topph Privacy Policy for Secure Philippine Online Play

Scope and responsibility

When the topph Privacy Policy applies

This policy covers information processed through the topph website, player accounts, cashier, games, sports sections, support communications, and related platform features.

Who this policy covers

The policy applies to people who browse topph, create an account, use gaming or betting features, make deposits or withdrawals, join an available promotion, communicate with support, or otherwise interact with the platform. Some information may be collected before registration, such as basic device, browser, security, and usage records.

When you register, topph may require more information to confirm your identity, eligibility, payment ownership, or account security. The precise information depends on the feature being used, the transaction involved, and any verification requirements that apply.

If another person gives topph information about you, that person should have an appropriate reason and authority to provide it. You should not submit another person’s identity documents, payment details, photographs, or contact information unless topph specifically requests them through an authorised process.

Your role in protecting information

Privacy is a shared responsibility. Use a unique password for topph, keep your registered email address and mobile number secure, and never disclose a one-time verification code. Sign out after using a shared device and avoid accessing a topph account through an unknown or public network.

Make sure the information connected to your account remains accurate. Outdated contact details can prevent security notices or transaction updates from reaching you. Incorrect information may also delay a withdrawal or account review because topph must confirm that the request comes from the correct person.

Do not place personal details in a public game chat. A dealer, presenter, player, or unofficial contact does not need your password, banking credentials, GCash PIN, Maya PIN, or verification code. Legitimate topph verification should happen only through the platform’s approved process.

Kabayan reminder: topph will never need your full password or one-time payment code through public chat.

Six information groups

What information topph may collect

The information required by topph depends on whether you are browsing, registering, verifying an identity, funding an account, playing, or requesting support.

Identity and account data

topph may collect your name, date of birth, username, account identifier, address, nationality, contact details, password records, and account preferences. This information helps topph create and administer the correct account.

Payment and transaction data

Records may include deposits, withdrawals, PHP amounts, payment references, limited account details, provider status, and ownership checks involving GCash, Maya, GrabPay, Coins.ph, banks, or eligible cards.

Verification information

topph may request an identity document, address evidence, photograph, account-ownership proof, or source-of-funds information when reasonably needed for security, eligibility, payment, or compliance checks.

Device and technical data

Browser type, device category, operating system, connection data, IP address, session times, security signals, and technical logs may help topph maintain performance and detect unauthorised access.

Gaming and preference data

topph may record games viewed, accepted stakes, sports markets, wins, losses, session activity, limits, promotion use, and responsible-gaming settings to operate the account and monitor platform integrity.

Communication records

Messages, support requests, complaint details, survey responses, security reports, and other correspondence may be kept so topph can answer questions, investigate issues, and maintain a reliable service history.

Purpose and necessity

How topph uses personal information

topph should use information for a clear service, security, legal, or user-support purpose. Different purposes may rely on different lawful grounds where applicable.

Examples of common topph processing activities and why they may be necessary.
Purpose	Information commonly involved	Why topph may need it
Account operation	Identity, contact, login, preference, and account records	To register a user, maintain access, provide features, and communicate service information.
Eligibility checks	Birth date, identity document, address, location, and verification records	To confirm that a person meets age, identity, and location requirements.
Payment processing	PHP amount, payment reference, provider status, and ownership details	To process deposits or withdrawals and investigate delayed or disputed transactions.
Game settlement	Selections, stakes, odds, table records, round results, and balances	To accept valid instructions, calculate results, and maintain an accurate topph history.
Security and fraud control	Device signals, IP records, account behaviour, payment activity, and verification data	To detect identity misuse, unauthorised access, collusion, payment abuse, and technical attacks.
Responsible gaming	Session patterns, deposits, losses, limits, exclusions, and account interactions	To operate controls, identify potential risk indicators, and enforce account restrictions.
Support and complaints	Messages, transaction references, recordings, documents, and investigation notes	To answer a question, resolve a complaint, verify an instruction, or document a decision.
Platform improvement	Aggregated usage, performance, error, browser, and device information	To understand how topph performs and make the mobile experience clearer and more reliable.

Lawful and proportionate processing

Depending on the activity and applicable requirements, topph may process information to perform an account agreement, meet a legal obligation, protect legitimate platform interests, respond to an emergency, or act with the user’s consent. Where topph relies on consent, that consent should be requested in a clear manner and may be withdrawn for future optional processing, subject to applicable limitations.

Withdrawing optional consent does not automatically erase records that topph must retain for an account, security, transaction, dispute, or legal purpose. It may also affect a feature that cannot reasonably operate without the relevant information.

Collection and communication

Where topph receives information

Information can come directly from you, from your use of topph, or from providers involved in payments, verification, security, and game operation.

01

Information you provide

You provide information when filling in a registration form, updating an account, submitting verification, making a payment request, setting a limit, joining an offer, or contacting topph. You should supply only accurate, relevant, and current information.

