Official Documents

Privacy Policy top77
Your Data, Your Rights

Top77 is committed to protecting the privacy of every member. This document transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026 Bahasa Melayu PDPA Compliant
Important Note: This Privacy Policy outlines top77's privacy practices in full. By registering and using the top77 platform, you agree to the collection and use of information as described in this document. Please read it carefully before proceeding.
1 Introduction and top77's Commitment

Top77 takes our responsibility to protect every user's privacy seriously. As an online casino platform operating for the Malaysian market, we fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

This Privacy Policy applies to all users who access top77.best, use the top77 mobile app, or interact with any services provided by top77. It describes the types of personal data we collect, why we need it, how it is used, and the rights you hold in relation to that data.

We believe transparency is the foundation of trust. That is why we have written this Privacy Policy in plain, easy-to-understand language, free of complex and confusing legal jargon.

top77 does not sell your personal data to any third party for marketing purposes. This is a non-negotiable commitment on our part.
2 Types of Personal Data We Collect

Top77 collects your personal data through several different methods, depending on how you interact with our platform. The following are the categories of data we collect:

Data Categories Example Information Collection Methods
Identity Data Full name, date of birth, identity card number, identity card image Registration form, KYC process
Contact Data Email address, phone number, residential address Account registration, profile updates
Financial Data Bank account number, bank name, deposit and withdrawal transaction records Payment processing, financial verification
Game Data Betting history, wins, losses, games played, and session duration Automatic platform activity
Technical Data IP address, device type, web browser, operating system, cookie data Server logs, cookies, tracking technologies
Communication Data Support chat records, emails, and filed complaints Live chat, support email, WhatsApp

We only collect data that is genuinely necessary to provide a safe and quality service. Any request for data beyond the scope of service requirements will have its purpose explicitly stated.

3 Purpose of Data Collection and Use

The personal data we collect is used for the following purposes, each directly related to the provision of top77's services:

  • Account Management: Creating, verifying and maintaining your user account, including the KYC process required to comply with financial regulations.
  • Transaction Processing: Processing deposits, withdrawals and bonus payments securely through approved payment channels.
  • Legal Compliance: Fulfilling legal obligations including anti-money laundering (AML) requirements, fraud prevention and reporting to regulatory bodies.
  • Customer Support: Providing technical assistance, resolving enquiries and complaints, and maintaining communication records for future reference.
  • Platform Security: Detecting and preventing fraud, unauthorised multi-account usage, bot activity and other security threats.
  • Experience Personalisation: Personalising game recommendations, promotions and communications based on your preferences and gameplay patterns.
  • Marketing Communications: Sending promotional information, the latest bonuses and exclusive offers – only if you have given your consent to receive them.

We will not use your data for any purpose outside the list above without first obtaining your consent. Should there be any change in the purpose of data use, you will be notified via email or an in-platform notification.

4 Lawful Basis for Data Processing

Top77 processes your personal data on valid legal grounds in accordance with Malaysia's PDPA. There are four primary bases we rely on, depending on the type of processing involved:

  • Contract Performance: Processing required to fulfil the contractual obligations between top77 and you as a registered member – including deposit processing, withdrawals and account management.
  • Legal Obligation Compliance: Processing required to comply with applicable Malaysian law, including AMLA (Anti-Money Laundering Act) requirements and directives from regulatory bodies.
  • Legitimate Interest: Processing for platform security purposes, fraud prevention and service improvement – where these interests do not override your privacy rights.
  • Consent: For marketing communications and advanced personalisation, we rely on the explicit consent you provide during registration or at a later time. You may withdraw this consent at any time.
5 Data Sharing with Third Parties

Top77 does not sell or rent your personal data to any third party. However, there are limited situations where we need to share data to keep our services functioning properly:

  • Payment Processors: FPX, local banks, and digital wallet providers such as Touch 'n Go and GrabPay receive the transaction data necessary to process your deposits and withdrawals. These providers are bound by strict data protection agreements.
  • Game Software Providers: Companies such as Pragmatic Play, Evolution Gaming, and NetEnt may receive limited game session data to ensure game integrity and RTP accuracy.
  • KYC Services: Trusted third-party identity verification providers help us securely verify your identity documents. They receive only the minimum data necessary.
  • Regulatory Bodies and Law Enforcement: top77 will disclose user data to authorities only when required by law, court order, or official investigation. We do not voluntarily disclose data to third parties without a legal requirement.
  • What We Don't Do: top77 does not share your data with third-party advertisers, data brokers, marketing companies, or any party not named in this Privacy Policy.

All third parties working with top77 are bound by strict data processing agreements and are required to protect your information to the same or higher standards that we apply.

6 Data Storage and Security Measures

Your data security is top77's top priority. We continuously invest in the latest security infrastructure to ensure your information is protected at all times.

