Privacy Policy

Privacy Policy top508 — Your Personal Data Protection

Top508 is fully committed to protecting the privacy and personal data of every user. This document transparently explains how we collect, use, store, and protect your information in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

Updated: January 2026 Bahasa Melayu PDPA 2010 Compliance
top508 Commitment
  • 256-bit SSL encryption for all data
  • No sale of data to third parties
  • Your right to access & delete your data
  • Malaysia PDPA 2010 Compliance
  • Notification in the event of a data breach

Your privacy is top508's priority. This Privacy Policy outlines our commitment to handling your personal data transparently, securely and responsibly. Please read this document in full to understand your rights completely.

1Introduction

Top508 is an online entertainment platform operating under the domain top508.win, offering a wide range of gaming options including Slots, Live Casino, Sports Betting, Bingo and more, exclusively for Malaysian players. We understand that your trust in us depends not only on the quality of our games, but also on how we handle the personal information you entrust to us.

This Privacy Policy is drafted in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia, and explains in detail how top508 collects, stores, uses, discloses and protects your personal data throughout your use of our platform. By registering and using top508's services, you are deemed to have read, understood and agreed to the terms outlined in this Privacy Policy.

If you do not agree with any part of this policy, please stop using our platform and contact the top508 support team for further assistance. We are always ready to answer any questions about your privacy.

This Privacy Policy applies to all top508 platform users regardless of how you access our services — whether via web browser, mobile app or any other official top508 channel.

2Types of Personal Data Collected

Top508 only collects personal data that is strictly necessary for the purposes stated in this policy. The following are the categories of data we collect:

2.1 Identity Information
  • Full name as shown on your identity card or passport
  • Identity Card number (MyKad) or passport number
  • Date of birth and gender
  • Identity document images for KYC verification purposes
  • Selfie or facial image taken during the identity verification process
2.2 Contact Information
  • Active and valid email address
  • Registered Malaysian mobile phone number
  • Residential address including postcode and state
2.3 Financial Information
  • Bank account number and bank name for withdrawal processing
  • Registered e-wallet information such as Touch 'n Go or Boost
  • Deposit and withdrawal transaction records
  • Win and loss history in games
2.4 Technical & Usage Information
  • IP address and approximate geographic location
  • Device type, operating system and web browser version
  • Platform activity log data including login and logout times
  • Game preferences and platform usage patterns
  • Cookie data and similar tracking technologies
Data Category Example Requirements
Identity Name, MyKad, Date of Birth Mandatory – KYC
Contact Email, Phone, Address Mandatory – Account
Finance Banks, e-Wallets, Transactions Mandatory – Payment
Technical IP, Device, Logs Automatic – Security
Cookies Session, Preferences Preferences – Experience

3How We Collect Data

Top508 collects your personal data through several different channels depending on how you interact with our platform:

  • Account Registration: When you complete the top508 registration form, basic information such as your name, email and phone number is collected directly from you.
  • KYC Verification: During the Know Your Customer process, you are asked to upload an identification document and proof of address, which are collected by the secure top508 KYC system
  • Financial Transactions: Every time you make a deposit or withdrawal, the top508 payment system records the relevant transaction details for your account records
  • Platform Usage: Technical data such as IP address, device type and login activity is collected automatically by the top508 security system each time you access the platform.
  • Communications: When you contact top508 customer support via live chat or email, conversation records are retained for service quality improvement purposes.
  • Cookie Technology: The top508 platform uses cookies and similar tracking technologies to remember your preferences and improve your experience

Top508 has never purchased or acquired personal data lists from third parties for marketing purposes. All data we hold is data you provided directly or that was generated through your use of our platform.

