maxim88 Privacy Policy

1.Introduction

maxim88 ("we", "us", "our") is committed to protecting the privacy of all individuals who use the maxim88 platform accessible at maxim88.vu ("Platform"). This Privacy Policy describes the personal data we collect from registered players and platform visitors, the purposes for which that data is used, the circumstances under which it may be shared, and the rights available to you in relation to your personal data.

By registering a maxim88 account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree to this Privacy Policy, you should not use the Platform.

This Policy should be read alongside the maxim88 Terms & Conditions, which govern your use of the Platform as a whole. In the event of any conflict between this Policy and the Terms & Conditions on a data privacy matter, this Privacy Policy shall prevail.

2.Personal Data We Collect

maxim88 collects the following categories of personal data from players and platform visitors:

• Identity data: Full legal name, date of birth, nationality, government-issued identification number, and copies of identity documents provided during KYC verification.
• Contact data: Email address, registered mobile number, and residential address.
• Account data: Username, account registration date, login history, account status, and communication preferences.
• Financial data: Deposit and withdrawal transaction records, payment method identifiers (e.g., bank account name, e-wallet registration name), and transaction amounts in MYR. Full card numbers and banking passwords are never collected or stored by maxim88.
• Gaming data: Game session records, wager amounts, game outcomes, bonus activity, and responsible gaming limit settings.
• Technical data: IP address, device type, browser type and version, operating system, and session duration data collected automatically during Platform use.
• Communications data: Records of your correspondence with maxim88 support, including live chat transcripts and email exchanges, retained for quality assurance and dispute resolution purposes.

3.How We Collect Your Data

maxim88 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or updating your account settings.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access and use the Platform.
• Third-party sources: Identity and address verification data received from KYC service providers; fraud risk signals received from payment processors; age verification data from identity verification bureaus. Data received from third parties is used solely for the purpose for which it was obtained.

4.Purposes of Data Processing

maxim88 processes your personal data for the following purposes:

• Account registration, maintenance, and authentication, including verification that you meet the 21+ age eligibility requirement.
• Processing deposits and withdrawals and maintaining accurate financial records as required by our licensing obligations.
• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations imposed by our international gaming licence.
• Providing customer support and resolving disputes or complaints.
• Personalising your experience on the Platform, including displaying relevant game recommendations and promotional offers.
• Monitoring Platform usage for fraud detection, security incident investigation, and responsible gaming compliance.
• Sending service-related communications, including transaction confirmations, security alerts, and account notifications. Marketing communications will only be sent where you have provided consent.
• Maintaining records required under applicable laws and regulations, including our gaming licence requirements.
• Analysing Platform performance and user behaviour in aggregate to improve our products and services.

5.Legal Basis for Processing

maxim88 processes personal data on the following legal bases:

• Contract performance: Processing necessary to provide the gaming services you have contracted for, including account management, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with KYC, AML, and other regulatory requirements imposed by our gaming licence and applicable law.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming enforcement, and Platform improvement, where these interests are not overridden by your rights.
• Consent: Where you have provided specific, informed consent — for example, to receive marketing communications or to enable non-essential cookies.

6.Data Sharing

maxim88 does not sell, rent, or trade your personal information to third parties for commercial purposes. Personal data may be disclosed to the following categories of recipients solely as required to deliver our services and comply with our obligations:

• Payment processors: To process deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, Hong Leong, and other supported payment channels.
• KYC and identity verification providers: To verify your identity, age, and address in compliance with our licensing obligations.
• Game studios and platform technology providers: Technical data necessary for game delivery and platform operation may be shared with our integrated game providers and infrastructure suppliers under data processing agreements.
• Fraud and AML screening services: Transaction and identity data may be screened against fraud and sanctions databases by third-party compliance service providers.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or the requirements of our gaming licence, personal data may be disclosed to regulators, tax authorities, or law enforcement agencies.

All third-party service providers who receive personal data from maxim88 are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the service they are contracted to provide.

7.International Data Transfers

The operation of the maxim88 platform may involve the transfer of personal data to service providers located outside Malaysia. Where such transfers occur, maxim88 ensures that appropriate safeguards are in place — including contractual data protection obligations — to maintain a level of protection consistent with the standards applicable to data processed within Malaysia. If you have questions about international transfers of your data, contact our support team at the details in Section 14.

8.Data Retention

maxim88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following specific retention guidelines:

• Account data and KYC records are retained for a minimum of five years following account closure, as required by our gaming licence and AML obligations.
• Transaction records are retained for a minimum of five years for financial reporting and audit purposes.
• Support communications are retained for two years following case closure.
• Technical and session log data is retained for up to twelve months.

Where data is no longer required for any legitimate purpose, it is securely deleted or anonymised. You may request early deletion of certain categories of data subject to the exceptions described in Section 11.

9.Data Security

maxim88 implements industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption on all data transmission between your device and our servers.
• Encrypted storage of passwords and sensitive identity data.
• Access controls limiting data access to authorised personnel with a legitimate operational need.
• Regular security assessments and penetration testing of the Platform.
• Two-factor authentication available for all player accounts.

While maxim88 takes reasonable steps to protect your data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect any unauthorised access to your account.

10.Cookies and Tracking Technologies

The maxim88 Platform uses the following categories of cookies and similar technologies:

• Essential cookies: Required for Platform functionality, including session management and authentication. These cookies cannot be disabled without disrupting your use of the Platform.
• Performance cookies: Used to collect anonymous data about how visitors use the Platform, including page load times and navigation patterns. This data is used to improve Platform performance.
• Functional cookies: Used to remember your preferences, such as language settings and game lobby display options.

maxim88 does not use advertising or retargeting cookies that track your activity across unrelated third-party websites. You may adjust your browser settings to block cookies; however, disabling essential cookies will affect Platform functionality.

11.Your Data Rights

Subject to applicable law and the limitations imposed by our regulatory obligations, you have the following rights in relation to your personal data held by maxim88:

• Right of access: You may request a copy of the personal data maxim88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to retention requirements imposed by our regulatory obligations.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances.
• Right to data portability: You may request that we provide your data in a structured, machine-readable format where processing is based on consent or contract.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact maxim88 support via live chat or email at [email protected]. We will respond to data rights requests within 30 days of receipt. Requests will be subject to identity verification before data is released or modified.

12.Children and Minors

The maxim88 Platform is strictly for persons aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If maxim88 becomes aware that personal data has been collected from an underage individual, that data will be deleted and the associated account closed immediately.

If you believe that a person under 21 has registered an account on the maxim88 Platform, please contact our support team immediately at [email protected].

13.Changes to This Privacy Policy

maxim88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where material changes are made, we will notify registered players by email or by a prominent notice on the Platform prior to the changes taking effect.

Continued use of the Platform following notification of changes to this Privacy Policy constitutes your acceptance of the updated policy. We recommend reviewing this page periodically to stay informed of how your data is handled.

14.Contact & Data Enquiries

For questions about this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact the maxim88 support team:

• Live Chat: Available 24/7 via the chat widget on this page.
• Email: [email protected]

Please include your registered account username or email address and a clear description of your request to enable prompt handling. maxim88 will acknowledge data rights requests within 5 business days and aim to resolve them fully within 30 calendar days.