Official Documents

Privacy Policy topk10 — Your Data Security Is Our Priority

Topk10 is committed to protecting the privacy and security of your personal data. This Privacy Policy clearly explains how we collect, use, store, and safeguard your information throughout your use of the platform.

Updated: 1 January 2026  |  Bahasa Malaysia (ms-MY)

This Privacy Policy is topk10's written commitment to every user of our platform. We take this responsibility seriously because we understand that your trust in us begins with the confidence that your personal information is in safe and responsible hands.

1 Introduction & Scope of This Policy

Topk10 ("we", "Platform", "topk10") is the operator of an online gaming platform accessible via the official website at topk10.net and our official mobile app. This Privacy Policy applies to all users who register, access, or use any services offered by topk10.

We recognise your right to know exactly how your personal data is handled. This document is written in clear, plain language — not convoluted legal jargon — so you truly understand the rights and protections you hold as a topk10 user.

By using the topk10 platform, you agree to the terms of this Privacy Policy. This Policy should be read together with Terms and Conditions which forms part of the overall agreement between you and topk10.

This Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

2 Types of Personal Data We Collect

Topk10 only collects data that is strictly necessary for the purposes stated in this policy. We do not collect excessive or irrelevant data beyond the services we provide.

Data Category Example Information Requirements
Identity Data Full name, date of birth, national identity card / passport number Mandatory (KYC)
Contact Data Email address, phone number, residential address Mandatory
Account Data Username, password (encrypted), login history Mandatory
Financial Data Bank account number, e-wallet details, transaction history Mandatory (payment)
Usage Data Game history, wagering activity, game preferences Platform Operations
Technical Data IP address, device type, operating system, access logs Security
Communication Data Support chat records, emails, complaints Customer Support

We do not collect sensitive data such as health information, biometric data or religious beliefs unless specifically required by applicable law.

3 How We Collect Data

Your personal data is collected through the following channels when you interact with the topk10 platform:

  • Account Registration: When you complete the registration form, you directly provide us with basic information such as your name, email address, and phone number.
  • KYC (Know Your Customer) Process: Identity verification documents you submit — including your MyKad or passport and proof of address — are collected during the account verification process.
  • Financial Transactions: Every deposit and withdrawal you make via FPX, DuitNow, Touch 'n Go, or GrabPay records the financial data necessary for secure payment processing.
  • Platform Usage: Our system automatically logs your activity on the platform, including games played, wagering amounts, and session duration.
  • Devices & Connections: Technical data such as IP addresses, browser information, and device type are collected automatically through standard technology for security and verification purposes.
  • Communications with Us: When you contact our support team via live chat or email, the content of that communication is stored for records and service follow-up.
  • Cookies & Tracking Technologies: The topk10 platform uses session cookies and preference cookies to improve your user experience — as detailed in Section 7.
topk10 never purchases personal data lists from third parties or collects your information from external sources without your knowledge.

4 Purpose of Personal Data Use

Topk10 uses your personal data solely for legitimate purposes directly related to the provision of platform services. Below are the primary purposes for which your data is used:

  • Account Management: Creating, verifying and securely managing your user account.
  • Payment Processing: Processing deposits and withdrawals quickly and securely through approved payment providers.
  • KYC & AML Compliance: Fulfilling legal obligations related to identity verification and Anti-Money Laundering (AML) compliance.
  • Account Security: Detecting and preventing unauthorised access, fraud and suspicious activity on your account.
  • Experience Personalisation: Offering game recommendations, promotions and content tailored to your gaming preferences.
  • Service Communications: Sending important notifications regarding your account, transactions, security updates and changes to terms.
  • Customer Support: Providing accurate and effective assistance whenever you need support from our team.
  • Platform Improvements: Analysing usage patterns to continuously improve the performance, usability and security of the topk10 platform.
  • Marketing (with consent): Sending promotional information and exclusive offers — only if you have agreed to receive marketing communications.
topk10 does not use your data to make fully automated decisions that have a significant impact on your rights without human review. Every important decision involves manual review by our team.

5 Data Storage & Security

Topk10 continuously invests in the latest security infrastructure to ensure your personal data is protected at every stage — both in transit and at rest.

Our Technical Security Measures:

  • Data in transit is encrypted using TLS 1.3 protocol, while data stored in our database is protected with AES-256 encryption.
  • Two-factor authentication (2FA) is available for all user accounts to add an extra layer of protection.
  • Our servers are protected by multi-layered firewalls and intrusion detection and prevention systems (IDS/IPS) that operate around the clock.
  • Regular security audits are conducted by independent third parties to assess and strengthen our platform's security posture.
  • User passwords are never stored in plain text — they are processed through a robust hashing algorithm with random salting.
  • Access to users' personal data on our end is restricted to staff who genuinely require it to carry out their duties.

Data Retention Period:

Your personal data is retained for as long as your account is active, plus any period required by applicable law. Generally, financial records are kept for seven (7) years in accordance with compliance requirements, while technical log data is retained for twelve (12) months. Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.

topk10's primary servers are housed in Tier III-rated data centres equipped with physical protection, biometric access controls and redundant backup systems to ensure service continuity and data security.

