Important: This Privacy Policy explains how top1an collects, uses, stores, and protects your personal information when you use our gaming platform. By creating an account or using our services, you consent to the data practices described in this policy. We are committed to protecting your privacy and maintaining the confidentiality of your personal data in accordance with international data protection standards.

1. Introduction

top1an ("we," "us," or "our") operates https://top1an.cam, an online gaming platform serving Indonesian players with casino games, sports betting, and lottery products. We understand that trust is the foundation of our relationship with you, and protecting your personal information is central to maintaining that trust.

This Privacy Policy applies to all information collected through our Platform, including the website, mobile-optimized site, and any related services. It describes what information we collect, why we collect it, how we use it, and the choices you have regarding your personal data.

top1an is committed to complying with applicable data protection laws and regulations, including principles aligned with the General Data Protection Regulation (GDPR) and other international privacy frameworks. We process personal data lawfully, fairly, and transparently.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a top1an account, we collect the following personal information:

  • Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (KTP number for Indonesian residents)
  • Contact Information: Email address, phone number, residential address including city (Jakarta, Surabaya, Bandung, etc.), postal code, and country
  • Financial Information: Bank account details (bank name such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, or Bank Permata; account number; account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, or LinkAja account IDs), and payment transaction history
  • Verification Documents: Copies of KTP (Indonesian identity card) or passport, proof of address documents (utility bills, bank statements), and selfie photographs for identity verification
  • Account Credentials: Username, password (stored in encrypted form), and security questions/answers

2.2 Information Collected Automatically

When you use the top1an Platform, we automatically collect certain technical information:

  • Device Information: IP address, device type (desktop, smartphone, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, and device identifiers
  • Usage Data: Pages visited, features used, games played, time spent on the Platform, click patterns, search queries, and referring/exit pages
  • Location Data: Approximate geographic location derived from IP address to verify Indonesia residency and comply with geo-restriction requirements
  • Transaction Information: Deposit amounts and methods, withdrawal requests and processing times, bet amounts and types (sports bets, casino wagers, togel tickets, etc.), winnings, and account balance history
  • Communication Records: Copies of correspondence with our customer support team via live chat, email, or WhatsApp, including timestamps and support ticket IDs

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

  • Payment processors (banks and e-wallet providers) to verify transaction authenticity and prevent fraud
  • Identity verification services to confirm your age, identity, and address
  • Credit reference agencies for anti-fraud and responsible gaming assessments
  • Game providers for gameplay data and RTP (Return to Player) statistics

3. How We Use Your Information

top1an processes your personal information for the following purposes, each based on a valid legal ground:

3.1 Account Management and Service Provision

  • Create and maintain your gaming account
  • Process deposits and withdrawals to/from Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja)
  • Execute bets and wagers on sports events (including BRI Liga 1, EPL, La Liga, and international tournaments), casino games, slots, togel, and other gaming products
  • Calculate and credit winnings to your account balance
  • Provide customer support and respond to your inquiries
  • Send transactional communications (account confirmation emails, withdrawal approvals, password reset links)

3.2 Legal and Regulatory Compliance

  • Verify that you are at least 21 years of age and a resident of Indonesia
  • Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
  • Detect and prevent fraud, cheating, collusion, and other prohibited activities
  • Enforce our Terms & Conditions and protect against abuse of bonuses or promotions
  • Respond to legal requests from law enforcement or regulatory authorities
  • Maintain records required by our gaming licenses for audit purposes

3.3 Marketing and Promotions

  • Send promotional offers, bonus notifications, and special event announcements (such as Indonesian Independence Day promotions on August 17, or football tournament specials)
  • Personalize marketing communications based on your gaming preferences and activity
  • Conduct customer satisfaction surveys and market research

Note: You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or contacting customer support. Opting out does not affect transactional communications necessary for your account.

3.4 Platform Improvement and Analytics

  • Analyze usage patterns to improve Platform functionality and user experience
  • Conduct A/B testing of new features and game offerings
  • Identify technical issues and optimize Platform performance
  • Develop new products and services tailored to Indonesian player preferences

3.5 Responsible Gaming

  • Monitor gameplay patterns for signs of problem gambling
  • Implement deposit limits, session time reminders, and self-exclusion requests
  • Provide access to responsible gaming tools and support resources
  • Contact players who may be at risk with offers of assistance

4. Data Sharing and Disclosure

top1an does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

4.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

  • Payment Processors: To facilitate deposits and withdrawals through Indonesian banks and e-wallets
  • Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and other studios that power our casino games and slots
  • Identity Verification Services: To verify your KTP, passport, and address documents
  • Customer Support Tools: Live chat software and email service providers
  • Cloud Hosting Providers: Secure server infrastructure to store and process data
  • Analytics Providers: To help us understand Platform usage and improve services

All service providers are bound by contractual obligations to protect your data and use it only for the specific purposes we authorize.

4.2 Legal Obligations

We may disclose your information when required by law or in response to valid legal processes, including:

  • Compliance with court orders, subpoenas, or government requests
  • Cooperation with law enforcement investigations
  • Protection of our legal rights and property
  • Prevention of fraud or illegal activities
  • Compliance with gaming license requirements and regulatory audits

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our Platform before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you have given explicit consent, such as when participating in tournaments, leaderboards, or promotional campaigns where winners are publicly announced (typically using anonymized identifiers like "R*** from Jakarta").