4Purpose of Personal Data Use

Top508 uses your personal data only for legitimate and transparent purposes as outlined below. We will not use your data for any other purpose without first obtaining your consent:

  • Account Management: Create, maintain and manage your top508 account, including registration processing, email verification and password management
  • Identity Verification & KYC: Verify your identity in accordance with anti-money laundering laws and underage player protection requirements
  • Payment Processing: Securely and efficiently process deposits, withdrawals and all financial transactions related to your top508 account
  • Service Provision: Gives you access to the full top508 games catalogue including Slots, Live Casino, Sports Betting and Bingo
  • Platform Security: Detect and prevent fraud, hacking, money laundering and any misuse of the top508 platform
  • Service Communications: Send important notifications regarding your account, transactions, security updates and changes to terms of service
  • Customer Support: Handle enquiries, complaints and support requests you submit to the top508 support team
  • Marketing (with consent): Send you promotional information, bonus offers and new game updates if you have consented to receive marketing communications
  • Legal Compliance: Fulfil legal and regulatory obligations applicable to top508's operations in Malaysia

You may withdraw consent to receive marketing communications at any time by contacting top508 customer support. Withdrawing marketing consent will not affect your account services.

5Data Sharing & Disclosure

Top508 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, in certain situations, we may need to share your data with the following parties:

5.1 Third-Party Service Providers

Top508 works with trusted service providers to help manage platform operations. This includes KYC verification service providers, licensed payment processors, game providers such as Pragmatic Play and Evolution Gaming, and cloud computing service providers. All these providers are bound by strict data protection agreements and are only permitted to use your data for the specific purposes defined.

5.2 Regulatory Authorities

Top508 may be required to disclose your personal data to government authorities, financial regulatory bodies, or law enforcement agencies when required to do so by Malaysian law or court order. Such disclosures are made only to the extent required by law.

5.3 Business Transfers

If top508 is involved in a merger, acquisition, or asset sale, user personal data may be transferred as part of that business transaction. You will be notified in advance before any such transfer takes place.

All third parties that receive top508 user personal data are required to uphold data protection standards as stringent as those we apply to ourselves. We conduct regular reviews of all third-party data processing agreements.

6Data Security & Technical Protection

The security of your personal data is top508's highest priority. We implement multiple layers of technical and organisational security measures to protect your data from unauthorised access, loss, destruction or accidental disclosure:

  • 256-bit SSL Encryption: All data transmitted between your device and top508 servers is protected by 256-bit Secure Socket Layer (SSL) encryption — the same level of encryption used by leading banking institutions in Malaysia
  • Data-at-Rest Encryption: Sensitive data such as financial information and KYC documents are stored in encrypted format using industry-standard encryption algorithms.
  • Layered Access Controls: Access to users' personal data within the top508 organisation is restricted solely to staff who genuinely require it to perform their duties.
  • 24/7 Security Monitoring: The top508 security system continuously monitors all platform activity to detect any suspicious or unauthorised access
  • Regular Penetration Testing: top508 conducts regular security testing and audits with the assistance of independent cybersecurity experts to ensure our infrastructure remains robust at all times
  • Two-Factor Authentication: top508 offers two-factor authentication (2FA) for additional account protection, which we strongly recommend to all users

While top508 takes all reasonable precautions, no internet security system can be guaranteed 100% secure. Should a security breach affecting your data occur, top508 will notify you within a reasonable timeframe in accordance with PDPA requirements.

7Cookies & Tracking Technologies

The top508 platform uses cookies and similar tracking technologies to enhance user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit the top508 website.

Types of Cookies We Use
  • Essential Cookies: These cookies are required for the top508 platform to function properly. They manage your login session and ensure account security. Essential cookies cannot be disabled.
  • Preference Cookies: These cookies remember your preferences such as language, display format and other settings to make your next visit to the top508 platform more convenient.
  • Analytics Cookies: top508 uses analytics cookies to understand how users interact with our platform. This information is used in aggregate form for platform improvements
  • Security Cookies: These cookies help top508's security systems identify fraudulent activity and protect your account from unauthorised access.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the top508 platform and your gaming experience.

8Your Rights Under PDPA

As a top508 platform user based in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA), which we fully respect:

Right to Access

You have the right to request a copy of the personal data top508 holds about you. Requests will be processed within 21 working days.

Right to Rectification

If the personal data we hold about you is inaccurate or outdated, you have the right to request a correction.

Right to Erasure

You may request deletion of your personal data in certain circumstances, subject to legal obligations that require us to retain specific records.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time, without conditions.

