Privacy Policy

1. Introduction

maxim888 ("maxim888", "we", "us", "our") operates the online gaming platform accessible at maxim888.co (the "Platform"). In the course of providing our Services to registered players in Malaysia and other permitted jurisdictions, we necessarily collect and process certain categories of personal data. This Privacy Policy ("Policy") describes our practices with respect to that personal data in accordance with applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 ("PDPA") where applicable.

This Policy applies to all users of the maxim888 Platform — registered players, prospective registrants, and visitors to maxim888.co. It covers data collected through the website, any associated mobile interfaces, customer support channels, and third-party payment processors operating on our behalf.

maxim888 is the data controller for personal data processed under this Policy. For data processed by third-party game providers and payment processors on their own platforms, those parties act as independent data controllers and their respective privacy policies apply.

2. Personal Data We Collect

maxim888 collects the following categories of personal data, depending on your level of engagement with the Platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, government-issued ID number	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration & account updates
Financial Data	Payment method details (e-wallet IDs, bank account numbers), transaction history, deposit and withdrawal records	Deposits, withdrawals & KYC
Technical Data	IP address, browser type and version, device type, operating system, session timestamps	Platform access
Usage Data	Games played, bet amounts, win/loss history, session duration, pages visited	Ongoing platform use
Communications Data	Content of live chat conversations, email correspondence, support ticket records	Customer support interactions
Verification Data	Copies of passports, national identity cards, utility bills, selfie images for liveness checks	KYC & source-of-funds verification

maxim888 does not intentionally collect special categories of personal data (such as health data, racial or ethnic origin, political opinions, or biometric data used for identification) unless strictly required for responsible gaming obligations or anti-money laundering compliance, and only with your explicit consent where required by law.

3. How We Collect Your Data

maxim888 collects personal data through the following means:

• Direct Submission: Data you provide when completing the maxim888 registration form, submitting KYC documents, making deposits or withdrawals, or contacting our support team.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, via server logs, cookies, pixel tags, and similar tracking technologies.
• Third-Party Sources: Identity and address verification data obtained from licensed KYC/AML service providers in the course of mandatory compliance checks. Payment data passed to us by payment processors (Touch 'n Go, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank) in the course of processing transactions.
• Publicly Available Sources: Information from public registers, fraud prevention databases, and sanctions lists used for AML and compliance screening.

4. Legal Basis for Processing

maxim888 processes your personal data on one or more of the following legal bases, as applicable under the Malaysian PDPA and internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform our obligations under the player account agreement — including account creation, processing bets and payouts, and providing customer support.
• Legal Obligation: Processing required to comply with applicable law — including anti-money laundering obligations, KYC verification mandates, age verification requirements, and responses to lawful government requests.
• Legitimate Interests: Processing necessary for maxim888's legitimate business interests, provided those interests are not overridden by your fundamental rights. This includes fraud prevention, platform security, product improvement, and responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Personal Data

maxim888 uses your personal data for the following purposes:

• Creating, verifying, and managing your player account on the maxim888 Platform.
• Processing your deposits and withdrawals via your chosen Malaysian payment method (Touch 'n Go, Boost, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank).
• Conducting mandatory KYC, age verification (21+), and anti-money laundering checks as required by applicable law and our operating standards.
• Providing, personalising, and improving the maxim888 gaming experience, including game recommendations and VIP programme management.
• Administering bonus offers, promotions, and the maxim888 loyalty programme.
• Communicating with you in response to support enquiries, complaints, and account notifications.
• Sending marketing communications about maxim888 promotions, new game launches, and offers — where you have opted in, or where a legitimate interest basis applies under applicable law.
• Monitoring platform usage to detect and prevent fraud, cheating, collusion, money laundering, and other prohibited conduct.
• Complying with responsible gaming obligations, including enforcing self-exclusion requests and deposit limits.
• Maintaining the security and integrity of the maxim888 Platform and its infrastructure.
• Fulfilling legal, regulatory, and compliance obligations applicable to maxim888's operations.

