Data Protection

Top138 Privacy Policy – Protecting Our Malaysia Users' Personal Data Comes First

Your privacy is not merely a legal obligation for us — it is a genuine commitment that shapes how we build and operate every aspect of the TOP138 platform.

Updated: January 2026  |  Language: Malay (Malaysia)

6. How top138 Protects Your Personal Data

Not empty promises — these are real technical and policy measures we have put in place.

256-Bit SSL Encryption

All data transmitted between your device and TOP138's servers is protected by industry-grade 256-bit SSL encryption. No one can intercept your sensitive information.

Data Stored Securely

Personal data is stored on servers protected by strict access controls, multi-layered firewalls, and regular security audits to prevent unauthorised access.

No Data Sales to Third Parties

TOP138 does not sell, rent, or commercialize your personal data to any third party for marketing purposes without your explicit consent.

Restricted Data Access for Staff

Only staff who require access to carry out specific operational duties may view user data, and all access is logged and audited on a regular basis.

PDPA Legal Compliance

Top138's data protection practices comply with the principles of the Personal Data Protection Act (PDPA) and applicable international data protection standards.

Immediate Data Breach Notification

In the event of any data security breach affecting your information, TOP138 is committed to notifying affected users within a reasonable timeframe.

Note: This Privacy Policy explains how top138 collects, uses, stores, and protects your personal data. By using our platform, you agree to the practices described in this document. Please read it alongside Terms and Conditions us.

1Introduction & Scope of This Policy

TOP138 ("we", "the platform", or "TOP138") is a digital entertainment platform operating at top138.vu. We understand that entrusting your personal information to any online platform is a decision that should never be taken lightly. That is why we have written this policy in plain language — so you know exactly what happens with your data.

This Privacy Policy applies to all users who access the top138 platform via the website, mobile app, or any other digital channel operated by us. It covers all aspects of personal data processing from the moment you visit our site through to after you close your account.

If you are under 18 years of age, you are not permitted to use our platform and therefore none of your data should be in our systems.

2Types of Personal Data We Collect

TOP138 only collects data that is genuinely necessary to operate the platform securely and deliver the best experience to you. The following are the categories of data we collect:

Data Category Sample Information Primary Purpose
Identity Data Full name, national ID number, date of birth Identity verification (KYC), legal compliance
Contact Data Email address, phone number Account communications, security notices
Financial Data Bank account number, transaction records Processing deposits and withdrawals
Technical Data IP address, device type, web browser Security and fraud prevention
Usage Data Gaming history, in-platform activity Service improvements, VIP program

We may also receive your data from third-party sources such as identity verification service providers during the KYC process, in line with compliance requirements.

Data Minimization Principle: TOP138 only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant sensitive information beyond what is needed to operate the platform.

3How We Use Your Data

Every piece of data we collect has a clear purpose. We use your personal information for the following:

  • Account management: Creating, verifying, and maintaining your user account on TOP138.
  • Transaction processing: Processing deposits, withdrawals, and all other financial transactions accurately and securely.
  • KYC & AML Compliance: Fulfilling identity verification and anti-money laundering obligations as required by law.
  • Platform security: Detecting and preventing fraud, abuse, and unlawful activity on the platform.
  • Service improvements: Analyzing usage patterns to improve the user experience and platform features.
  • VIP program & promotions: Calculating VIP points, processing cashback, and keeping you informed about relevant offers.
  • Service communications: Sending account notices, security alerts, and important policy updates.
  • Customer support: Resolving inquiries, complaints, and technical issues you report.

TOP138 does not use your data for automated profiling that makes significant decisions about you without human involvement.

4Data Sharing & Disclosure

TOP138 does not sell or rent your personal data. We may share your information only in the following limited circumstances:

  • Trusted service providers: Payment processing companies, identity verification service providers, and technical infrastructure providers that help us operate the platform. All these providers are bound by strict confidentiality agreements.
  • Legal compliance: When required by law, court order, or directive from a competent authority — including the reporting of suspicious activity to anti-money laundering bodies.
  • Protection of our rights: In proven cases of fraud or legal action, relevant information may be shared with law enforcement.
  • Business transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred to the new entity, which will be bound by a privacy policy of equivalent or higher standard.
Reminder: TOP138 will never ask for your password via email, chat, or phone. If anyone claiming to be TOP138 requests your login credentials, it is a fraudulent attempt.

