maxxim88 Privacy Policy

1. Data Controller

maxxim88 ("we", "us", "our") is the data controller responsible for the personal information collected through the maxxim88 Platform. As data controller, maxxim88 determines the purposes and means by which your personal data is processed. For all data-related enquiries, Players may contact maxxim88 via the support channels listed in Section 14 of this Policy.

2. Personal Data We Collect

maxxim88 collects the following categories of personal data from Players and Platform visitors:

2.1 Identity and Contact Data

• Full legal name as provided during account registration;
• Date of birth (used for age verification — players must be 21 or above);
• Email address;
• Malaysian mobile number;
• Residential address (where required for identity verification);
• Government-issued identification document details (where required for KYC verification).

2.2 Financial Data

• Payment method identifiers (e.g., Touch n Go eWallet account identifier, DuitNow registered number, bank account name) — note that maxxim88 does not store full payment instrument numbers;
• Deposit and withdrawal transaction records, including amounts, timestamps, and method used;
• Account balance history.

2.3 Gaming and Behavioural Data

• Game history, including bets placed, games accessed, wager amounts, and outcomes;
• Bonus and promotion history;
• Session duration, login timestamps, and device information;
• Responsible gaming settings and self-exclusion records.

2.4 Technical Data

• IP address and approximate geolocation derived from IP;
• Browser type, version, and operating system;
• Device identifiers and screen resolution;
• Referring URL and pages visited within the Platform.

2.5 Communications Data

• Records of live chat interactions with maxxim88 support;
• Email correspondence sent to or received from maxxim88.

3. How We Collect Your Data

maxxim88 collects personal data through the following mechanisms:

• Direct provision: Data you actively provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or participating in a promotion;
• Automated collection: Technical and behavioural data collected automatically as you navigate and use the Platform, via server logs, session tracking, and cookies (see Section 7);
• Third-party sources: Data received from payment processors (e.g., confirmation of successful TnG eWallet or DuitNow transactions), fraud prevention service providers, and identity verification agencies for the purposes of KYC compliance.

4. Purpose of Processing

maxxim88 processes your personal data for the following purposes:

1. Account management: Creating, maintaining, and administering your maxxim88 Player account, including identity and age verification;
2. Service delivery: Processing deposits and withdrawals, providing access to games, sportsbook, and all Platform features;
3. Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, collusion, money laundering, and other prohibited activities;
4. Legal compliance: Meeting obligations under applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and gaming authority obligations;
5. Customer support: Responding to your queries, complaints, and requests;
6. Responsible gaming: Monitoring play patterns to identify potential problem gambling behaviour and administering self-exclusion and limit-setting tools;
7. Platform improvement: Analysing aggregated and anonymised usage data to improve Platform performance, user experience, and game offerings;
8. Marketing communications: Where you have provided explicit consent, sending promotional offers, bonus notifications, and Platform updates to your registered email or mobile number. You may withdraw consent at any time.

5. Legal Basis for Processing

maxxim88 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to create and manage your Account and deliver the services you have requested under our Terms & Conditions;
• Legal obligation: Processing required to comply with applicable laws, including identity verification, AML obligations, and age-gating requirements;
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring, and improving our services, where these interests are not overridden by your rights;
• Consent: Where we rely on your explicit, freely given consent — in particular for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Third-Party Disclosure

6.1 maxxim88 does not sell, rent, or trade your personal data to any third party.

6.2 maxxim88 may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: Touch n Go eWallet, DuitNow, Boost, GrabPay, FPX-participating banks (Maybank, CIMB, Public Bank, Hong Leong Connect), and other payment service providers, for the purpose of processing deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML screening services used to verify player identity and comply with regulatory requirements;
• Gaming technology providers: Certified game studios and live casino operators whose products are accessible through the maxxim88 Platform, where player session data must be transmitted for game functionality;
• Fraud prevention services: Specialised providers used to detect and prevent fraudulent account activity and payment fraud;
• Legal and regulatory authorities: Regulators, law enforcement agencies, or courts, where disclosure is required by applicable law or order.

6.3 All third-party recipients with whom maxxim88 shares personal data are subject to contractual data protection obligations consistent with applicable data protection law. maxxim88 conducts due diligence on third-party data processors before engagement.

7. Cookies and Tracking Technologies

7.1 The maxxim88 Platform uses cookies and similar tracking technologies to operate the Platform and improve your experience. The following cookie categories are used:

• Strictly necessary cookies: Essential for Platform functionality — including maintaining your login session, remembering your language preference, and ensuring secure account access. These cannot be disabled without breaking core Platform features.
• Analytics cookies: Used to collect aggregated, anonymised information about how visitors use the Platform — including which pages are visited most frequently and how long sessions last. This data is used solely to improve Platform performance and is not linked to individual Player identities.
• Functional cookies: Used to remember your preferences and settings within the Platform, such as your preferred game category or deposit method.

7.2 maxxim88 does not use third-party advertising cookies or behavioural tracking cookies that target you with advertisements across other websites.

7.3 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to log in to your maxxim88 account or use certain Platform features.

8. Data Retention

8.1 maxxim88 retains your personal data for as long as your Account remains active and for such additional period as is required by applicable legal, regulatory, and audit obligations. The general retention periods applied by maxxim88 are as follows:

• Account and identity data: Retained for the duration of the Account plus seven (7) years following Account closure, as required for AML and financial record-keeping compliance;
• Transaction records: Retained for seven (7) years from the date of the transaction;
• Gaming and session logs: Retained for three (3) years from the date of the session;
• Communications data (support chat, email): Retained for three (3) years from the date of the interaction;
• Marketing consent records: Retained for the duration of consent plus two (2) years following withdrawal.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with maxxim88's data destruction procedures.

9. Data Security

9.1 maxxim88 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the maxxim88 servers;
• Encryption at rest for sensitive personal and financial data stored in maxxim88 databases;
• Role-based access controls limiting internal access to personal data to authorised personnel only;
• Regular internal security reviews and penetration testing of Platform infrastructure;
• Two-factor authentication (2FA) options for Player accounts to reduce the risk of unauthorised access.

9.2 Notwithstanding the above, no method of data transmission or storage is completely secure. maxxim88 cannot guarantee the absolute security of your data. In the event of a data breach that is likely to result in a risk to your rights, maxxim88 will notify affected Players in accordance with applicable data breach notification requirements.

9.3 You are responsible for keeping your maxxim88 Account credentials confidential. Do not share your password with any third party. maxxim88 will never ask for your password via live chat, email, or any other communication channel.

10. Your Data Rights

10.1 Subject to applicable law, you have the following rights in relation to your personal data held by maxxim88:

• Right of access: You may request a copy of the personal data maxxim88 holds about you;
• Right of rectification: You may request correction of any inaccurate or incomplete personal data;
• Right of erasure: You may request deletion of your personal data, subject to legal retention obligations that override this right;
• Right to restrict processing: You may request that maxxim88 limit how your data is used in certain circumstances;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of the above rights, contact maxxim88 support via live chat or email at the address listed in Section 14. maxxim88 will respond to verified data requests within thirty (30) days of receipt. We may require identity verification before processing a request.

11. Children and Age Restrictions

11.1 The maxxim88 Platform is strictly intended for individuals aged 21 years and above. 21+

11.2 maxxim88 does not knowingly collect personal data from persons under the age of 21. If maxxim88 becomes aware that personal data has been collected from a minor, the relevant Account will be immediately closed and all associated data deleted, except where retention is required by law for fraud or AML investigation purposes.

11.3 If you believe that a person under the age of 21 has registered a maxxim88 Account, please contact us immediately at the address in Section 14.

12. Third-Party Websites and Links

12.1 The maxxim88 Platform does not contain links to third-party websites other than payment providers accessed during the deposit or withdrawal process. maxxim88 is not responsible for the privacy practices of any third-party payment provider's own platforms or websites.

12.2 When you initiate a payment via Touch n Go eWallet, DuitNow, or a Malaysian bank's FPX portal, you will be directed to that provider's own secure environment. Your interaction with that provider is governed by their own privacy policy, not this one. maxxim88 receives only a payment confirmation and does not store your full payment credentials.

13. Updates to This Privacy Policy

13.1 maxxim88 reserves the right to update or modify this Privacy Policy from time to time. The date of the most recent revision is indicated at the top of this page.

13.2 Where a material change is made to this Policy — such as a change in the purposes for which we process data or a new category of third-party sharing — maxxim88 will notify registered Players via their registered email address prior to the change taking effect.

13.3 Your continued use of the maxxim88 Platform following notification of updated Privacy Policy terms constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the Platform and close your Account.

14. Contact Us

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by maxxim88, you may contact us through the following channels:

14.2 maxxim88 is committed to addressing privacy concerns promptly. We aim to acknowledge all data-related enquiries within two (2) business days and resolve them within thirty (30) days of receipt of the verified request.