At topup77, your privacy is not an afterthought. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is processed and stored, and what rights you hold as a player. Please read it carefully alongside our Terms & Conditions.
These cards summarise our core privacy commitments. They supplement, but do not replace, the full Privacy Policy below.
topup77 applies data minimisation principles. We collect only the personal information necessary to operate your account, process transactions, complete KYC verification, and fulfil our regulatory obligations. We do not collect data speculatively.
topup77 does not sell, rent, or trade your personal data to any third party for their marketing or commercial purposes. Data shared with third parties is limited to what is strictly required to deliver platform services — game providers, payment processors, and compliance partners.
All data transmitted between your device and topup77.cam is encrypted using industry-standard TLS/SSL protocols. Stored personal data and financial records are protected by AES-256 encryption at rest within secure, access-controlled infrastructure.
You have the right to access, correct, export, and request deletion of your personal data. Requests are handled within 30 days. For account closure and data deletion, contact player support — we will confirm the process and timeline in writing.
topup77 uses strictly necessary cookies for platform operation, performance analytics, and (where you consent) preference storage. No third-party advertising cookies are deployed. You can manage cookie preferences through your browser settings at any time.
Identity documents submitted for KYC — including Malaysian IC (MyKad), Passport, and proof of address — are stored in isolated, encrypted document vaults. Access is restricted to authorised compliance personnel only and governed by strict internal data handling policies.
topup77 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at topup77.cam. In doing so, we process personal data belonging to registered players, website visitors, and applicants for player accounts ("you", "your", "Data Subject").
This Privacy Policy describes our practices with respect to the collection, use, storage, sharing, and protection of your personal data. It applies to all personal data processed through topup77.cam, including data collected during account registration, identity verification (KYC), financial transactions, customer support interactions, and general platform use.
This Privacy Policy should be read together with topup77's Terms & Conditions, which set out the contractual framework governing your use of the platform. By registering an account or continuing to use the topup77 platform, you confirm that you have read and understood this Privacy Policy and consent to the processing described herein to the extent that your consent is required as a legal basis.
Malaysian Users: While Malaysia's Personal Data Protection Act 2010 (PDPA) primarily governs personal data processing carried out in Malaysia by Malaysian entities, topup77 aligns its data handling practices with internationally recognised data protection standards to ensure your information is afforded a high level of protection regardless of jurisdiction.
For the purposes of this Privacy Policy, the following definitions apply:
Any information that directly or indirectly identifies a living individual, including but not limited to: name, identification number, contact details, financial information, IP address, device identifiers, and behavioural data.
Any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction — whether or not by automated means.
topup77, acting as the entity that determines the purposes and means of processing your personal data in connection with the platform and services offered at topup77.cam.
A third party that processes personal data on behalf of topup77, pursuant to a written data processing agreement, including payment service providers, KYC verification partners, and cloud infrastructure providers.
A subset of personal data afforded heightened protection, including identity document data, financial account details, and any data relating to health, biometric characteristics, or criminal records.
topup77 collects personal data through multiple touchpoints across the player lifecycle. The categories of data collected are set out below:
| Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, gender | Registration, KYC |
| Contact Data | Email address, phone number, residential address | Registration, KYC |
| Identity Document Data | MyKad number, Passport number, Driver's Licence number, document images | KYC Verification |
| Financial Data | Payment method identifiers (e-wallet ID, bank account suffix), transaction history, deposit/withdrawal amounts in MYR | Deposits, Withdrawals |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Platform Access |
| Behavioural Data | Games played, wagers placed, betting patterns, session duration, feature usage | Platform Use |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Support Interactions |
| Responsible Gambling Data | Deposit limits set, cooling-off periods activated, self-exclusion requests | RG Tool Usage |
topup77 does not collect or process special category data as defined under international data protection frameworks (such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, or health data) unless voluntarily provided in a support context and strictly necessary to resolve a specific issue.
topup77 processes personal data only where a valid legal basis exists. The primary legal bases relied upon are:
Processing necessary to fulfil our contractual obligations to you as a registered player, including account management, payment processing, game delivery, bonus administration, and withdrawal processing.