Right to Restrict Processing

In certain circumstances, you may request that top508 restrict how we process your personal data while your request is under review.

Right to Data Portability

You may request your personal data in a structured, machine-readable format for transfer to another service provider.

To exercise any of the above rights, please contact the top508 data protection team by email at [email protected] or via 24/7 live chat. We will process your request within the timeframe stipulated by PDPA.

9International Data Transfers

In operating the top508 platform, some of your personal data may need to be transferred to or processed in countries outside Malaysia. This occurs primarily in the context of cloud computing services and international game provider systems that we use.

When such international data transfers occur, top508 ensures that:

  • The recipient country or region has an adequate level of data protection recognised by the relevant authorities
  • Adequate data processing agreements are established with all recipients, including standard data protection clauses
  • Transferred data is limited strictly to what is necessary for the stated service purpose.
  • All international data recipients are subject to confidentiality and security obligations equivalent to top508's own standards

Top508 partners exclusively with international service providers that hold recognised data security certifications such as ISO 27001 and PCI DSS. Your trust is the foundation of our relationship.

10Data Retention Period

Top508 will only retain your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. Our general data retention period guidelines are as follows:

Data Types Retention Period Reason
Active Account Data For the duration of the active account Service management
KYC Records 5 years after account closure AMLA Requirements
Transaction Records 7 years Tax legal requirements
Communication Logs 2 years Service quality
Cookie Data Up to 12 months User Experience
Security Logs 3 years Fraud investigation

Once the retention period expires or the data is no longer needed, top508 will securely delete or destroy it using methods that ensure it cannot be recovered.

11Privacy Policy Amendments

Top508 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or platform service improvements. Every amendment will be accompanied by an updated revision date at the top of this document.

  • Material amendments that significantly affect your privacy rights will be communicated via in-platform notifications or email to your registered address
  • Minor or editorial amendments may be made without prior notice but will always be reflected in the updated document
  • Continued use of the top508 platform after any amendments take effect will be considered your acceptance of the revised policy
  • We recommend you check this page regularly to stay informed on how top508 protects your data

If you disagree with any amendments to this Privacy Policy, you have the right to close your top508 account and request deletion of your personal data, subject to applicable legal limitations.

12Contact Us – Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how top508 handles your personal data, please do not hesitate to contact us through the following channels:

Support Email

Send your privacy enquiries to our team:

[email protected]

Response time: within 1–3 business days

Live Chat 24/7

For urgent enquiries, use the live chat available within your top508 platform.

Available 24 hours a day, 7 days a week including public holidays

Top508 is committed to responding to all privacy-related inquiries seriously and within the stipulated timeframe. Your satisfaction and trust are top508's top priority.

top508 Protection Commitment

Why Your Data Is Safe With top508?

We don't just follow the law — we go further to ensure your privacy is fully protected.

Bank-Grade Encryption

All data you send and receive through the top508 platform is protected by 256-bit SSL encryption — the same technology used by major Malaysian banks to keep every detail you share completely confidential.

Secure & Trusted KYC

Top508's identity verification process uses an industry-standard KYC system that ensures your personal documents are stored securely and accessed only by authorised personnel.

No Sale of Data to Third Parties

Top508 firmly has never and will never sell, rent, or trade users' personal data to any third party for their own commercial purposes. Your data belongs to you.

Full Malaysia PDPA Compliance

Top508's operations are designed from the ground up to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We undergo regular legal compliance reviews to ensure these standards are maintained.

Immediate Breach Notification

In the event of any security incident that may affect your data, top508 is committed to notifying you as promptly as possible in accordance with applicable PDPA requirements.

Full Control in Your Hands

With the rights guaranteed under PDPA, you have full control over your personal data — from accessing and correcting it to requesting deletion when you stop using our platform.

Play Safe & Confident

Your Data Is Protected. Join top508 Now!

Now that you understand top508's commitment to protecting your privacy, enjoy thousands of exciting games with complete peace of mind — register a free account and claim your exclusive welcome bonus today.

* This platform is strictly for players aged 18 and above. Please play responsibly.

Bahasa Melayu