top77 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

Should we discover that personal data of an underage individual has been collected without our knowledge, we will take immediate action to delete that data and close the relevant account. Parents or guardians who find that their child has registered on the top77 platform are urged to contact our support team immediately.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how top77 handles your personal data, please contact us through the following channels:

  • Live Chat — Available 24 hours a day, 7 days a week directly within the top77 platform
  • Privacy Email — [email protected] (response within 2 business days)
  • Help Centre — Refer to the FAQ us for quick answers to frequently asked questions

We take every privacy complaint seriously and will investigate and respond within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

This Privacy Policy will be updated from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated to you via your registered email or in-platform notification.

Ready to Join Millions of top77 Members?

Your personal data is fully protected under our Privacy Policy. Register now and enjoy a safe, fair, and enjoyable gaming experience with Malaysia's trusted entertainment platform.

Bahasa Melayu