5Cookies & Tracking Technologies

TOP138 uses cookies and similar tracking technologies to enhance your experience on the platform. Here are the types of cookies we use:

  • Essential cookies: Required for core platform functions such as Login sessions and security. Cannot be disabled.
  • Performance cookies: Collecting information on how you use the platform to help us identify issues and make improvements. Data is collected in aggregate and anonymized form.
  • Functional cookies: Saving your preferences such as language, display settings, and login information to deliver a more personalized experience.
  • Analytics cookies: Helping us understand how users interact with the platform as a whole, enabling us to make data-driven decisions.

You can manage cookie usage through your browser settings. However, disabling certain cookies may affect platform functionality.

6Data Security & Encryption

TOP138 invests seriously in security infrastructure to protect your data. The technical measures we implement include:

  • 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
  • Encryption of sensitive data at rest using industry-standard encryption algorithms.
  • Role-based access control — only staff with specific authorisation may access certain data categories.
  • Regular security audits and penetration testing conducted by independent third-party experts.
  • 24/7 monitoring systems to detect unusual activity or unauthorized access attempts.
  • A tested incident response plan to ensure swift action in the event of any security incident.
While no system is 100% immune, TOP138's security measures are among the most comprehensive in Malaysia's digital entertainment industry. We continuously update our protections in line with the latest cybersecurity threats.

7Your Rights as a User

You have certain rights regarding your personal data held by top138. We respect and support the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You may request the correction of inaccurate or incomplete data.

Right to Erasure

You may request the deletion of your data, subject to applicable legal obligations.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your data.

Right to Data Portability

You have the right to receive your data in a machine-readable format.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, contact the TOP138 customer support team via the live chat on the platform. We will respond to your request within 14 business days.

8Data Retention Period

TOP138 does not store your personal data indefinitely. Retention periods are determined based on operational requirements and legal obligations:

  • Active account data: Retained for as long as your account is active and as long as necessary to provide our services.
  • KYC and financial data: Retained for a minimum of 7 years after account closure as required by applicable financial laws.
  • Transaction logs: Retained for 5 to 7 years for audit and compliance purposes.
  • Marketing data: Retained until you withdraw consent or request deletion.
  • Technical data and system logs: Typically retained for 12 months for security and troubleshooting purposes.

Once the retention period expires, data will be securely deleted or anonymized so it can no longer be linked to your identity.

9International Data Transfers

TOP138 may transfer your personal data to servers or service providers located outside Malaysia. Any such data transfers are carried out with adequate safeguards, including:

  • Binding data transfer agreements with third-party providers that meet equivalent data protection standards.
  • Using internationally recognized standard contractual clauses to ensure your data remains protected even outside Malaysia.
  • Regular security assessments of overseas providers that store or process TOP138 user data.

We strive to ensure that all international data transfers meet protection standards at least equivalent to those we apply in Malaysia.

10Children's Privacy

The TOP138 platform is not intended for individuals under the age of 18, and we do not knowingly collect personal data from minors.

Should we discover that personal data of an individual under the age of 18 has been inadvertently collected, we will take immediate steps to delete that information and close the relevant account.

If you discover or suspect that a minor is using the top138 platform, please contact our customer support team immediately.

11Changes to This Privacy Policy

TOP138 reserves the right to update this Privacy Policy from time to time to reflect changes in privacy practices, legal requirements, or new platform features.

When significant changes occur, we will:

  • Updating the "Last updated" date at the top of this document.
  • Displaying a clear notice on the homepage or within user accounts regarding the changes.
  • For changes that materially affect your privacy rights, we may send a direct notification to your registered email.

We encourage you to review this Privacy Policy periodically. Continued use of the top138 platform after any changes take effect constitutes your acceptance of the updated policy terms.

12How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, we are here to help.

You can reach the top138 privacy team through the following channels:

  • Live chat: Available directly on the TOP138 platform, 24 hours a day, 7 days a week.
  • Email: Send your privacy enquiries to [email protected] — we aim to respond within 2 business days.
  • FAQ: Many frequently asked questions about privacy and security have been answered on the FAQ us.
We take every privacy enquiry seriously. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

Your Data Is Safe with top138 — Ready to Get Started?

Create your account today and enjoy a digital entertainment platform that is not only fun, but fully committed to your privacy and security.

Bahasa Melayu