Privacy Policy maxwin89 — Personal Data Protection for Malaysian Players

Maxwin89 only collects information necessary to provide the platform's services to you. We do not collect irrelevant or excessive data. The following are the categories of information we may collect:

1.1 Information You Provide Directly

• Full name as per MyKad or passport
• Identity card number (MyKad) or passport number
• Date of birth (for age verification)
• An active email address
• Malaysian mobile phone number
• Payment method details — Touch 'n Go account holder name, DuitNow, GrabPay, Boost, ShopeePay, FPX (Maybank2u / CIMB Clicks)
• Identity verification (KYC) information, such as copies of your ID and bank statements

1.2 Technical Information Collected Automatically

• IP address and approximate location (state/city within Malaysia)
• Web browser type and operating system version
• Access log data including pages visited and time spent
• Device information such as phone model and screen resolution
• Cookie and session token data

1.3 Gaming Activity Information

• Betting records — Sports Betting (Malaysia Super League, EPL, badminton, e-sports), slots, live casino
• Deposit and withdrawal history in Malaysian Ringgit (RM)
• Account balance and bonus transactions
• Gaming preferences and activity patterns

The information we collect is used solely for legitimate purposes necessary to operate maxwin89's services effectively. We never use your data for purposes beyond the scope outlined below without first obtaining your consent.

Specifically for promotional and marketing purposes, you may opt out of receiving related communications by updating your notification settings within your account or by contacting the maxwin89 support team.

Maxwin89 does not sell or trade members' personal data. However, there are limited situations where we need to share data with certain parties in order to operate our business effectively:

3.1 Payment Service Providers

To process your deposits and withdrawals in Malaysian Ringgit (RM) via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), the required transaction information will be shared with the respective payment service providers. All providers are bound by strict data confidentiality agreements.

3.2 Game Providers

Third-party game providers such as Pragmatic Play, PG Soft, and Evolution Gaming may receive minimal technical information (such as session IDs) necessary to run the games. They do not receive your full personal details.

3.3 Legal Requirements

Maxwin89 will disclose information to the relevant authorities when required by Malaysian law, court order, or in the course of a legitimate financial crime investigation.

3.4 What We Do Not Do

• We do not sell data to advertisers or third-party marketing companies
• Does not share your full personal profile with any other party
• We do not allow third parties to use your data for their own purposes

Protecting members' personal data is a core technical priority at maxwin89. We continuously invest in robust security infrastructure to ensure your data remains safe from unauthorised access, loss, destruction, or accidental disclosure.

4.1 Technical Safeguards

• TLS 1.3 + 256-bit SSL Encryption for all data communications
• Sensitive data encryption in the database using AES-256
• Multi-layered firewall and intrusion detection systems (IDS/IPS)
• Two-factor authentication (2FA) for staff access and sensitive operations
• Daily data backups encrypted and stored at a separate location
• Regular security audits by independent cybersecurity firms

4.2 Organisational Measures

• Data access policy based on a need-to-know basis
• Mandatory cybersecurity training for all maxwin89 staff
• Clear and tested security incident response procedures
• 24/7 monitoring by an in-house IT security team

That said, no system in the world is truly 100% secure. We encourage members to do their part by using strong passwords and never sharing their login credentials with anyone.

Like most modern websites, maxwin89 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform performs at its best. The following are the types of cookies we use:

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect your login functionality and gaming sessions on the maxwin89 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject are entitled to rights protected by law. maxwin89 fully respects these rights and provides clear channels for you to exercise them.

To exercise any of the rights above, please submit a written request to the maxwin89 Data Protection Officer team via email: privacy@maxwin89.biz. Requests will be processed within 14 business days.

Maxwin89 retains personal data only for as long as necessary for the original purpose of collection or as required under Malaysian law.

7.1 Standard Retention Periods

• Active account information: For the duration of the active account + 7 years after closure (Malaysia financial legal requirement)
• Financial transaction records: Minimum 7 years as required under the Malaysian Companies Act
• Game activity logs: 2 years from the date of record
• Customer support records: 3 years from the date the case is resolved
• Analytics cookie data: Up to 90 days

7.2 Data Deletion Upon Request

Upon account closure, you may request the deletion of your personal data. However, data that must be retained for legal compliance purposes (such as financial transaction records) cannot be deleted until the mandatory retention period expires. maxwin89 will clearly inform you at the time of your request which data can and cannot be deleted.

The maxwin89 platform is strictly restricted to individuals aged 18 years and above. We do not knowingly collect, store, or process any personal information from minors.

If maxwin89 discovers that a person under the age of 18 has registered an account by providing false age information, the account will be terminated immediately, all balances and winnings will be forfeited, and the relevant information will be deleted from our systems as soon as practicable.

If you know or suspect that a child or underage individual is using the maxwin89 platform, please contact us immediately at support@maxwin89.biz so that immediate action can be taken.

In the course of its operations, maxwin89 may need to transfer members' personal data to servers or service providers operating outside Malaysia — for example, international game providers or cloud infrastructure.

Whenever such data transfers occur, maxwin89 ensures that:

• The recipient country or organisation maintains a level of data protection equivalent to or higher than Malaysia's PDPA standards
• A legally binding data transfer agreement has been signed between maxwin89 and the receiving party
• Only the minimum data required for operational purposes is transferred
• Data encryption is applied during the transfer process

Maxwin89 does not transfer data to parties in countries without adequate data protection laws without first obtaining your explicit consent.

If you have any questions, concerns, or complaints about how maxwin89 handles your personal data, or if you wish to exercise any of your PDPA rights, please reach us through the following channels:

• Privacy Email: privacy@maxwin89.biz
• General Support Email: support@maxwin89.biz
• Live Chat: Available 24/7 in Bahasa Malaysia via the maxwin89 platform

All privacy-related complaints or enquiries will be acknowledged within 48 hours and resolved within 14 working days. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP).

Maxwin89 reserves the right to amend this Privacy Policy from time to time. Any material changes will be communicated to members via their registered email or a prominent notice on the platform at least 14 days before the amendments take effect.