Official Privacy Document

Privacy Policy top508 – Player Personal Data Protection

Top508 takes every player's privacy seriously. This document transparently explains how we collect, use, store, and protect your personal information when you use our platform.

Last updated: 1 January 2026

Data Secure

256-bit SSL encryption on all data

No Data Sales

Your data is never sold to third parties

User Control

Right to access, amend & delete data

Cookie Policy

Transparent & limited use of cookies

Retention Period

Data is only retained for as long as necessary

Breach Notification

Immediate notification in the event of an incident


top508's Commitment: Your privacy is not merely a legal obligation to us — it is a moral responsibility we take seriously. This Privacy Policy is written in plain language so you know exactly what happens to your personal data on the top508 platform.

1

Introduction

Top508 ("we", "Platform") is an online betting platform operator committed to protecting the privacy of every user who accesses our services. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information.

This policy applies to all users who register an account, browse the top508 website, use our mobile app, or interact with any of our services. By continuing to use the top508 platform, you agree to the practices described in this Privacy Policy.

We comply with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA) and adopted international standards. If you have any questions about how we handle your data, please contact our privacy team using the details provided at the end of this document.

2

Information We Collect

Top508 only collects information that is genuinely necessary to provide you with a safe, seamless, and responsible service. The following are the categories of information we may collect:

Personal Identification Information

  • Full name as shown on your identity card or passport.
  • Date of birth and gender.
  • Email address and mobile phone number.
  • Current residential address.
  • Identity card or passport number (for the KYC process).

Financial Information

  • Bank name and bank account number for withdrawal purposes.
  • E-wallet information (TNG eWallet, GrabPay, Boost, and others).
  • Records of deposit and withdrawal transactions.

Platform Usage Information

  • Records of wagering activity and game history.
  • IP address and general location data.
  • Device type, operating system, and browser used.
  • Records of login and logout times.
  • Cookie data and session identifiers.
Data Category Primary Purpose Legal Basis
Identification Data Identity verification & KYC Legal obligation
Financial Data Deposit & withdrawal processing Contract fulfilment
Usage Data Security & service improvement Legitimate interest
Communication Data Customer support & notifications User consent
3

How We Use Your Information

All information collected by top508 is used for clear and legitimate purposes. We do not use your data beyond the scope stated below:

  • Account management: To create, verify, and securely maintain your user account.
  • Transaction processing: To process deposits, withdrawals, and all other financial transactions accurately and promptly.
  • KYC Compliance: To fulfil identity verification requirements in compliance with anti-money laundering laws.
  • Platform security: To detect and prevent fraud, account abuse, and suspicious activity.
  • Service improvement: To analyse usage patterns and enhance the gaming experience on top508.
  • Service communications: To send important notifications related to your account, transactions, and platform updates.
  • Promotions (with consent): To inform you about the latest top508 offers, bonuses, and promotions if you have agreed to receive marketing communications.
  • Legal compliance: To meet reporting obligations to the relevant regulatory authorities when required by law.

Our Commitment: top508 will not use your data to make automated decisions that materially affect you without human oversight, except in cases of fraud detection that clearly require immediate action.

4

Information Sharing and Disclosure

Top508 does not sell, rent, or trade your personal information to any third party for marketing purposes. However, there are limited situations where we may need to share your data:

Trusted Service Providers

We work with carefully selected third-party service providers to help operate the platform, including payment processors, cloud computing services, and analytics platforms. All such providers are bound by strict confidentiality agreements and may only use your data for the purposes we specify.

Legal requirement

Top508 may disclose user information to law enforcement authorities, financial regulators, or relevant government bodies when:

  • Required by court order or applicable law.
  • Required to comply with anti-money laundering (AML) reporting obligations.
  • There is a serious threat to public safety that must be reported.

Business Transfer

Should top508 be involved in any merger, acquisition, or sale of assets, user information may be transferred as part of that transaction. We will notify you in advance and ensure that the recipient upholds equivalent privacy standards.

Our Commitment: In all cases of data sharing, top508 ensures that only the minimum necessary information is shared, and all recipients are bound by equivalent data protection obligations.

5

Data Security

Protecting your personal data is top508's highest priority. We implement multiple layers of technical and organisational security to ensure your information stays safe at all times:

Technical Security

  • 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
  • Data encryption at rest for all sensitive information stored in our databases.
  • Two-factor authentication (2FA) available and encouraged for all user accounts.
  • 24/7 Monitoring by our cybersecurity team to detect any unusual activity.
  • Penetration testing conducted periodically by independent third parties to identify and address system vulnerabilities.

Access Control

Access to users' personal data within top508's internal systems is strictly restricted based on the principle of "minimum access rights". Only staff who genuinely require access to specific data to perform their duties will be granted permission, and every access is logged for audit purposes.

Incident Reporting: In the event of a data breach affecting your personal information, top508 will notify you within 72 hours of the incident being identified, in line with international best practices.

6

Cookie Policy

Top508 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of Cookies We Use

  • Essential Cookies: Required for the platform to function properly, such as maintaining your login session. These cookies cannot be disabled.
  • Performance Cookies: To collect information on how you use the platform and help us make improvements. All data is collected anonymously.
  • Functional Cookies: To remember your preferences such as language, currency, and other settings for a more personalised experience.
  • Analytics Cookies: To help us understand overall traffic patterns and platform usage through trusted third-party analytics tools.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the top508 platform.

7

Data Retention Period

Top508 does not retain your personal data for longer than is necessary for the purposes stated in this Privacy Policy or as required by law.

  • Active account data: Retained for as long as your account remains active on the top508 platform.
  • Financial transaction data: Retained for a minimum of 7 years in accordance with Malaysia's tax and AML legal requirements.
  • KYC records: Retained for 5 years after account closure in line with compliance requirements.
  • Support communication logs: Retained for 2 years for reference and dispute resolution.
  • Server log data: Retained for 12 months for security and technical troubleshooting purposes.

Once the retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8

Your Rights as a User

As a top508 user, you have clear rights regarding your personal data. We respect and facilitate the exercise of these rights:

Right of Access

You have the right to request a copy of all personal data we hold about you.

Right to Rectification

You may request the correction of any inaccurate or incomplete information.

Right to Erasure

You may request the deletion of your personal data, subject to our legal obligations.

Right to Restriction

You may request that we restrict the processing of your data in certain circumstances.

Right to Portability

You may request your data in a structured, portable format.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact the top508 privacy team via email or live chat. We will process your request within 30 business days.

9

Child Data Protection

Top508 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you believe a minor has registered an account on our platform, please contact us immediately so that appropriate action can be taken.

Strict Age Limit: top508 applies age verification during registration and the KYC process to ensure our platform is not accessed by underage individuals. This is our commitment to responsible gambling.

10

Changes to the Privacy Policy

Top508 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Each updated version of the Privacy Policy will display a new "Last Updated" date at the top of this document.

For material and significant changes, top508 will notify registered users via email or in-platform notifications at least 14 days before the changes take effect. Continued use of the platform after notice has been given will be considered acceptance of the updated policy.

We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information.

11

Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, top508's privacy team is ready to assist you.

Live Chat
Available 24 hours, 7 days a week
Privacy Email
Response Time
Within 30 business days

We strive to resolve all privacy-related enquiries fairly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection regulatory authority in your jurisdiction.


Your Data Is Safe with top508

Join over 500,000 Malaysian players who already trust top508. Our platform is built with security and privacy as top priorities — play with peace of mind, win with confidence.

Bahasa Melayu