Your privacy matters to topup33. This policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your information as a user of the topup33 platform.
This Privacy Policy applies to all personal data collected and processed by topup33 in connection with your use of the topup33 website at topup33.co and any related services. By registering an account or using the topup33 platform, you acknowledge that you have read and understood this policy. 21+ topup33 does not knowingly collect personal data from individuals under the age of 21.
1.1 topup33 ("we", "us", "our", "the Platform") is committed to protecting the personal data of our registered players and site visitors. We recognise that the information you share with us — particularly in the context of financial transactions and identity verification — is sensitive, and we take our obligations as a data processor seriously.
1.2 This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read this policy carefully. By using the topup33 platform, you consent to the data practices described herein.
1.3 topup33 operates under international gaming licensing, which imposes specific requirements on how Player data is collected, stored, retained, and disclosed. This policy is designed to meet those obligations as well as the applicable provisions of Malaysia's Personal Data Protection Act 2010 ("PDPA") to the extent applicable to your use of the Platform.
2.1 topup33 is the data controller for personal data collected via the topup33.co website and associated services. As data controller, topup33 determines the purposes and means of processing your personal data.
2.2 Where topup33 engages third-party service providers to process personal data on our behalf — such as payment processors, KYC verification providers, and analytics vendors — those parties act as data processors under topup33's instruction and are contractually bound to process data only as directed and to maintain appropriate security standards.
3.1 Registration Data. When you create a topup33 account, we collect your full legal name, date of birth, email address, phone number, and residential address. This information is required to create and administer your account.
3.2 Identity Verification (KYC) Data. To comply with our licensing obligations and applicable anti-money laundering laws, we collect copies of government-issued identity documents (Malaysian MyKad, passport, or equivalent), and may collect selfie images for facial verification. This data is processed by our licensed KYC verification partner.
3.3 Financial Data. We collect records of your deposits, withdrawals, and transaction history on the Platform. We do not store full payment card numbers or bank account numbers on our servers — these are processed directly by our licensed payment processing partners.
3.4 Gaming Activity Data. We maintain records of your wagering activity on topup33, including games played, bet amounts, outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, and responsible gaming monitoring.
3.5 Technical Data. We automatically collect IP address, device type and identifiers, browser type and version, operating system, referral URL, and pages visited on topup33.co. This data is used for security, fraud prevention, and platform analytics.
3.6 Communications Data. We retain records of communications between you and topup33 support — including live chat transcripts and email exchanges — for quality assurance, dispute resolution, and regulatory record-keeping purposes.
We collect personal data through the following means:
topup33 processes your personal data for the following purposes:
6.1 Contractual Necessity. The majority of processing described in Section 5 is necessary for the performance of the contract between you and topup33 — i.e., the provision of online gaming services under our Terms & Conditions.
6.2 Legal Obligation. Processing for KYC verification, anti-money laundering monitoring, and regulatory record-keeping is required by topup33's licensing obligations and applicable laws. We do not require your consent for this processing — it is a mandatory condition of Platform use.
6.3 Legitimate Interests. Processing for fraud detection, security, analytics, and platform improvement is carried out on the basis of topup33's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
6.4 Consent. Where we send you marketing communications about topup33 promotions and new features, we do so on the basis of your consent, which you may withdraw at any time by updating your communication preferences in your account settings or by contacting topup33 support.
7.1 topup33 does not sell your personal data to third parties. We share your data only in the following circumstances:
7.2 topup33 does not share your personal data with advertisers, data brokers, or social media platforms for commercial targeting purposes.
8.1 topup33 may transfer your personal data to servers or service providers located outside of Malaysia, including in jurisdictions where topup33's gaming licence is held and where our technology infrastructure is based.
8.2 Where we transfer personal data outside of Malaysia, we ensure that appropriate safeguards are in place — including contractual data protection clauses with recipient parties — consistent with applicable data protection standards and our licensing obligations.
9.1 topup33 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations.
9.2 Account and transaction records are typically retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements. KYC documents are retained for the same period.
9.3 Where you withdraw consent for marketing communications, we will cease processing your data for that purpose promptly. Your core account and transaction data will continue to be retained in accordance with this Section 9.
9.4 Upon the expiry of the applicable retention period, topup33 will securely delete or anonymise your personal data such that it can no longer be associated with your identity.
10.1 topup33.co uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and collect analytics data about how the Platform is used.
10.2 The types of cookies we use include:
10.3 You may control or disable non-essential cookies through your browser settings. Note that disabling cookies may affect certain features of the topup33 Platform, including session persistence.
11.1 Subject to applicable law, you have the following rights in relation to your personal data held by topup33:
11.2 To exercise any of the above rights, contact topup33 support via the 24/7 live chat widget on topup33.co or by email at [email protected]. topup33 will respond to verified requests within 30 days. We may require identity verification before processing a data rights request.
12.1 The topup33 Platform is strictly intended for adults aged 21 and above. topup33 does not knowingly collect, process, or retain personal data from individuals under 21 years of age.
12.2 If topup33 discovers or is notified that an account has been registered by a person under the age of 21, that account will be immediately suspended and all personal data associated with it will be deleted or returned to the individual's legal guardian, except where retention is required by applicable law. Any deposits will be refunded to the original payment source.
13.1 topup33 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
13.2 No data transmission over the internet or electronic storage system is 100% secure. While topup33 takes all reasonable precautions, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, topup33 will notify affected Players and relevant authorities in accordance with applicable law.
14.1 topup33 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, changes to the types of data collected or the purposes for which it is used — topup33 will notify registered Players via email to their registered address at least 14 days before the changes take effect.
14.2 Non-material changes (such as clarifications of existing practices or corrections to typographical errors) may be published on the Platform without separate notification. The "Last Updated" date at the top of this policy reflects the date of the most recent revision.
14.3 Continued use of the topup33 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests in relation to this Privacy Policy or topup33's handling of your personal data, please contact us through the following channel:
Live Chat: Available 24/7 via the chat widget on topup33.co — the fastest way to reach us.
Email: [email protected] — responses within 24 hours.
topup33 takes privacy complaints seriously. If you are not satisfied with our response, you may be entitled to refer your complaint to a data protection supervisory authority in the jurisdiction applicable to your situation.
A plain-language summary of the protections in place for every registered topup33 Player
Every connection between your device and topup33.co is secured with SSL/TLS encryption. Your login credentials, financial data, and personal information are protected in transit at all times.
topup33 does not sell your personal data to advertisers, data brokers, or third-party commercial entities. Your information is used only for Platform operations and regulatory compliance.
Identity verification is handled by licensed third-party KYC agencies contracted under strict data processing agreements. topup33 does not store raw identity document images on its own servers.
You can request access to, correction of, or deletion of your personal data at any time. topup33 responds to verified data rights requests within 30 days via live chat or email.
Data is retained only for as long as required — typically five years post-account closure for regulatory records. After that, your data is securely deleted or anonymised.
Two-factor authentication is available on all topup33 accounts. Enabling 2FA means even if your password is compromised, your account remains protected by a second verification step.
Your data is protected. Your account is licensed. Your winnings are paid out in MYR. topup33 is built to give Malaysian players a platform they can trust — from the first login to the last withdrawal.
Sign In to topup33 Terms & Conditions