Privacy at Topmatch: How the Operator Handles Your Data — October 2026
This page brings together everything you should know about your own data on the platform: what exactly the operator records, for what reason and how you can influence it. The privacy policy Topmatch publishes is written in everyday language — instead of article numbers and legalese you get short explanations and lists.
Latest revision: October 2026
What This Policy Is About and Who It Applies To
The Topmatch privacy policy answers three questions: which details about you reach the operator, why it needs them and what you yourself can do with them. Wherever the point can be made in plain words, legal phrasing has been deliberately left out.
Processing of your personal data at Topmatch begins the moment you register and carries on for as long as you use the service. Some things are recorded automatically as soon as you simply open the site.
The platform runs under a Curacao licence. It holds no permit from the Ukrainian regulator, so your data is handled under the rules of the jurisdiction that issued the licence rather than under Ukrainian law.
What this means for you: by registering you accept this document. If any of its terms do not suit you, it is better not to open an account — consent can only be withdrawn together with closing the account.
What Information About You Is Collected
Data enters the system in two ways. Some of it you supply yourself during registration and verification. The rest is logged automatically while you use the site.
| Data group | Examples | Where it comes from |
|---|---|---|
| Identification | Name, date of birth, citizenship | You enter it when registering |
| Contact | Email, phone number | You provide it yourself |
| Verification | Document scans, proof of age | You upload them during KYC |
| Financial | Deposit and withdrawal history, transaction details | Generated as you make transactions |
| Gaming | Bets, slips, game sessions, bonus status | Logged by the system |
| Technical | IP address, device model, browser, visit times | Captured automatically |
The operator does not have your full card number — the payment provider keeps it on its own side. All that remains in the system is what is needed to recognise a particular transaction.
Useful to know: the amount of data grows step by step. Before you are verified, your profile holds only contact and technical details. Document copies are added when you first request a withdrawal.
Why the Operator Needs Your Data
Each group of information serves a clear purpose. The terms do not allow data to be used for anything beyond the aims listed below.
- Recognising you. Opening the account, signing in, restoring access
- Handling money and bets. Deposits, processing payout requests, settling slips
- Meeting licence duties. Age checks, financial monitoring procedures
- Protecting your account. Spotting suspicious activity, duplicate profiles, attempts at unauthorised access
- Helping through support. Reviewing requests, reconstructing the timeline of a disputed situation
- Keeping you informed. Notices about transaction status and changes to how the service works
Promotional mailings are a separate matter and require your consent. If you opt out of them, the account works exactly the same and service messages keep arriving.
Please note: processing required by the licence cannot be switched off. Age verification and financial monitoring apply to every player.
Legal Grounds: When You Can Say No
The legal ground decides whether the operator may process particular information and whether you are able to object. There are four such grounds:
| Ground | What it covers | Can you opt out |
|---|---|---|
| Your consent | Marketing emails, optional cookies | Yes, at any moment |
| Performance of the contract | Running the account, bets, payments | Only by closing the account |
| Licence requirements | Verification, age control, monitoring | No |
| Operator's legitimate interest | Fighting fraud, platform security | No, unless your rights outweigh that interest |
In practice the key difference lies between the first and third rows. You withdraw consent in your settings, whereas processing for licence purposes continues regardless of what you want.
What this means for you: withdrawing marketing consent does not wipe your data completely. It stays stored on the other grounds — the contract and the licence requirements remain in force.
Who Your Data Is Shared With
Outside companies receive only the part of the information without which a specific task cannot be done. Selling data to advertisers or anyone else is not provided for in the terms.
- Payment providers. Process deposits and payouts and confirm the payment method belongs to you
- Game software developers. Receive technical session data so that a given game runs
- Document checking services. Confirm your identity and age
- The licensing authority. Receives information upon an official request
- Technical contractors. Hosting, analytics, customer support
All of these recipients are bound to keep the information confidential and may use it only for the agreed purpose. Beyond this list, data is handed over solely at the demand of authorised bodies.
Tip: when you contact support through a messenger, the chat passes through that provider's service. Do not send passport details or payment data there — the account area has secure forms for that.
How Your Data Is Protected — and What You Can Do
Security rests on two pillars: the platform's technical measures and your own habits. Reliable protection only happens when both are in place.
What the Operator Does
- Encrypts the connection between your device and the server
- Lets staff reach personal data only when their job actually requires it
- Offers two-factor authentication for signing in to the account
- Watches for suspicious actions on the account
Your Security Checklist
- Choose a separate password that you use for no other service
- Turn on two-factor authentication
- Avoid signing in from other people's or shared public devices
- Check the site address before entering any details
Honestly about risk: no system offers a one-hundred-percent guarantee. The operator takes reasonable measures, yet sending data over the internet always leaves some residual risk — and that holds for any online service.
