Privacy Policy

1. Who We Are

topup77 ("topup77", "we", "us", "our") operates the online casino and sports betting platform accessible at topup77.co (the "Platform"). This Privacy Policy applies to all personal data collected by topup77 in connection with the use of our Platform, Services, customer support, and marketing communications.

topup77 is the data controller responsible for your personal data. We process personal data in accordance with applicable data protection legislation and in compliance with the standards required by our international gaming authority licensing obligations.

By registering an account on topup77 or by otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

topup77 collects only the personal data that is necessary for us to provide our Services securely and in compliance with our regulatory obligations. The categories of personal data we may collect include:

topup77 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where required for responsible gaming assessments or as mandated by applicable law.

3. How We Collect Your Data

topup77 collects personal data through the following means:

• Direct interactions: Information you provide when registering your topup77 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys.
• Automated technologies: As you interact with topup77.co, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. See Section 9 for more detail.
• Third parties: Identity verification and fraud prevention data from KYC service providers; payment verification data from payment processors including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank; geolocation data from IP intelligence providers.

4. How We Use Your Personal Data

topup77 uses the personal data we collect for the following purposes:

• To create and manage your topup77 account, including account verification and security;
• To process deposits, withdrawals, and all financial transactions on the Platform;
• To verify your identity and age in compliance with KYC and AML regulatory requirements;
• To detect, prevent, and investigate fraud, money laundering, and other prohibited conduct;
• To provide customer support and respond to your enquiries;
• To deliver and personalise the topup77 gaming experience, including game recommendations and promotional offers where you have opted in;
• To monitor gameplay patterns for responsible gaming purposes and to implement player protection measures where required;
• To comply with our obligations under international gaming authority licensing, applicable laws, and regulatory requirements;
• To improve the topup77 platform through aggregated analytics and user feedback;
• To send transactional communications (account confirmations, security alerts, deposit and withdrawal notifications) — these cannot be opted out of as they are necessary for the delivery of the Services.

5. Legal Basis for Processing

topup77 relies on the following legal bases for processing your personal data:

• Contract performance: Processing necessary to enter into and perform the contract with you (i.e., providing the gaming Services you have registered to use).
• Legal obligation: Processing required to comply with KYC, AML, and responsible gaming requirements imposed by our international gaming authority licensing obligations and applicable law.
• Legitimate interests: Processing for fraud prevention, platform security, analytics, and improving our Services, where such interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications and personalised offers, where you have given explicit consent and which you may withdraw at any time.

6. Sharing Your Personal Data

topup77 does not sell your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank, solely to process your deposits and withdrawals;
• KYC and identity verification providers: To verify your age and identity as required by our regulatory obligations;
• Fraud and AML screening services: To detect and prevent financial crime and comply with anti-money laundering obligations;
• IT and cloud service providers: Who provide infrastructure, hosting, and security services to topup77 under binding data processing agreements;
• Regulatory and law enforcement authorities: Where topup77 is required to disclose data under applicable law, court order, or regulatory directive;
• Game software providers: Who supply the games available on topup77 and who may receive aggregated, non-identifiable usage data for game performance purposes.

All third parties engaged by topup77 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with topup77's documented instructions.

7. International Data Transfers

topup77 operates under international gaming authority licensing, and some of our service providers and game suppliers are located outside Malaysia. Where personal data is transferred internationally, topup77 ensures that such transfers are subject to appropriate safeguards, including standard contractual clauses approved by relevant data protection authorities or equivalent data transfer mechanisms.

8. Data Retention

topup77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying our legal, regulatory, accounting, and reporting requirements. Specifically:

• Account and identity data: retained for a minimum of five (5) years following account closure, as required by anti-money laundering regulations.
• Financial transaction records: retained for a minimum of seven (7) years in compliance with applicable financial recordkeeping requirements.
• Customer support records: retained for three (3) years from the date of the relevant interaction.
• Marketing data: retained until you withdraw consent or opt out of marketing communications.

After the applicable retention period has expired, topup77 will securely delete or anonymise your personal data.

9. Cookies & Tracking Technologies

topup77 uses cookies and similar tracking technologies on topup77.co to enhance your experience, maintain session security, and gather analytical insights that help us improve the Platform. The types of cookies we use include:

• Strictly necessary cookies: Required for the Platform to function correctly, including login session management and security tokens. These cannot be disabled.
• Analytical/performance cookies: Collect aggregated, anonymised information about how Players use topup77, enabling us to improve platform performance and navigation.
• Functionality cookies: Remember your preferences (such as language settings) to provide a more personalised experience on topup77.
• Targeting/marketing cookies: Used with your consent to deliver relevant promotional content and to measure the effectiveness of marketing campaigns.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of topup77.co.

10. Your Data Protection Rights

Depending on applicable law, you may have the following rights in relation to the personal data topup77 holds about you:

• Right of access: Request a copy of the personal data topup77 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data in certain circumstances (subject to our legal retention obligations).
• Right to restriction: Request that topup77 restricts processing of your personal data in certain circumstances.
• Right to data portability: Receive your personal data in a structured, machine-readable format and transfer it to another controller, where technically feasible.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat or email at [email protected] (plain text — not a clickable link). topup77 will respond to your request within 30 days of receipt.

11. Children's Privacy

topup77 strictly prohibits access by persons under 21 years of age. We do not knowingly collect personal data from individuals under the age of 21. If topup77 becomes aware that personal data has been collected from a person under 21, we will immediately close the relevant account, return any deposited funds to the originating payment method, and securely delete all associated personal data.

If you believe a person under 21 has registered a topup77 account, please contact us immediately via our 24/7 live support chat.

12. Security Measures

topup77 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and topup77.co;
• Encrypted storage of passwords using industry-standard hashing algorithms — topup77 never stores passwords in plain text;
• Two-factor authentication (2FA) available on all topup77 accounts;
• Server-side rate limiting and brute-force protection on all login endpoints;
• Regular security audits and penetration testing by independent security professionals;
• Role-based access controls ensuring topup77 staff access only the data necessary for their job functions;
• Incident response procedures to detect, respond to, and report any data breach in compliance with applicable regulatory requirements.

13. Marketing Communications

topup77 may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, and platform updates where you have provided consent to receive marketing communications.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any topup77 marketing email;
• Updating your communication preferences in your topup77 account settings; or
• Contacting topup77 support via live chat.

Opting out of marketing will not affect delivery of transactional communications (such as deposit confirmations and security alerts) which are essential to the delivery of the Services.

14. Third-Party Links

topup77.co may contain links to third-party websites or services. This Privacy Policy applies solely to data processed by topup77 on topup77.co. topup77 has no control over, and accepts no responsibility for, the privacy practices or content of any third-party websites. We encourage you to review the privacy policy of any third-party site you visit.

15. Updates to This Privacy Policy

topup77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. Material changes will be communicated to registered Players by email or by a prominent notice on topup77.co. The "Last updated" date at the top of this policy reflects when the most recent revision was made.

Continued use of topup77's Services following any update to this Privacy Policy constitutes your acknowledgement of the revised policy. We recommend reviewing this page periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data topup77 holds about you, please contact our Data Protection team:

• Live Chat: Available 24/7 on topup77.co — average response under 3 minutes.
• Email: [email protected] (plain text — not a clickable link)

topup77 is committed to resolving all privacy-related enquiries promptly and transparently. We will acknowledge your request within 5 business days and aim to fully resolve it within 30 calendar days.