5. Data Security Measures

top1an employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

Our Security Infrastructure

  • 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using bank-grade SSL/TLS protocols
  • Encrypted Data Storage: Sensitive data including passwords, financial information, and identification documents are encrypted at rest using AES-256 encryption
  • Secure Data Centers: Our servers are housed in facilities with 24/7 physical security, biometric access controls, and redundant power systems
  • Firewall Protection: Multi-layered firewalls and intrusion detection systems monitor and block malicious traffic
  • Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments quarterly
  • Employee Access Controls: Strict role-based access ensures only authorized personnel can access personal data, and all access is logged
  • Two-Factor Authentication: Optional 2FA available for player accounts to add an extra layer of login security
  • Fraud Detection Systems: Real-time monitoring of transactions and account activity to detect suspicious patterns

While we implement robust security measures, please remember that no method of internet transmission or electronic storage is 100% secure. You also play a critical role in protecting your account by choosing a strong password, not sharing your login credentials, and logging out after each session, especially on shared devices.

6. Cookies and Tracking Technologies

top1an uses cookies and similar tracking technologies to enhance your experience on our Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and provide personalized services.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for basic Platform functionality, including session management, account login, and security features. These cannot be disabled.
  • Performance Cookies: Collect anonymous information about how visitors use the Platform, helping us identify and fix technical issues and optimize performance.
  • Functionality Cookies: Remember your preferences (language, currency display, game favorites) to provide a more personalized experience.
  • Marketing Cookies: Track your activity to deliver relevant promotional offers and measure the effectiveness of marketing campaigns.

6.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling cookies may limit your ability to use certain Platform features. Please refer to your browser's help documentation for specific instructions on managing cookies.

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of all personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

7.2 Right to Rectification

You can update or correct inaccurate personal information through your account settings or by contacting customer support. We will update our records promptly upon verification of the correct information.

7.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal information in certain circumstances. However, we may retain certain data where required by law (e.g., financial records for tax purposes) or for legitimate business needs (e.g., fraud prevention, dispute resolution).

7.4 Right to Restrict Processing

You can request that we limit how we use your personal information in specific situations, such as while we verify data accuracy or assess the legitimacy of a processing activity.

7.5 Right to Data Portability

You have the right to receive your personal information in a portable format and transmit it to another service provider, where technically feasible.

7.6 Right to Object

You can object to processing of your personal information for marketing purposes at any time. You can also object to processing based on legitimate interests, and we will cease processing unless we have compelling legitimate grounds.

7.7 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will respond to your request within 30 days and may ask for additional information to verify your identity before processing the request.

8. Data Retention

top1an retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Active Accounts: Data is retained for the duration of your active account plus 6 years after account closure to comply with financial record-keeping requirements
  • Transaction Records: Deposit, withdrawal, and betting history retained for 7 years for regulatory compliance and tax purposes
  • Identity Verification Documents: KTP copies, address proofs, and verification selfies retained for 5 years after account closure
  • Marketing Data: Deleted within 90 days of opt-out or account closure
  • Communication Records: Customer support interactions retained for 2 years for quality assurance
  • Cookies and Usage Data: Most cookies expire within 12 months; usage logs retained for 18 months

After the retention period expires, personal data is securely deleted or anonymized so that it can no longer identify you.

9. International Data Transfers

top1an operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. When we transfer data internationally, we ensure that adequate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

These safeguards may include:

  • Standard Contractual Clauses approved by data protection authorities
  • Ensuring the recipient country has adequate data protection laws recognized by international standards
  • Binding Corporate Rules for transfers within our corporate group

10. Children's Privacy

top1an services are strictly for individuals aged 21 and older. We do not knowingly collect personal information from anyone under the age of 21. If we discover that we have inadvertently collected information from a person under 21, we will delete that information immediately.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] so we can take appropriate action.

11. Changes to This Privacy Policy

top1an reserves the right to update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by:

  • Sending an email to your registered email address
  • Posting a prominent notice on the Platform homepage
  • Updating the "Last Updated" date at the top of this policy

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

12. Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact us:

  • Email: [email protected] (subject line: "Privacy Inquiry")
  • Live Chat: Available 24/7 through the Platform with Indonesian-speaking support agents
  • WhatsApp: Contact information available in your account dashboard

Our customer support team will respond to privacy-related inquiries within 2 business days. For complex matters requiring investigation, we may require up to 30 days to provide a complete response.

Data Protection Officer

For specific data protection concerns or to exercise your privacy rights, you may contact our Data Protection Officer directly at [email protected] with "Attention: DPO" in the subject line.

Privacy Policy Version: 2.0 | Effective Date: January 1, 2026

256-Bit SSL Encryption

Bank-level encryption protects all data transmitted between your device and our servers

GDPR Compliant

We follow international data protection standards and respect your privacy rights

Secure Data Centers

Your data is stored in highly secure facilities with 24/7 monitoring and access controls

No Data Selling

We never sell, rent, or trade your personal information to third parties

Regular Audits

Independent security firms conduct quarterly assessments to ensure data protection

Full Transparency

Clear policies on data collection, usage, and your rights to access and control your information

Questions About Your Data Privacy?

Our dedicated support team is available 24/7 to address your privacy concerns and help you exercise your data rights.