6 Data Sharing with Third Parties

Topk10 does not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent. However, there are certain situations where we need to share your information with selected parties:

  • Payment Providers: Information required to process transactions is shared with licensed payment providers such as FPX, DuitNow, Touch 'n Go and GrabPay. They are bound by strict data protection agreements.
  • Game Software Providers: The minimum data required to run games is shared with our game software providers, subject to confidentiality agreements.
  • Identity Verification Services: For the KYC process, your identity documents may be verified by a licensed and trusted third-party identity verification service provider.
  • Legal Authorities: We will disclose your data when required by law, court order or official request from law enforcement agencies.
  • Auditors & Professional Advisors: Our lawyers, accountants and auditors may access data necessary to carry out their professional duties, subject to strict confidentiality obligations.

All third parties that receive topk10 user data are required to comply with data protection standards equivalent to this policy. We do not permit them to use that data for any purpose other than those specified.

7 Cookies & Tracking Technologies

The topk10 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform usage patterns. Below are the types of cookies we use:

Types of Cookies Purpose Duration
Essential Cookies Maintaining your login session and ensuring the platform functions correctly Until logout
Preference Cookies Remembering your language settings, theme and display preferences 30 days
Analytics Cookies Helping us understand how users interact with the platform for continuous improvement 12 months
Security Cookies Detecting suspicious activity and protecting your account from unauthorised access Current session

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the topk10 platform. We do not use third-party cookies for advertising purposes.

8 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by topk10:

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to request correction of any inaccurate or outdated personal data.
  • Right to Erasure: Under certain circumstances, you have the right to request deletion of your personal data, subject to legal obligations requiring us to retain it.
  • Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances as provided by law.
  • Right to Object: You have the right to object to the use of your data for direct marketing purposes at any time.
  • Right to Withdraw Consent: If data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of processing already carried out.
To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will process your request within 30 business days.
Some data deletion requests may not be fully fulfilled if the data is still required to meet legal obligations, resolve disputes, or enforce our agreements.

9 Children's Data Protection

The topk10 platform is a service exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

Should we discover that personal data of an underage child has been collected without our knowledge — whether through age falsification or other means — we will take immediate action to:

  • Closing the account in question immediately.
  • Deleting all related personal data from our systems.
  • Returning any remaining balance to the original payment method used.

If you are a parent or guardian who believes your underage child has registered an account at topk10, please contact us immediately so we can take the appropriate action without delay.

10 Amendments to the Privacy Policy

Topk10 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or service improvements.

When significant amendments are made, we will:

  • Displaying an updated "Last Updated" date at the top of this page.
  • Sending email notifications to all registered users at least seven (7) days before any changes take effect.
  • Displaying a special in-platform notice at login to ensure you are aware of the changes.

Continued use of the topk10 platform after the amendment's effective date constitutes your acceptance of the revised Privacy Policy. If you disagree, you have the right to close your account before that date.

11 Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you at any time:

  • Privacy Email: [email protected] (subject: Privacy Enquiry)
  • Live Chat: Available directly on the platform after login, 24/7
  • Response Time: Privacy-related enquiries are prioritised and typically responded to within 1–3 business days.

You may also visit the FAQ for instant answers to frequently asked questions, or contact us via About Us page for more information about topk10.

If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body responsible for overseeing PDPA compliance in the country.
Rights Your Privacy at topk10

We guarantee that every one of these user rights is fully upheld. Find out what you are entitled to as a registered topk10 user.

Right to Data Access

You may request a complete copy of all personal data we hold about you at any time through customer support.

Right to Rectification

Inaccurate or outdated data can be corrected by contacting us. We will update your records within 7 business days.

Right to Erasure

You may request deletion of your personal data, subject to legal obligations requiring us to retain it for a specified period.

Right to Object

You can easily opt out of your data being used for direct marketing or specific purposes through your account settings.

Right to Restrict Processing

In certain situations, you may request that we limit how we use your data while a dispute is being resolved.

Withdraw Consent

Any consent you have previously given for data processing may be withdrawn at any time without affecting prior activities.

Why Your Data Secure With topk10

We invest in best-in-class security infrastructure so you can play with peace of mind, without worrying about your privacy.

TLS 1.3 & AES-256 Encryption

All data transmitted between your device and topk10 servers is protected with the latest TLS 1.3 encryption. Stored data is secured with military-grade AES-256 encryption — the highest security standard in the industry.

Two-Factor Authentication (2FA)

Topk10 provides two-factor authentication for all user accounts. With 2FA enabled, even if your password is compromised, your account remains secure as it requires additional verification on your device.

Independent Security Audit

The topk10 platform undergoes regular security audits conducted by independent third-party audit firms. These audit reports ensure there are no hidden vulnerabilities in our systems that could expose user data.

Limited Data Access (Need-to-Know)

Only topk10 staff who genuinely require access to your data are permitted to view it. All access is logged and monitored. No staff member may access user data without valid approval and justification.

24/7 Fraud Monitoring

Our automated fraud detection system operates around the clock to identify suspicious activity in your account. Any anomaly will trigger an immediate alert and automatic account protection measures.

Malaysia PDPA Compliance

Topk10's Privacy Policy and data handling practices are designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA), providing you with strong legal protection over your personal data.

Malaysia's Trusted Platform

Register with Confidence — Your Data Always Protected

Topk10 combines the best in gaming entertainment with world-class data security standards. Join Malaysia's growing player community and enjoy a safe, fair, and exciting gaming experience.

256-bit
AES Encryption
24/7
Security Monitoring
100%
PDPA Compliance
18+
Responsible Platform
Bahasa Melayu