Processing required to comply with our obligations under applicable laws and our international gaming licence conditions, including anti-money laundering (AML) requirements, Know Your Customer (KYC) procedures, counter-terrorist financing (CTF) checks, and regulatory reporting obligations.
Processing for purposes that are necessary for our legitimate business interests, including fraud detection and prevention, platform security, responsible gambling monitoring, improvement of platform features, and internal analytics — provided these interests are not overridden by your fundamental rights and freedoms.
Where processing is based on your consent — such as the use of non-essential cookies or the receipt of marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. Withdrawal of consent does not affect the operation of your Account.
topup77 uses the personal data it collects for the following purposes:
topup77 does not use your personal data for automated decision-making that produces significant legal or similarly significant effects on you without human review. If you have concerns about any decision made in connection with your account, you may contact player support to request a human review.
topup77 does not sell, rent, or otherwise trade your personal data to third parties for their independent commercial purposes. We do, however, share personal data with the following categories of third-party service providers and partners, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
To process your deposits and withdrawals, topup77 shares necessary financial and identity data with licensed payment processors facilitating transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency networks. These providers process data only as required to execute the specific transaction.
Identity documents and identity data may be shared with licensed third-party KYC verification services to fulfil our regulatory obligations. These partners are contractually bound to process data solely for verification purposes and to maintain equivalent data security standards.
Game providers may receive limited technical data (such as anonymised session identifiers and wager data) necessary for game operation, RNG auditing, and dispute resolution. Game providers do not receive personally identifiable information beyond what is technically necessary for game delivery.
topup77 uses reputable cloud infrastructure and managed service providers for platform hosting, data storage, and backup. These providers act as data processors under written agreements that prohibit them from using your data for any purpose other than providing the contracted infrastructure services.
topup77 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by applicable law, court order, or where necessary to protect against suspected fraud, money laundering, or other criminal activity. Such disclosures will be limited to what is strictly required by the legal obligation or authority.
topup77 processes payment data in connection with deposits, withdrawals, and bonus transactions. For Malaysian players, this includes transaction data relating to Touch 'n Go eWallet, Boost, GrabPay, DuitNow QR/Transfer, FPX online banking, and cryptocurrency transactions.
topup77 does not store full payment card numbers, CVV codes, or complete bank account credentials. Where partial identifiers (such as the last four digits of a bank account number or the registered phone number of an e-wallet) are retained, they are stored solely for the purposes of verifying withdrawal recipients and maintaining transaction audit trails required by our licensing conditions.
All financial transaction records are retained for a minimum period consistent with our AML and regulatory obligations, as further described in Section 9 of this Policy.
All payment data is transmitted over encrypted connections. topup77 does not accept or process payments via email, instant messaging platforms, or any other unsecured channel. Players are advised to report any request to provide payment information through unofficial channels to player support immediately.
Identity documents submitted by players for KYC verification — including Malaysian IC (MyKad), Passport, Driver's Licence, and proof of address documents — are classified as sensitive personal data and are subject to heightened protection measures.
topup77 will never request your identity documents via WhatsApp, Telegram, SMS, or any unsecured chat channel. All document submissions must be made exclusively through the official KYC upload portal within your Account settings at topup77.cam.
topup77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML / Regulatory |
| KYC identity documents | Duration of account + 5 years post-closure | AML / Legal obligation |
| Financial transaction records | Minimum 5 years from transaction date | AML / Regulatory |
| Responsible gambling records | Duration of account + 5 years post-closure | Regulatory / Duty of care |
| Support communications | 3 years from last interaction | Legitimate interest |
| Technical / log data | Up to 12 months from collection | Legitimate interest |
| Marketing preferences | Until consent withdrawn or account closure | Consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
topup77.cam uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device. We use the following categories of cookies:
Required for the platform to function. Includes session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
Used to collect anonymised data on page views, session duration, navigation patterns, and feature usage. This data is used internally to improve the platform experience. Analytics data is not linked to your personal identity.