If topph requests a document, upload it only through the approved process. Avoid sending unnecessary information. For example, do not include a full card number or private verification code in an ordinary support message.

02

Information generated by platform use

Using topph creates operational records such as login times, accepted selections, game rounds, cashier actions, account changes, device data, and security events. These records help maintain balances, settle activity, and investigate reports.

Technical data may also show whether a page loaded correctly, how a device displayed an interface, or whether repeated login attempts occurred. topph may use this information to diagnose problems and protect an account.

03

Information from service providers

Payment providers may confirm whether a transaction succeeded, failed, was reversed, or requires review. Verification providers may return a match result or identify missing details. Game providers may supply round and settlement records needed by topph.

topph should request only information reasonably connected to the service being delivered. Providers may also process information under their own legal obligations and operational responsibilities.

04

Public and authorised sources

Where permitted and reasonably necessary, topph may compare submitted details with reliable public records, official sources, or fraud-prevention information. This may support identity, eligibility, security, or compliance checks.

A public record is not automatically collected just because it exists. topph should consider whether the information is relevant, proportionate, and appropriate for the specific review.

Sharing and service providers

When topph may disclose information

topph does not need to publish player information to operate the service. Limited disclosure may occur when another party performs an essential function or when a valid requirement applies.

Operational service providers

topph may share necessary information with providers supporting hosting, account verification, payments, fraud prevention, customer service, communications, analytics, cybersecurity, game delivery, and transaction processing. A provider should receive only information relevant to its role.

For example, a bank or e-wallet provider may require the account holder’s name, transaction reference, and PHP amount to process a payment. A verification provider may need an identity document and photograph to confirm a match. A game provider may need an account reference to return a valid round result to topph.

Where appropriate, topph expects providers to follow confidentiality, security, retention, and purpose restrictions. Providers should not use information for unrelated advertising or their own independent purposes unless a separate lawful basis and notice apply.

Legal, safety, and business events

topph may disclose information when reasonably required to comply with a valid legal process, respond to an authorised regulator, investigate suspected fraud, protect users, secure the platform, enforce account terms, or establish and defend legal rights.

Information may also be involved in a genuine business reorganisation, financing, sale, merger, or transfer. In such an event, reasonable steps should be taken to preserve applicable privacy protections and inform users when a material change affects how topph handles their data.

topph may use aggregated or de-identified information for reporting, planning, and service improvement when the information no longer identifies a player in a reasonably available way. De-identification is not used as an excuse to publish account-level activity.

No sale of account credentials: topph does not treat passwords, verification codes, identity documents, or payment credentials as products for sale. Users should also never sell or share their accounts.

Storage and protection

How topph safeguards and retains data

No online service can promise that risk is completely eliminated. topph applies reasonable organisational and technical measures intended to reduce unauthorised access, alteration, loss, or disclosure.

Security measures and incident response

Controls may include access restrictions, authentication, monitoring, protected communications, record logging, provider reviews, staff procedures, backups, and testing appropriate to the information and risk involved. Access to personal information should be limited to people or systems with a valid operational need.

Users must still take sensible precautions. A secure topph platform cannot protect a password willingly shared with another person or a verification code entered into a false message. Report unexpected logins, account changes, or payment activity promptly through the support email shown in the footer.

If a data incident creates a material risk, topph will assess the facts, take containment steps, preserve relevant records, and provide notifications where applicable requirements call for them. Information provided in a notice may depend on what is known at that stage of the investigation.

05

Retention periods

topph retains information only for as long as reasonably necessary for the purpose for which it was collected and for applicable account, transaction, verification, security, dispute, responsible-gaming, tax, accounting, or legal requirements.

Different records may have different retention periods. A temporary browser record may be held for less time than an account transaction or self-exclusion record. After a period ends, topph may securely delete, anonymise, or isolate the information.

06

International processing

Some providers or technical systems may process information in a location outside the Philippines. When this occurs, topph should consider appropriate contractual, organisational, and security safeguards for the transfer and handling of that information.

Privacy protections can differ between locations. topph aims to maintain protections appropriate to the information, processing purpose, and applicable rules rather than assuming every jurisdiction operates identically.

Control and transparency

Your privacy rights and choices on topph

Privacy rights depend on applicable law and the circumstances of the request. The Philippine Data Privacy Act of 2012 may provide relevant rights for eligible data subjects.

Right to be informed

You may ask how topph processes your information, including the general categories collected, purposes, recipients, and retention considerations.

Right to access

You may request access to personal information held about you, subject to identity verification and limitations protecting other people, security, and confidential records.

Right to correction

If topph account information is inaccurate or incomplete, you may ask for it to be corrected. Supporting evidence may be required for important identity details.

Right to object

You may object to certain processing where the right applies. topph may still process information when a stronger legal, security, contractual, or public-interest reason exists.

Deletion or blocking

You may request deletion or blocking in appropriate circumstances. topph may retain records needed for transactions, disputes, fraud prevention, exclusions, or legal duties.

