Privacy Policy tiptopbet –
Your Data Security is Our Priority

Tiptopbet ("we", "platform", "Company") respects the privacy of every individual who uses our online betting platform. This Privacy Policy has been drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles.

This Policy applies to all information collected through the tiptopbet website at tiptopbet.ws, the mobile app (if applicable), and all related interactions you have with tiptopbet — including account registration, deposits via Touch 'n Go eWallet or DuitNow, gaming activity, and communications with our support team.

We take this responsibility seriously. tiptopbet goes beyond mere legal compliance — we believe that member trust is our most valuable asset, and protecting your privacy is how we honour that trust.

Tiptopbet only collects data that is strictly necessary to provide our services. The following are the categories of data we may collect:

Tiptopbet does not collect sensitive information such as biometric data, religious beliefs, political opinions, or criminal records, unless there is a specific legal requirement and you have been separately informed.

Personal data collected by tiptopbet is used for the following legitimate and transparent purposes:

• Service delivery: Managing your account, processing deposits via Malaysian payment methods such as DuitNow and ShopeePay, handling withdrawals, and ensuring a seamless gaming experience.
• Identity verification (KYC): To comply with legal requirements for verifying member identity in order to prevent fraud, money laundering, and access by underage individuals.
• Platform security: Detecting and preventing fraudulent activity, intrusion attempts, bonus abuse, and any behaviour that violates tiptopbet's Terms and Conditions.
• Service communications: Sending important notices related to your account, policy updates, and security information. These are not marketing communications — they are essential notices directly concerning your account.
• Marketing (with consent): Sends tiptopbet promotional information, bonus offers, and the latest updates — but only with your explicit consent, and you may unsubscribe at any time.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and providing appropriate assistance in line with tiptopbet's commitment to Responsible Gaming.
• Product improvement: Analysing aggregated usage data (with no individual identification) to improve the user experience and platform performance.

Tiptopbet does not sell your personal data. However, in the course of operating the platform, we may need to share data with the following parties in certain situations:

• Payment providers: Required transaction information is shared with e-wallet and banking providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and banks supporting FPX (Maybank2u, CIMB Clicks) to process your deposits and withdrawals.
• Game providers: Minimal technical data required is shared with game providers such as Pragmatic Play, PG Soft, and Evolution Gaming to ensure games function correctly within your account.
• IT service providers: Companies providing hosting, cybersecurity, and analytics services — all bound by strict confidentiality agreements with tiptopbet.
• Legal authorities: tiptopbet will disclose personal data when required by law, court order, or a competent Malaysian authority. In such situations, we will notify you where permitted by law.

All third parties working with tiptopbet are bound by confidentiality agreements that require them to protect your data and use it solely for permitted purposes.

Tiptopbet uses cookies and similar tracking technologies to enhance the user experience and platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functionality — login, session security, and language preference memory. These cookies cannot be disabled without affecting platform performance.
• Performance Cookies: Collects information on how users interact with the platform to help us identify areas for improvement. All data is collected anonymously.
• Functional Cookies: Saving your preferences such as account settings and display preferences so you don't have to reconfigure them each time.

You can manage your cookie settings through your browser. However, disabling certain cookies may affect the functionality and performance of the tiptopbet platform.

Tiptopbet retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our general data retention guidelines are:

• Active account data: Retained for the duration your account remains active on tiptopbet, plus any additional period required by law.
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysian law governing financial records.
• KYC records: Retained for a minimum of 5 years after account closure, in compliance with AML (Anti-Money Laundering) requirements.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Analytics data: Anonymised usage data is retained for 2 years for platform improvement purposes.

When data is no longer needed and there is no legal obligation to retain it, tiptopbet will securely delete or anonymise that data.

Under the Malaysia PDPA and tiptopbet's privacy commitments, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the tiptopbet Privacy Officer by email at privacy@tiptopbet.ws or via our platform's live chat. We will process your request within 14–21 business days.

Tiptopbet continuously invests in security infrastructure to protect your personal data. The key security measures we have in place include:

• 256-bit SSL/TLS Encryption: All communications between your device and tiptopbet's servers are fully encrypted — whether you're on home WiFi or mobile data.
• Encrypted data storage: Sensitive data in our databases, including passwords and payment details, is encrypted using strong encryption algorithms.
• Layered access controls: The principle of least privilege applies — staff may only access data that is strictly necessary for their specific role.
• Two-factor authentication (2FA): tiptopbet's internal systems that access sensitive data are protected with multi-factor authentication.
• Regular penetration testing: tiptopbet conducts regular security testing to identify and address any vulnerabilities before they can be exploited.
• Staff training: All tiptopbet staff undergo regular privacy and data security training.

The tiptopbet platform may contain links or references to third-party websites or services. This Privacy Policy applies solely to tiptopbet and does not cover the privacy practices of those third parties.

Tiptopbet is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of every website you visit. If you access payment provider services such as Touch 'n Go or Maybank2u via links on our platform, please review their respective privacy policies.

Tiptopbet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business decisions. When material changes are made, we will:

• A clear notice will be displayed on the tiptopbet homepage at least 14 days before any changes take effect.
• A notification email will be sent to your registered address if any changes directly affect your rights.
• Updating the "Last Updated" date at the top of this page.

Continued use of the tiptopbet platform after changes take effect will be considered acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how tiptopbet handles your personal data, please contact our Data Protection Officer (DPO):

If you are dissatisfied with how tiptopbet has handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) through their official channels.