Topanhoki Privacy Policy – Your Personal Data Protection

Topanhoki ("we", "Platform") is fully committed to protecting the privacy of every individual who uses our services. This Privacy Policy describes the practices we follow regarding the collection, use, storage, and protection of personal data of our platform users.

This policy applies to all personal data collected through the topanhoki website, our mobile app, customer support interactions, and any other official communication channels. It also covers data collected during registration, identity verification (KYC), financial transactions, and gaming activity.

We take this responsibility seriously. Your privacy is not merely a legal obligation for us — it is part of our core commitment to building trust with every topanhoki member in Malaysia.

We collect your personal data through various means — directly from you, automatically when you use the platform, and sometimes from legitimate third-party sources. Below is a breakdown of the types of data involved:

Your personal data is used responsibly for legitimate and transparent purposes. The following is a complete list of data uses we carry out:

Account Management & Services

• Create and manage your member account on the topanhoki platform.
• Verify your identity through the KYC process to ensure account security.
• Process your deposit and withdrawal requests securely.
• Provide effective and personalised customer support.

Experience Enhancement

• Analyse usage patterns to improve the platform's interface and performance.
• Tailor game recommendations based on your preferences.
• Develop new features relevant to the needs of Malaysian users.

Security & Compliance

• Detect and prevent fraud, illegal software use, and unauthorised access.
• Comply with legal obligations including anti-money laundering (AML) requirements.
• Retain transaction records as required by law.

Communications (with Consent)

• Send important notifications related to your account and transactions.
• Inform you about promotions and new offers (only if you have agreed to receive them).
• Deliver important updates regarding platform policies or terms.

Topanhoki processes your personal data on a lawful basis under Malaysia's Personal Data Protection Act 2010 (PDPA). For each type of data processing, we ensure that one of the following bases applies:

• Contract Performance: Processing necessary to fulfil the service agreement between you and topanhoki, including account management and transaction processing.
• Legitimate Interest: Processing for security purposes, fraud prevention, and platform improvement where our interests do not override your fundamental rights.
• Legal Compliance: Processing necessary to meet legal obligations applicable to our operations.
• Consent: For marketing communications and other optional data processing, we will obtain your explicit consent beforehand.

Topanhoki does not sell your personal data. However, we may share data with selected third parties in the following limited circumstances:

• Service Providers: Companies we appoint to support platform operations, such as payment processors, cloud infrastructure providers, and game software suppliers. They may only use your data for purposes we direct and are bound by strict confidentiality agreements.
• Regulatory Authority: When required by law, court order, or a legitimate government agency request, we will disclose only the minimum necessary data.
• Fraud Prevention: In cases involving suspected fraud or illegal activity, we may share information with law enforcement authorities.
• Business Transfer: If topanhoki is involved in a merger, acquisition, or sale of assets, your data may be transferred to the receiving entity, which will be subject to an equivalent privacy policy.

We implement comprehensive layers of technical and organisational safeguards to protect your personal data from unauthorised access, alteration, disclosure, or destruction.

Technical Safeguards

• 256-bit SSL encryption for all data in transit between your browser and our servers.
• Encryption of sensitive data in the database using AES-256.
• Two-factor authentication (2FA) is available for all member accounts.
• Real-time security monitoring 24 hours a day, 7 days a week.
• Regular penetration testing conducted by independent security experts.
• Daily data backups stored at a secure, off-site location.

Organisational Safeguards

• Access to personal data is restricted to staff who require it to perform their duties.
• All staff who handle personal data have undergone data protection training.
• Mandatory confidentiality agreements for all staff and contractors.
• Clear and tested data incident response procedures.

Topanhoki does not retain your personal data for longer than necessary. Data retention periods are determined based on the type of data and the purpose for which it was collected:

• Active Account Data: Retained for the duration your account remains active, plus any period required by law following account closure.
• Financial Transaction Records: Retained for seven (7) years in accordance with financial and tax regulatory requirements.
• Security and Activity Logs: Retained for twelve (12) months for fraud detection and security purposes.
• Customer Support Data: Retained for two (2) years after the last interaction.
• Marketing Data: Retained until you withdraw your consent or request deletion.

Once the relevant retention period has expired, data will be securely deleted or anonymised in accordance with established procedures.

As a topanhoki member, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights:

To exercise any of these rights, contact our data protection team via live chat within the platform or visit the FAQ for further guidance. We will respond within 30 business days.

Topanhoki uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Help us understand how users interact with the platform for continuous improvement.
• Functional Cookies: Save your preferences such as language, display settings, and game preferences.
• Analytics Cookies: Collect anonymised statistical data to help us understand overall usage patterns.

You can control or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of specific platform features.

Topanhoki is a platform exclusively for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If we become aware that personal data of an individual under the age of 18 has been collected unintentionally, we will take immediate action to delete that data and close the account in question. If you are aware that a minor has registered on our platform, please contact our support team immediately.

Topanhoki reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When material amendments are made, we will notify you via:

• In-platform notifications within topanhoki upon your next login.
• Notification email sent to the address registered in your account.
• Updates the "Last Updated" date at the top of this page.

Continued use of the platform after amendments take effect constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding how topanhoki handles your personal data, you may contact our Data Protection Officer (DPO) via:

• Live Chat: Available 24/7 within the topanhoki platform after login.
• Email: [email protected] (not clickable — copy and type into your email client)
• FAQ Page: Visit the FAQ page for answers to frequently asked questions about privacy.

We are committed to responding to all privacy-related enquiries within 30 working days of receipt. For more complex cases, we will keep you informed of the review progress within that timeframe.