How Long Information Is Kept
The retention period depends on how long your account exists and on obligations that continue after it is closed. Different groups of data are deleted at different times.
| What | For how long |
|---|---|
| Data of an open account | The whole time you use the service |
| Verification documents | As long as the licensing authority requires |
| Transaction history | For the period set by financial monitoring rules |
| Technical logs | A limited time needed for security |
| Your marketing preferences | Until you withdraw consent |
Closing the account does not make everything disappear. Financial monitoring and licensing rules oblige the operator to keep part of the information, and until the set period runs out it cannot be erased at your request.
Where to find exact figures: the operator publishes specific periods for each group in the data protection section of the site. They are determined by the licensing authority's requirements.
Your Rights Over Your Own Data
The set of rights you hold resembles European standards. These GDPR-style rights apply no matter which country the operator is registered in.
| Your right | How it works |
|---|---|
| Access to data | Ask for a list of the information held about you |
| Rectification | Update inaccurate or outdated details in your profile |
| Erasure | Demand deletion of data not subject to mandatory retention |
| Restriction of processing | Freeze use of the data while a dispute is ongoing |
| Withdrawal of consent | Opt out of marketing and optional cookies |
| Objection | Challenge processing that relies on legitimate interest |
Contact customer support and state right away which right you are using. The operator may ask you to confirm your identity — that is how it filters out requests from strangers.
A limit worth remembering: the right to erasure does not override mandatory retention. Verification documents and transaction history stay in the system until the period set by licence requirements has passed.
How to Submit a Data Request
Send any question about personal data to customer support — through your personal account or the contact channels shown on the site. There is no dedicated mailbox for such requests. You can also write from the mobile app.
For your request to be handled without extra back-and-forth, make sure it includes:
- the right you are exercising: access, rectification, erasure or withdrawal of consent;
- the email or account number the profile is registered under;
- the time span, if the request concerns a particular part of your history;
- the way you would like to receive the answer.
Do not be surprised: before acting on the request, the operator may ask you to confirm it really is you. This stops an outsider from obtaining information about your account.
Cookies in a Nutshell
Cookies are small files the site stores in your browser. Some are needed for the service to work at all, others are switched on only with your consent.
- Essential. Sign-in, keeping the session, slip contents — the site does not function without them
- Functional. Interface language, odds format, display settings
- Analytical. Tracking visits and behaviour on pages
- Marketing. Selecting offers and promotional materials for you
The first group cannot be turned off — otherwise you would not get into your account. You configure the rest in the browser or in the consent banner that appears on your first visit.
More detail: a description of each group, file retention periods and how to withdraw consent are set out in a separate document — the Cookie Policy.
Minors: The 21+ Rule
The service is meant for adults only. Gambling in Ukraine is allowed from the age of 21, and the operator does not open accounts for anyone younger.
Your age is checked during verification against an identity document. Until you complete it, the account has restrictions and withdrawing money is impossible.
If it turns out a minor is using an account, it will be closed. The collected data will be deleted, apart from what the operator has to keep for reporting.
What this means for you: you are responsible for who uses your device. If a child has gained access to your account, write to support and transactions will be suspended.
How the Policy Gets Updated
The document is reviewed when laws, licensing authority requirements or the way the platform operates change. The version in force is always published on this page.
You will find the date of the latest version right at the start. It makes it easy to check whether the terms have changed since your previous visit.
About significant changes — say, a new group of data being collected or a new recipient — you will be notified at the email given in your profile.
Important: if you keep using the service after a new version is published, this counts as accepting the updated terms. If you disagree, close your account as described in the terms of use.
Common Questions About Privacy
Is my activity on the site monitored?
Yes, technical data — IP address, device, visit times — is recorded automatically. Without it the account cannot be protected and suspicious actions would go unnoticed.
How are my payment details protected?
The operator does not hold full card numbers — the payment provider stores them. The system keeps only the details needed to recognise a transaction.
Can I refuse processing of my data?
For marketing mailings — yes, whenever you like. For processing needed for age checks and financial monitoring — no.
How do I find out what exactly is stored about me?
Write to support and say that you are exercising your right of access. Before replying, the operator may ask you to confirm your identity.
Can I close my account and erase all data?
The account will be closed on request, but some information will remain. Verification documents and transaction history are kept for the period set by the licensing authority's requirements.
What happens to data once the account is closed?
Information not subject to mandatory retention is deleted. The rest is kept until the end of the period required by financial monitoring.
Does the operator hand my data to third parties without need?
No, the circle of recipients is limited and each of them receives data for a specific task. The terms do not allow information to be sold to advertisers.
Does Ukrainian law govern the processing?
No. The operator holds a Curacao licence and no permit from the Ukrainian regulator, so data is processed under the rules of the licence jurisdiction.
Prepared by the editorial team: e-service.biz.ua editorial team
Published: · Updated:
This text is built from open sources and our own check of the operator's site: cashier, betting line, bonuses and licence status as of the update date. Verify the licence details on the official site before you play.