maxis88 Privacy Policy

1. Introduction

maxis88 takes data privacy seriously. As a platform serving over 850,000 Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and the rest of Malaysia, we process personal information as a necessary and regulated part of operating a licensed online gaming platform. This Policy is designed to give you a clear understanding of what data we hold about you, why we hold it, how it is protected, and what rights you have in relation to it.

By registering an account with maxis88 or by using our platform in any capacity, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference.

2. Data We Collect

2.1 Data You Provide Directly

When you register, verify your identity, make deposits or withdrawals, contact support, or participate in promotions, you provide us with personal data that may include:

• Identity data: Full legal name, date of birth, gender, and nationality;
• Contact data: Email address, phone number, and residential address;
• Identity verification documents: MyKad, passport, driver's licence, and proof of address (such as a utility bill or bank statement issued to your address in Malaysia);
• Financial data: Bank account details, e-wallet identifiers (Touch n Go, Boost), and transaction history;
• Account credentials: Username and encrypted password (we never store passwords in plain text);
• Communication records: The content of live chat, email, and support interactions with our team.

2.2 Data Collected Automatically

When you access and use the maxis88 platform, we automatically collect technical and behavioural data including:

• IP address and approximate geographic location derived from IP;
• Device type, operating system, browser type and version;
• Session data including login timestamps, pages visited, and session duration;
• Gameplay data including bets placed, games played, stakes, and outcomes;
• Cookie identifiers and similar tracking technologies (see Section 6).

3. How We Use Your Data

maxis88 uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and management	Identity, contact, and credential data
Identity verification (KYC)	Identity documents, financial data
Processing deposits and withdrawals	Financial data, identity data
Delivering gaming services	Account data, gameplay data
Fraud prevention and security monitoring	IP, device, session, and financial data
Anti-money laundering compliance	Identity, financial, and transaction data
Responsible gaming monitoring	Gameplay data, session data, account data
Customer support	Contact data, communication records
Marketing communications (where consented)	Contact data, gameplay preferences
Platform analytics and improvement	Session and behavioural data (aggregated)

4. Legal Basis for Processing

maxis88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our agreement with you, including account management, gameplay delivery, and payment processing;
• Legal obligation: Processing required to comply with anti-money laundering laws, gaming licence conditions, tax obligations, and fraud prevention requirements mandated by our international gaming authority licence;
• Legitimate interests: Processing for fraud detection, platform security, and service improvement, where such interests are not overridden by your rights;
• Consent: For marketing communications and non-essential cookies, where we have obtained your explicit consent. You may withdraw consent at any time.

5. Data Sharing

maxis88 does not sell your personal data to third parties. We share your data only in the following circumstances and only to the extent necessary:

• Payment processors: To facilitate MYR deposits and withdrawals via Touch n Go, Boost, Maybank, CIMB, Public Bank, and other approved payment channels;
• Identity verification providers: To conduct KYC and age verification checks as required by our licence;
• Game software providers: Limited data shared with licensed game studios to deliver gameplay (e.g., Pragmatic Play, PG Soft). These providers operate under strict data processing agreements;
• Fraud and security services: To third-party services that assist with fraud detection and account security monitoring;
• Legal and regulatory authorities: Where required by applicable law, court order, or our gaming authority regulatory obligations;
• Business transfers: In the event of a merger, acquisition, or restructuring, your data may be transferred to a successor entity under equivalent privacy protections.

All third parties with whom we share personal data are contractually required to process it only for the specified purpose and in accordance with applicable data protection standards.

6. Cookies & Tracking Technologies

maxis88 uses cookies and similar tracking technologies to operate the platform, improve user experience, and where consented, deliver relevant promotional content. The categories of cookies we use are:

• Essential cookies: Required for the platform to function. These cannot be disabled. They maintain your login session, remember your preferences, and protect against CSRF attacks;
• Analytics cookies: Collect aggregated, anonymised data about how players use the platform, allowing us to identify and fix issues and improve navigation;
• Preference cookies: Remember choices you have made, such as language preference or responsible gaming limits you have set;
• Marketing cookies: Used only with your consent to deliver relevant promotions. You may opt out at any time through your account settings.

You can manage non-essential cookie preferences through your browser settings. Note that disabling essential cookies may affect platform functionality.

7. Data Retention

maxis88 retains your personal data for as long as your account is active and for a period thereafter as required by our licensing obligations and applicable law. Specifically:

• Account data and transaction records are retained for a minimum of five (5) years from the date of the last transaction, as required under anti-money laundering regulations;
• KYC documents are retained for a minimum of five (5) years following account closure;
• Support communication records are retained for three (3) years from the date of the interaction;
• Marketing consent records are retained for the duration of your active consent and for a reasonable period thereafter as evidence of compliance.

Upon expiry of applicable retention periods, data is securely deleted or anonymised in accordance with our data destruction policy.

8. Data Security

maxis88 implements a layered security framework to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Security measures include:

• Transport Layer Security (TLS 1.3) encrypting all data transmitted between your device and our servers;
• At-rest encryption for sensitive data stored in our databases, including identity documents and financial records;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication for internal systems;
• Regular penetration testing and independent security audits;
• Anomaly detection systems monitoring for unusual login behaviour or data access patterns.

9. Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by maxis88:

• Right of access: Request a copy of the personal data we hold about you;
• Right to rectification: Request correction of inaccurate or incomplete data;
• Right to erasure: Request deletion of your data, subject to our legal retention obligations;
• Right to restriction: Request that we restrict processing of your data in certain circumstances;
• Right to data portability: Request transfer of your data to another controller in a structured, machine-readable format;
• Right to object: Object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Withdraw consent for processing based on consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat on the platform or in writing at [email protected]. We will respond to verified requests within 30 days. We may require identity verification before processing your request.

10. Children's Privacy

The maxis88 platform is strictly for individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will immediately close the relevant account, forfeit any associated balances, and delete the data in accordance with our data destruction policy. If you believe a minor has registered on our platform, please contact us at [email protected] immediately.

11. Third-Party Services

The maxis88 platform integrates with third-party game providers, payment processors, and security services. While we take steps to ensure these partners operate to an appropriate standard of data protection, we are not responsible for the privacy practices of third-party websites or services that are independent of maxis88. This Privacy Policy applies solely to data processed by maxis88 in connection with our platform. Where third-party service providers process your data on our behalf, they do so under data processing agreements that bind them to equivalent data protection standards.

12. Changes to This Policy

maxis88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or our licensing obligations. When material changes are made, we will notify you by email to your registered address or via a prominent notification on the platform. The date of the most recent update is displayed at the top of this Policy. Your continued use of the platform following notification of changes constitutes your acceptance of the revised Policy.

13. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact the maxis88 Data Protection team: