Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how TipTopBet ("Company", "Platform", "we", "us", "our"), the operator of the online betting and gaming platform at https://tiptopbet.cam, collects, processes, stores, and protects personal data relating to users ("User", "Player", "you") who access or use the Platform.

TipTopBet is committed to handling personal data responsibly and transparently. We adhere to internationally recognised data protection principles, including those reflected in frameworks such as the EU General Data Protection Regulation (GDPR) and the Malaysian Personal Data Protection Act 2010 (PDPA) to the extent applicable, as guidance standards for best practice.

This Policy applies to all personal data collected through the TipTopBet website, mobile-optimised platform, live chat systems, email communications, KYC (Know Your Customer) processes, and any other interaction you may have with the Company. It should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy.

Your Consent: By registering an account on TipTopBet and confirming acceptance of our Terms & Conditions, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. You may withdraw certain consents at any time by contacting our Data Protection Officer (see Section 16).

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

"Personal Data" means any information that identifies or could reasonably identify a living individual, directly or indirectly.
"Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
"Data Controller" means TipTopBet, which determines the purposes and means of processing personal data.
"Data Processor" means a third party that processes personal data on TipTopBet's behalf and under its instructions.
"Data Subject" means the individual whose personal data is being processed — in this context, the registered TipTopBet User.
"KYC" means Know Your Customer — the identity and address verification process conducted prior to withdrawal and during account monitoring.
"AML" means Anti-Money Laundering — regulatory obligations that require monitoring and reporting of certain financial activity patterns.
"Cookie" means a small data file stored on the User's device by a web browser, used to retain information about sessions and preferences.

3. Data We Collect

TipTopBet collects the following categories of personal data depending on the nature of your interaction with the Platform:

3.1 Identity Data

Full legal name as it appears on government-issued identification
Date of birth (used to verify the 21+ age requirement)
Nationality and country of residence
Copies of identity documents (Malaysian MyKad, Passport, or Driver's License) submitted during KYC
Selfie with ID photograph

3.2 Contact Data

Email address (primary communication channel)
Contact telephone number
Residential address (for KYC and correspondence purposes)

3.3 Financial Data

Payment method details (e-wallet identifiers for Touch 'n Go, Boost, GrabPay; FPX bank account details; DuitNow QR reference numbers)
Deposit and withdrawal transaction records including amounts, timestamps, and reference numbers
Account balance history
Cryptocurrency wallet addresses where applicable (USDT TRC20, Bitcoin)

3.4 Account & Activity Data

Username and encrypted password credentials
Betting and gaming history including stake amounts, markets, outcomes, and timestamps
Bonus and promotion participation history
Login history including timestamps and IP addresses
Responsible gambling settings (deposit limits, self-exclusion periods, session time preferences)

3.5 Technical & Device Data

IP address and geolocation data derived from it
Device type, operating system, and browser information
Pages visited, session duration, and navigation patterns within the Platform
Cookie identifiers and similar tracking technologies

3.6 Communications Data

Records of all live chat conversations with TipTopBet support staff
Email correspondence with TipTopBet
Feedback, complaints, and dispute records

We Do Not Collect: TipTopBet does not collect or process data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, or biometric data (other than identity photographs required for KYC). We do not collect data on Users' sexual orientation or health status.

4. How We Collect Data

TipTopBet collects personal data through the following means:

4.1 Directly from You

The majority of personal data we hold is provided directly by Users during: account registration; the KYC identity verification process; deposit and withdrawal transactions; completion of responsible gambling settings; contact with our support team via live chat or email; and participation in promotions or surveys.

4.2 Automatically via the Platform

When you access TipTopBet, our systems automatically collect technical data including your IP address, device specifications, browser type, session activity, and pages visited. This data is collected via server logs, cookies, and similar technologies as described in Section 8.

4.3 From Third-Party Service Providers

We may receive data from third parties in limited circumstances, including:

Payment processors (confirming transaction status and payer identity verification)
Identity verification service providers used in the KYC process
Fraud detection and AML screening services
Game content providers (aggregated gameplay data for fairness auditing)

5. Data Processing & Use

TipTopBet processes personal data only for the purposes described in this Policy. The table below summarises the primary processing activities and their purposes:

Purpose	Data Categories Used	Legal Basis
Account registration and management	Identity, Contact, Account	Contractual necessity
Age verification (21+ enforcement)	Identity (date of birth, ID documents)	Legal obligation; Legitimate interest
Processing deposits and withdrawals	Financial, Identity	Contractual necessity
KYC and AML compliance	Identity, Financial, Activity	Legal obligation
Fraud prevention and security monitoring	Technical, Activity, Financial	Legitimate interest; Legal obligation
Customer support and dispute resolution	Identity, Communications, Activity	Contractual necessity; Legitimate interest
Responsible gambling monitoring	Activity, Account	Legal obligation; Legitimate interest
Marketing and promotional communications	Contact, Activity	Consent (opt-in)
Platform analytics and improvement	Technical, Activity	Legitimate interest

6. Legal Basis for Processing

TipTopBet processes personal data on the following legal bases, as described in the table above:

Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions agreed with you upon registration — including account operation, payment processing, and game delivery.
Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and mandatory reporting duties under international gaming licence conditions.
Legitimate Interest: Processing carried out for TipTopBet's legitimate business purposes where those interests are not overridden by your rights — including fraud prevention, security monitoring, and platform performance analytics.
Consent: Processing based on your express, freely given consent — primarily marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

7.1 Internal Access

Access to personal data within TipTopBet is restricted to staff and systems that require it to perform their specific functions — support agents handle support-related data; compliance staff handle KYC and AML data; payments staff handle financial transaction data. Access is role-controlled and logged.

7.2 Third-Party Processors

TipTopBet shares personal data with carefully selected third-party processors solely for the purposes described in this Policy. All processors are subject to contractual data processing agreements that require them to handle data in compliance with applicable data protection standards. Categories of processors include:

Payment service providers (Touch 'n Go, Boost, GrabPay, DuitNow, FPX-participating banks including Maybank, CIMB, Public Bank, Hong Leong, RHB)
Identity verification and KYC technology providers
Fraud detection and AML screening services
Cloud hosting and infrastructure service providers
Customer support platform providers
Game content and RNG audit providers

7.3 Regulatory & Law Enforcement Disclosure

TipTopBet may disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or where we reasonably believe disclosure is necessary to prevent serious harm or criminal activity.

7.4 No Sale of Personal Data

TipTopBet does not sell, rent, or trade personal data to any third party for their independent marketing or commercial purposes. We do not monetise your data as a product. All data shared with processors is subject to strict contractual restrictions on its use.

8. Cookies & Tracking Technologies

8.1 What We Use

TipTopBet uses cookies and similar technologies (including local storage and session tokens) to operate and improve the Platform. These technologies enable functions such as keeping you logged in between page loads, remembering your language and display preferences, and tracking session activity for security and analytics purposes.

8.2 Categories of Cookies

Strictly Necessary: Essential for Platform operation — session authentication, security tokens, and load balancing. Cannot be disabled without breaking core functionality.
Functional: Remember your preferences (display settings, responsible gambling configuration). Disabled if you clear your browser data.
Analytics: Aggregate, anonymised data on how users navigate the Platform, used to identify performance issues and improve usability. No individual profiling.
Security: Help detect and prevent fraud, bot activity, and unauthorised access attempts.

8.3 Managing Cookies

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality — in particular, strictly necessary cookies cannot be disabled without impairing your ability to use the Platform. For full cookie management instructions, consult your browser's help documentation.

9. Data Retention

TipTopBet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulatory obligations. The following retention periods apply as general guidance:

Active Account Data: Retained for the duration of the account's active status plus a minimum of 5 years following account closure, to satisfy AML and gaming regulatory obligations.
Financial Transaction Records: Minimum 7 years from the date of each transaction, consistent with international AML best practice.
KYC Documents: Retained for a minimum of 5 years following the end of the business relationship, or longer if required by a specific regulatory obligation or ongoing investigation.
Support Communications: Retained for 3 years from the date of the last interaction, unless relevant to an ongoing dispute.
Marketing Consent Records: Retained for the duration of consent plus 3 years as evidence of consent status.
Technical / Analytics Data: Typically anonymised or deleted within 13 months of collection.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

10. Data Security

TipTopBet implements a multi-layered security architecture to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our key security measures include:

Transport Layer Security (TLS/SSL): All data transmitted between your device and TipTopBet's servers is encrypted using industry-standard TLS encryption.
Password Security: User passwords are stored using a one-way cryptographic hashing algorithm. TipTopBet never stores passwords in plain text and cannot retrieve your password — only reset it.
Two-Factor Authentication (2FA): Available to all registered users and strongly recommended for account protection.
Access Controls: Role-based access controls limit internal data exposure. All access to production data systems is logged and audited.
Intrusion Detection: Automated monitoring detects and alerts on anomalous access patterns, including brute-force login attempts and suspicious IP activity.
Regular Security Audits: TipTopBet's infrastructure undergoes periodic penetration testing and security reviews by independent third parties.