6. Data Sharing and Disclosure

maxim888 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, solely for the purposes described in this Policy:

• Payment Processors: Malaysian e-wallet operators and banking partners (Touch 'n Go, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank) receive the minimum payment data necessary to process your transactions.
• KYC/AML Service Providers: Licensed identity verification and anti-money laundering screening providers who process your identity documents on our behalf under data processing agreements.
• Game Providers: Certified third-party game providers receive your account identifier (but not your full identity data) in order to deliver games and maintain game session integrity.
• Technology Vendors: Cloud infrastructure, cybersecurity, customer support software, and analytics vendors who process data on maxim888's behalf under strict contractual data protection obligations.
• Regulatory & Law Enforcement Authorities: Competent authorities where disclosure is required by applicable law, court order, or regulatory demand. maxim888 will notify you of such disclosures where legally permissible to do so.
• Fraud Prevention Networks: Shared fraud databases operated by industry organisations, where sharing your data is necessary to protect other players and the integrity of the maxim888 Platform.

All third parties to whom maxim888 discloses personal data are required to maintain appropriate technical and organisational security measures and to use the data solely for the specified purpose.

7. Cookies and Tracking Technologies

maxim888 uses cookies and similar tracking technologies on the Platform to deliver core functionality, improve performance, and support analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function — including session management, login authentication, and fraud detection. These cannot be disabled without disrupting Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the maxim888 Platform — including pages visited, time on page, and navigation paths. This data is used to improve the user experience.
• Functional Cookies: Used to remember your Platform preferences — including language settings, game lobby filters, and display preferences.
• Marketing Cookies: Used, where consented, to deliver relevant maxim888 promotional content. These are only activated where you have provided explicit consent.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the maxim888 Platform.

8. Data Retention

maxim888 retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active maxim888 account plus a minimum of 5 years following account closure, in accordance with AML record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of submission or the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of 7 years to satisfy financial record-keeping obligations.
• Customer Support Records: Retained for 3 years from the date of the last interaction, unless a longer period is required for an unresolved dispute.
• Marketing Data: Retained until you withdraw consent or opt out, plus a reasonable period thereafter to record the withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

9. Data Security

maxim888 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and maxim888 servers.
• Encryption of sensitive data fields at rest, including payment credentials and identity document references.
• Role-based access controls ensuring that only authorised maxim888 personnel can access personal data, limited to what is necessary for their role.
• Regular third-party penetration testing and vulnerability assessments of Platform infrastructure.
• Multi-factor authentication requirements for all administrative Platform access.
• Incident response procedures with defined notification timelines in the event of a personal data breach.

While maxim888 takes all reasonable steps to protect your data, no internet transmission or digital storage system can be guaranteed to be 100% secure. You are encouraged to use a strong, unique password for your maxim888 account and to enable two-factor authentication.

10. Your Privacy Rights

Subject to applicable law, you have the following rights with respect to your personal data held by maxim888:

• Right of Access: You may request a copy of the personal data maxim888 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to maxim888's legal obligation to retain specific data categories.
• Right to Restrict Processing: You may request that maxim888 restricts processing of your personal data in defined circumstances.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of your data.
• Right to Object: You may object to processing based on maxim888's legitimate interests, and to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact maxim888 at [email protected]. We will respond within 30 days of receiving your request. We may need to verify your identity before processing certain requests.

11. Children's Privacy

The maxim888 Platform is strictly intended for adults aged 21 years and above. maxim888 does not knowingly collect personal data from persons under the age of 21. If maxim888 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all personal data will be deleted, and any deposits will be refunded to the originating payment method. If you believe a minor has accessed the maxim888 Platform, please notify us immediately at [email protected].

12. Third-Party Links

The maxim888 Platform does not contain links to third-party websites for commercial purposes. Where links to third-party services (such as payment processors) are necessary for transaction completion, those services are governed by their own privacy policies. maxim888 is not responsible for the privacy practices of third-party services and encourages you to review the privacy policies of any third-party platform you interact with.

13. Changes to This Privacy Policy

maxim888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes will be communicated to registered players via the email address on file and/or prominent notice on the maxim888 website at least 14 days before the changes take effect. Your continued use of the Platform after the effective date of any revised Policy constitutes acceptance of the updated terms. The current version of this Policy is always accessible at maxim888.co/privacy-policy.

14. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or maxim888's data processing practices, please contact our data protection team:

• Email: [email protected]
• Subject Line: Privacy Request — [Your Username]
• Response Time: Within 30 calendar days for formal privacy requests; within 2 business days for general enquiries
• Support Hours: 24/7 via live chat on the maxim888 website

If you are dissatisfied with maxim888's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.