  • 256-bit SSL Encryption: All data transmitted between your device and top77's servers is protected with 256-bit SSL encryption — the same standard used by major banking institutions worldwide.
  • Secure Servers: Your data is stored in ISO 27001-certified data centres with strict physical and digital access controls, 24/7 monitoring, and redundant backup systems.
  • Two-Factor Authentication (2FA): top77 fully supports 2FA for your account, adding an extra layer of security that prevents unauthorised access even if your password is compromised.
  • Periodic Security Audits: Independent security audits are conducted every six months by certified cybersecurity firms to identify and patch any vulnerabilities.
  • Retention Period: Active account data is retained for as long as your account remains active. Once an account is closed, data is kept for 7 years for legal compliance and financial audit purposes, then securely deleted.
While we take all reasonable security measures, no system is 100% secure. In the event of a data breach involving your information, top77 will notify you within 72 hours of the incident being detected, in line with best practices in data protection.
7 Your Rights Under the PDPA

As a top77 user and an individual protected under Malaysia's PDPA, you have the following rights regarding your personal data:

Your Rights Under Malaysia's PDPA

Malaysia's PDPA gives you full control over your personal data. top77 fully respects and supports all of these rights.

Right of Access

You have the right to request a copy of all personal data we hold about you. We will fulfil this request within 21 working days.

Right to Rectification

If your data is inaccurate or outdated, you have the right to request an immediate correction. Profile updates can be made directly through your account settings.

Right to Erasure

You may request the deletion of your personal data when it is no longer required for the stated purposes, subject to legal data retention obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. You may opt out via the unsubscribe link in our emails.

Right to Data Portability

You may request your data in a machine-readable format (JSON/CSV) for transfer to another service if needed.

Right to Restriction of Processing

In certain circumstances, you have the right to request that we restrict the processing of your data while a dispute is being resolved, without deleting it entirely.

How to Exercise Your Rights: To submit any personal data rights request, contact top77's Data Protection Officer (DPO) by email at [email protected] with the subject line "Personal Data Rights Request – [Account Number]". All requests will be processed within 21 business days.
8 Cookies and Tracking Technologies

Top77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

  • Essential Cookies (Required): Required for core platform functions such as login, session security, and language settings. These cookies cannot be disabled as the platform will not function without them.
  • Analytics Cookies: Helps us understand how users interact with the platform in order to improve the experience. This data is collected in aggregate and does not identify individuals.
  • Functional Cookies: Remembering your preferences such as language, display settings and login details for your convenience.
  • Responsible Gaming Cookies: Tracking the session time limits and wagering limits you have set yourself to help you maintain control over your gambling activity.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect platform functionality. For more information on managing cookies in popular browsers, please refer to your browser's help documentation.

9 Children's Data Protection

Top77 is an online gambling platform restricted to individuals aged 18 and above only. We do not knowingly collect, store, or process the personal data of any individual under the age of 18.

Strict Prohibition: If we discover that personal data of a child has been inadvertently collected, we will take immediate action to delete that information and close the associated account. Parents or guardians who become aware of a child under their care using the platform are asked to contact us immediately at [email protected].

Top77 employs age verification mechanisms during registration, including date of birth checks and identity document verification through the KYC process, to ensure all users meet the required age limit.

10 Amendments to the Privacy Policy

Top77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. All amendments take effect immediately upon publication on the platform unless stated otherwise.

For material or significant amendments, we will:

  • Sending email notifications to all registered members at least 14 days before amendments take effect.
  • Displaying prominent notices on the platform's main page and within your account upon login.
  • Maintaining an archive of previous versions of the Privacy Policy for your reference.

Continued use of the top77 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes, you have the right to close your account and request deletion of your data.

11 Contact Us – Data Protection Officer

For any questions, concerns, or requests related to your privacy and personal data protection, please contact top77's Data Protection Officer (DPO):

  • DPO Email: [email protected] (Subject: "Privacy Enquiry – [Account Number]")
  • Live Chat: Available 24/7 directly through the top77 platform — select the "Privacy & Data" category
  • Response Time: General enquiries are answered within 24 hours. Official data rights requests are resolved within 21 business days.

If you are dissatisfied with how top77 handles your personal data, you have the right to lodge a complaint with the Department of Personal Data Protection (PDPA) Malaysia, the regulatory body responsible for enforcing the PDPA in Malaysia.

Why top77 Takes Your Privacy Seriously

Privacy is not merely a legal obligation for us – it is a core value that shapes every product and operational decision we make.

Military-Grade Encryption

All your sensitive data is protected with AES-256 encryption — the same technology used by government agencies and leading financial institutions worldwide.

Secure and Trusted KYC

Our identity verification process uses accredited KYC platforms that comply with international standards. Your documents are reviewed for verification purposes only and are not stored indefinitely.

Malaysia PDPA Compliance

Top77 operates in full compliance with Malaysia's Personal Data Protection Act 2010. Our compliance team ensures all data processes remain consistently aligned with legal requirements.

No Data Sales to Advertisers

We have never and will never sell, rent, or share your personal data with third-party advertising networks or data brokers for any marketing purpose.

Full Control in Your Hands

Through your account settings, you can manage your privacy preferences, control marketing communications and submit data requests at any time without contacting support.

Independent Audit Twice a Year

An independent cybersecurity firm conducts a comprehensive audit of our systems every six months to ensure security and privacy standards are consistently maintained and up to date.

Register with Confidence – Your Data is Protected

Now that you understand how top77 protects your privacy, register an account today and enjoy the best online casino experience in Malaysia with complete peace of mind.

PDPA Compliant 256-bit SSL Secure KYC 24/7 Support
Bahasa Melayu