Data portability

Where applicable, you may request certain topph information in a structured and commonly used format, subject to technical feasibility and legal limitations.

How to make a privacy request

Send your request to support@topph.app and clearly state that it concerns privacy. Include enough information for topph to identify the account and understand the request, but never include your password or one-time verification code. topph may ask you to complete identity checks before disclosing, correcting, exporting, or deleting account information.

A request may be limited or refused when it cannot be verified, would expose another person’s information, would compromise platform security, is manifestly abusive, or conflicts with an applicable retention or legal requirement. When appropriate, topph will explain the reason for the decision.

Browser storage and messages

Cookies, preferences, and topph communications

Browser technologies can help topph remember a session, protect an account, understand performance, and maintain user preferences.

Cookies and similar technologies

topph may use cookies, local storage, session records, or similar technologies for login continuity, account security, language or interface preferences, service measurement, and error diagnosis. Some technologies are necessary for a requested feature to operate correctly.

You may adjust supported browser controls, but blocking necessary storage can prevent topph login, cashier, security, or game features from working as expected. Clearing browser data may also remove saved preferences and require a fresh sign-in.

Where optional measurement or communication technologies require a choice, topph should present that choice in an appropriate manner. A privacy preference applies to the browser or account where it was recorded and may need to be set again on a new device.

Service and promotional messages

topph may send essential messages about verification, login security, transactions, account restrictions, responsible-gaming controls, rule updates, or service interruptions. These operational notices may still be required even if you choose not to receive optional promotions.

Optional promotional messages should be sent according to applicable preferences and requirements. Where an opt-out is available, topph will apply it to future optional communication after a reasonable processing period. An opt-out does not cancel an active account or prevent essential security notices.

Be careful with messages claiming to be from topph. Check the context before responding and never disclose a password, GCash PIN, Maya PIN, bank-card security code, or one-time password. When uncertain, sign in through the known topph address rather than following an unexpected instruction.

Special account considerations

Children, exclusions, and automated reviews

topph is intended only for adults who meet the legal eligibility requirements that apply to their location.

07

Information relating to minors

Minors must not register or use topph. If the platform has reason to believe that an account belongs to an underage person, access may be restricted while age and identity are reviewed.

A parent or guardian who believes a minor has supplied information should contact topph promptly. The request must include enough information to identify the concern without publicly sharing unnecessary details.

08

Responsible-gaming records

Deposit limits, session controls, risk interactions, and self-exclusion records can be sensitive. topph may retain these records to operate restrictions, prevent circumvention, address disputes, and support responsible-gaming obligations.

Closing an account does not necessarily erase an active exclusion record. Keeping limited information may be necessary to stop another topph account from being opened during the chosen restriction period.

09

Automated risk signals

topph may use rules or automated indicators to identify unusual logins, payment patterns, identity conflicts, technical attacks, bonus misuse, or potential responsible-gaming concerns. A signal does not always mean wrongdoing occurred.

Some signals may lead to additional verification or a manual review. Where applicable, users may ask for information about a significant automated decision and request appropriate human consideration.

10

Account closure and privacy

You may request account closure under the topph Terms and Conditions. Closure stops ordinary use but does not instantly remove transaction, verification, security, dispute, or exclusion records that must remain available.

After required retention periods end, topph may delete or anonymise the remaining account information according to documented procedures and technical capabilities.

Questions and updates

Contacting topph about your privacy

Clear details help topph review a privacy question efficiently while protecting the account from unauthorised requests.

Privacy questions and complaints

For a question, correction request, access request, complaint, or other privacy concern, contact topph at support@topph.app. State the nature of the request and provide your account identifier or registered contact detail where appropriate.

Do not send a password, one-time code, complete bank-card number, or unnecessary identity document in an ordinary email. topph may provide a safer verification process when supporting documents are needed.

topph will assess the request, confirm identity where necessary, review relevant records, and respond within a period appropriate to the request and applicable requirements. Complex requests may require clarification or additional time.

Changes to this Privacy Policy

topph may update this policy when the platform, payment options, providers, legal requirements, security practices, or information uses change. The updated version will apply from the stated effective or publication date.

When a change is material, topph may provide an account or platform notice where reasonably appropriate. Continue to review this page, especially before using a new feature or supplying a new category of information.

A policy update does not permit topph to ignore applicable privacy obligations. If a new purpose requires consent or another specific step, topph will take that step where required.

Policy contact: support@topph.app. Include “Privacy Request” in your message and keep confidential account credentials out of the email.

Review your account choices

Use topph with informed privacy decisions

Before registering, make sure you understand what information topph may require for account operation, identity checks, PHP payments, gaming records, security, and responsible play. Keep your details accurate, protect your credentials, and contact topph whenever you have a privacy question.

Register on topph Login

topph is for adults of legal gambling age only. Confirm applicable requirements and use the platform responsibly.