Despite these measures, no online system can guarantee absolute security. In the event of a data breach that poses a risk to affected individuals, TipTopBet will notify relevant authorities and affected users as required by applicable regulations, without undue delay.

11. Your Rights

Subject to applicable law and certain conditions, you hold the following rights in relation to your personal data held by TipTopBet. To exercise any of these rights, please contact our Data Protection Officer as described in Section 16.

Right of Access

You may request a copy of the personal data TipTopBet holds about you, along with information about how it is processed. We will respond within 30 days of a valid request.

Right of Rectification

You may request correction of any inaccurate or incomplete personal data. Some data (e.g., KYC identity documents) may require re-submission of verified documentation.

Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to overriding legal obligations — data required for AML compliance or regulatory record-keeping cannot be deleted on request during the applicable retention period.

Right to Restrict Processing

You may request that TipTopBet restricts the use of your personal data in certain circumstances — for example, while the accuracy of data is being contested.

Right to Data Portability

Where processing is based on your consent or a contract, and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.

Right to Object

You may object to processing based on legitimate interests (including profiling) or direct marketing at any time. For marketing, we will act on your objection immediately. For other processing, we will assess whether our legitimate interests override your objection.

Right to Withdraw Consent

Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Opt-out links are available in all marketing emails.

12. Minors & Age Policy

TipTopBet enforces a strict minimum age of 21 years for all registered accounts. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21.

All accounts are subject to mandatory age verification as part of the KYC process. Where TipTopBet discovers or is notified that personal data has been collected from an individual under the age of 21, it will:

Immediately suspend the account;
Notify relevant regulatory authorities where required;
Return any deposits (net of applicable withholdings under our Terms & Conditions) to the original payment source;
Permanently delete all personal data associated with the underage account, subject to any overriding legal retention obligation.

Parent or Guardian Notice: If you believe a minor under your care has registered an account on TipTopBet, please contact us immediately at [email protected]. We will act on all such notifications without delay.

13. International Data Transfers

TipTopBet operates globally and may process or store personal data on servers located outside Malaysia. Where personal data is transferred to countries that may not provide the same level of data protection as Malaysia, TipTopBet ensures that appropriate safeguards are in place, which may include:

Standard contractual clauses approved by competent data protection authorities;
Transfers to processors who operate under recognised international data protection frameworks;
Where applicable, reliance on adequacy decisions recognising equivalent data protection standards in the recipient country.

By using the TipTopBet Platform and providing personal data, you acknowledge that your data may be transferred to and processed in jurisdictions outside your country of residence. TipTopBet will always ensure that such transfers are made with appropriate legal safeguards in place.

14. Third-Party Services & Links

The TipTopBet Platform integrates third-party services for payment processing, game delivery, identity verification, and customer support functionality. While TipTopBet selects these providers carefully and enters into data processing agreements with them, each third-party provider operates under its own privacy policies in respect of data collected directly through their systems.

TipTopBet is not responsible for the privacy practices of third-party payment providers such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, or others. When you interact with these providers directly (e.g., authenticating a payment via their app or portal), your data is subject to their privacy terms in addition to ours.

The Platform does not contain links to external third-party websites for marketing or other purposes. All navigation within TipTopBet remains within the Platform domain.

15. Policy Amendments

TipTopBet reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable laws, regulatory guidance, our operational practices, or the services we provide. Material changes to this Policy will be communicated to registered users via email prior to the effective date of such changes. The effective date at the top of this document indicates the most recent revision.

Your continued use of the TipTopBet Platform following notification of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised terms, you must cease using the Platform and request account closure.

We recommend that you review this Privacy Policy periodically to remain informed of how your personal data is handled.

16. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or TipTopBet's handling of your personal data, please contact our Data Protection Officer (DPO) using the details below. Note that contact details on this page are provided as plain text only.

DPO & Privacy Enquiries Email: [email protected] (please include "Privacy Request" in your subject line)
Live Chat: Available 24 hours a day, 7 days a week via the on-site chat widget — please state that your query relates to a data protection matter
Response Time: We aim to acknowledge all privacy-related requests within 3 business days and resolve them within 30 calendar days

If you are not satisfied with our response to a privacy concern, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. For users in Malaysia, this is the Department of Personal Data Protection (JPDP) under the Ministry of Digital Malaysia.