Stores your platform preferences such as language settings, display options, and game favourites. These improve your experience but are not essential to platform operation.
topup77 does not deploy third-party advertising or retargeting cookies. No behavioural advertising profiles are built from your platform activity, and your gaming data is not shared with external advertising networks.
You may control and delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will affect your ability to log in and use the platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.
topup77 implements a layered security framework to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:
In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of affected players, topup77 will notify affected individuals without undue delay and will take all reasonable steps to mitigate the impact of the breach.
No security system is impenetrable. While we apply industry-standard safeguards, you play an important role in protecting your own account. Use a strong, unique password, do not share your credentials, and log out of the platform when accessing from a shared device. Contact support immediately if you suspect unauthorised access to your account.
topup77 operates globally distributed infrastructure. As a result, personal data collected from Malaysian players may be processed on servers located outside of Malaysia, including in jurisdictions that may not have equivalent data protection legislation.
Where personal data is transferred internationally, topup77 ensures appropriate safeguards are in place, which may include:
By using topup77, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside of Malaysia, subject to the safeguards described above.
Subject to applicable law and in accordance with internationally recognised data protection principles, you hold the following rights in respect of your personal data processed by topup77:
Request a copy of the personal data we hold about you, including the categories of data, the purposes of processing, and any third parties to whom it has been disclosed.
Request correction of inaccurate or incomplete personal data held in your account. Some corrections may require supporting documentation (e.g., updated proof of address).
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (e.g., AML records).
Request that we temporarily suspend processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing.
Receive a copy of personal data you have provided to us in a structured, commonly used, machine-readable format, where processing is based on consent or contract performance.
Object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing. Where you object to marketing, we will cease that processing immediately.
To exercise any of the above rights, please contact our player support team at [email protected]. We will respond to all valid data rights requests within 30 days. We may request verification of your identity before processing a rights request to ensure we do not disclose data to an unauthorised party.
topup77 strictly prohibits access to and use of the platform by individuals under the age of 21. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21.
As part of the account registration and KYC verification process, topup77 verifies the age of all players. Any account found to be operated by or on behalf of an individual under the age of 21 will be immediately closed, and any personal data collected in connection with such an account will be retained only to the extent required by our regulatory obligations and then securely deleted.
21+ Only: If you are aware that a minor has created an account or submitted personal data to topup77, please contact our support team at [email protected] immediately so we can take appropriate action.
topup77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date at the top of this page will be updated upon any material revision.
Where changes are material — meaning they substantially affect how we collect, use, or share your personal data — topup77 will notify registered players via their registered email address and/or through a prominent notice on the platform prior to the changes taking effect.
Your continued use of the topup77 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised terms, you must cease using the platform and contact player support to arrange Account closure.
If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a concern about our data handling practices, please contact topup77 through the following channels:
Send your enquiry to [email protected] with the subject line "Privacy Policy Enquiry" or "Data Rights Request". We respond to all privacy-related correspondence within 5 business days and to formal rights requests within 30 calendar days.
Our 24/7 live chat team can assist with general privacy questions and can escalate formal data rights requests to the relevant internal team on your behalf.
If you are not satisfied with our response to a privacy concern, you may escalate the matter to topup77's internal complaints procedure. Details of this procedure are available from player support upon request. You may also have the right to lodge a complaint with a relevant data protection authority, depending on your jurisdiction of residence.
Our support team handles all privacy enquiries and data rights requests. Reach us anytime via live chat or email — we're here 24/7.
For players aged 21 and above only. topup77 operates under international licensing. Gambling involves risk — play responsibly.