maxim888 Privacy Policy

1.About This Policy

1.1 This Privacy Policy describes how maxim888 ("we," "us," "our") collects, uses, discloses, stores, and protects personal information obtained from Players ("you," "your") and visitors to the maxim888 Platform.

1.2 This Policy applies to all personal data processed in connection with the maxim888 Platform, including data collected during account registration, identity verification (KYC), financial transactions, gameplay activity, customer support communications, and marketing interactions.

1.3 This Privacy Policy should be read alongside the maxim888 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2.Data Controller

2.1 For the purposes of applicable data protection legislation, maxim888 is the data controller in respect of personal data collected through the maxim888 Platform. Queries relating to the exercise of data rights, data processing practices, or the content of this Privacy Policy should be directed to the maxim888 Data Protection contact at support@maxim888.club.

3.Information We Collect

3.1 Registration Data: When you create an Account on maxim888, we collect your full legal name, date of birth, email address, mobile phone number, and preferred currency (MYR). This information is required to establish your Account and verify your eligibility to use the Platform.

3.2 Identity Verification (KYC) Data: To comply with our licensing obligations and to verify your identity prior to processing withdrawals, maxim888 collects copies of government-issued identification documents (MyKad or passport), proof of residential address, and, where required, source-of-funds documentation. This information is handled with heightened security controls.

3.3 Financial Data: We collect records of all deposit and withdrawal transactions, including the payment method used (e.g. Touch 'n Go eWallet, Boost, FPX, Maybank, CIMB, Public Bank), transaction amounts in MYR, timestamps, and transaction reference numbers. We do not store full payment card numbers or e-wallet credentials on our servers.

3.4 Gameplay Data: maxim888 logs all gameplay activity associated with your Account, including game titles accessed, wager amounts, session durations, win and loss records, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

3.5 Technical & Usage Data: When you access maxim888, we automatically collect your IP address, browser type and version, device type and operating system, referring URL, pages visited, and session timestamps. This data is used for security monitoring, fraud detection, and Platform performance optimisation.

3.6 Communications Data: Records of your communications with the maxim888 support team via live chat or email are retained for quality assurance and dispute resolution purposes.

4.How We Use Your Data

maxim888 processes your personal data for the following purposes:

• To create, manage, and administer your Account and verify your identity through KYC;
• To process MYR deposits, withdrawals, and related financial transactions;
• To deliver gaming services, including live casino, sportsbook, slots, and table games;
• To enforce the maxim888 Terms & Conditions, including age verification (21+ policy) and responsible gaming obligations;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To communicate with you regarding your Account, transactions, promotions, and Platform updates;
• To send marketing communications where you have provided consent or where a legitimate interest applies, and to maintain your preferences regarding such communications;
• To monitor gameplay patterns for responsible gaming purposes, including identifying potential problem gambling behaviour;
• To comply with legal and regulatory obligations applicable to maxim888's licensed operations;
• To analyse Platform usage and improve the quality, performance, and personalisation of maxim888 services.

5.Legal Basis for Processing

5.1 maxim888 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between maxim888 and the Player, including account administration, transaction processing, and delivery of gaming services;
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, anti-money laundering, and age verification obligations;
• Legitimate interests: Processing necessary for maxim888's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by the Player's rights;
• Consent: Processing of data for direct marketing communications where explicit consent has been obtained, and processing of certain categories of sensitive data where legally required.

6.Cookies & Tracking Technologies

6.1 maxim888 uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small data files stored on your device that help us recognise returning Players, maintain session state, remember preferences, and gather analytical data about Platform usage.

6.2 The categories of cookies used by maxim888 include:

• Essential cookies: Required for the basic operation of the Platform, including maintaining your login session and shopping basket state. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to understand how Players interact with the Platform, identify popular features, and diagnose technical issues. Data collected is aggregated and anonymised where feasible.
• Preference cookies: Store your Platform preferences such as language settings and display choices.
• Marketing cookies: Used where you have consented to receive personalised promotional content relevant to your interests and gaming activity on maxim888.

6.3 You may manage your cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use core Platform features, including the maxim888 login and gameplay functions.

7.Data Sharing & Third Parties

7.1 maxim888 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients where necessary:

• Payment processors and e-wallet providers (including Touch 'n Go eWallet, Boost, and FPX gateway operators) to facilitate MYR transactions;
• Game software providers who supply and operate games on the maxim888 Platform, to the extent necessary for gameplay delivery and dispute resolution;
• Identity verification and KYC service providers who assist in verifying Player identities and documents;
• Fraud prevention and security services to detect and prevent unauthorised access, fraudulent activity, and money laundering;
• Regulatory and law enforcement authorities where we are required by law, court order, or regulatory obligation to disclose information;
• IT infrastructure and cloud hosting providers who process data on our behalf under data processing agreements containing appropriate safeguards.

7.2 All third-party service providers processing data on behalf of maxim888 are contractually required to process such data only for specified purposes, in accordance with maxim888's instructions, and subject to appropriate security measures.

8.International Data Transfers

8.1 Some of maxim888's service providers and game software partners operate outside the country in which the Platform is accessed. Where personal data is transferred to recipients in countries that may not provide the same level of data protection as the Player's home jurisdiction, maxim888 implements appropriate safeguards — including standard contractual clauses or equivalent mechanisms — to protect data in transit and at rest.

9.Data Retention

9.1 maxim888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including the duration of the Player's Account and any applicable statutory or regulatory retention periods thereafter.

9.2 Financial transaction records and KYC documentation are retained for a minimum period as required by applicable anti-money laundering and gaming regulatory obligations, which typically extends to five (5) or more years following the closure of an Account.

9.3 Where data is no longer required for its original purpose or any compatible legal obligation, maxim888 will securely delete or anonymise it.

10.Your Rights

10.1 Subject to applicable data protection law, you hold the following rights in respect of personal data held by maxim888:

• Right of access: You may request a copy of the personal data maxim888 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations;
• Right to restriction: You may request that processing of your data be restricted in certain circumstances;
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request your data in a structured, machine-readable format;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of the above rights, contact maxim888 at support@maxim888.club. We will respond to verified requests within thirty (30) days. Identity verification may be required before a request is processed.

11.Security Measures

11.1 maxim888 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between Player devices and maxim888 servers;
• Encrypted storage of passwords using industry-standard hashing algorithms; plain-text passwords are never stored;
• Two-factor authentication (2FA) available to all Account holders to protect login access;
• Automated suspicious login detection and Account alert notifications;
• Access controls limiting internal access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the maxim888 Platform infrastructure.

11.2 Notwithstanding the above, no system is entirely immune to security breaches. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected Players, maxim888 will notify relevant authorities and affected individuals in accordance with applicable legal obligations.

12.Children & Minors

12.1 maxim888 is strictly an adult platform. Access is limited to persons aged 21 years and above. maxim888 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person below the minimum age, we will promptly close the affected Account and delete the associated data.

12.2 If you believe a minor has accessed maxim888 using your Account details, please contact support immediately at support@maxim888.club.

13.Changes to This Policy

13.1 maxim888 reserves the right to update this Privacy Policy at any time. The effective date of the current version is displayed at the top of this page. Where changes are material, maxim888 will notify registered Players by email or by prominent notice on the Platform. Continued use of the maxim888 Platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms.

14.Contact & Complaints

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by maxim888, please contact our Data Protection team: support@maxim888.club. Support is available 24 hours a day, seven days a week via live chat on the Platform.

14.2 If you are not satisfied with our response to a data protection concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.