Privacy Policy Maxwin — Personal Data Protection for Malaysia Players

This Privacy Policy ("Policy") is published by maxwin ("we", "Platform", or "maxwin") and applies to all users of the maxwin.bz platform and related services, including the mobile app, support chat, and all official maxwin communication channels.

We understand that your trust is the most valuable asset we hold. When you entrust your personal information to maxwin, we take that responsibility very seriously. This Policy is written in clear, plain language — not confusing legal jargon — so you truly understand your rights and how your data is handled.

By using the maxwin platform, you agree to the collection and use of information as described in this Policy. If you do not agree with any part of it, please discontinue use of the platform and contact our support team to close your account.

Maxwin collects personal information solely as necessary for the safe operation of the platform and compliance with legal requirements. The following are the categories of data we collect:

We do not collect sensitive data such as health information, religious beliefs, or political views unless required by law in specific circumstances.

Maxwin uses your personal data only for legitimate, clearly stated purposes. We will not use your data for any other purpose without first obtaining your consent. The primary purposes for which your data is used are:

• Account Management: Creating, verifying, and managing your player account, including the required KYC process.
• Transaction Processing: Processing deposits, withdrawals, and all financial activities in your account securely and accurately.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and any suspicious activity.
• Legal Compliance: Fulfilling legal obligations including anti-money laundering (AML) requirements and reporting to relevant authorities.
• Customer Support: Providing technical assistance and resolving complaints or enquiries you submit.
• Service Improvement: Analysing usage patterns in aggregate to improve the user experience and platform functionality.
• Service Communications: Sending important notifications related to your account, security, or changes to our terms.

Maxwin does not sell, rent, or trade your personal data to any third party. However, in certain limited situations, we may need to share your information with the following parties:

• Trusted Service Providers: Companies that help us operate the platform — such as payment gateway providers, cloud services, and game software suppliers — are all bound by strict confidentiality agreements with maxwin.
• Statutory Authorities: Where required by Malaysian law or a valid court order, maxwin will comply with data disclosure requests from competent authorities.
• Fraud Prevention: Limited information may be shared with recognised fraud prevention agencies to protect all players from illegal activity.

In all data sharing cases above, maxwin ensures that only the minimum necessary information is disclosed and that all recipients are bound by equivalent confidentiality obligations.

Maxwin implements multiple layers of technical and organisational protection to keep your personal data secure. The security measures we employ include:

• 256-bit SSL/TLS encryption for all data in transit.
• Database-level data encryption for stored sensitive information.
• Two-factor authentication (2FA) is available for all player accounts.
• 24/7 security monitoring by our cybersecurity team.
• Regular penetration testing conducted by independent security experts.
• Strict role-based access control — only staff who require access to specific data are permitted.
• Regular internal and external security audits are conducted periodically.

Maxwin retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law. The general data retention guidelines are as follows:

• Active Account Data: Retained for the duration the account remains active and in use.
• Financial Transaction Data: Retained for a minimum of seven years from the transaction date, in accordance with Malaysian financial law requirements.
• KYC Data: Retained for a minimum of five years after the business relationship ends, in accordance with AML requirements.
• Support Communication Records: Retained for three years for reference and dispute resolution purposes.
• Technical & Log Data: Retained for 12 months for security and fraud detection purposes.

Once the retention period expires and there is no legal requirement to keep it, your data will be securely deleted or anonymised so it can no longer be associated with you.

Under Malaysia's PDPA and maxwin's commitment to privacy, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our privacy team via the support email or live chat within the platform. Requests will be processed within 14 business days. We may require identity verification before processing certain requests to protect the security of your account.

Maxwin uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Functional Cookies: Remembering your preferences such as language, display settings, and other choices to improve ease of use.
• Analytics Cookies: Helps us understand, in aggregate and anonymised form, how players use the platform for service improvement purposes.

You can manage or disable non-essential cookies through your web browser settings. However, disabling certain cookies may affect platform functionality. maxwin does not use third-party cookies for external advertising purposes.

The maxwin platform is strictly for individuals aged 18 and above. Maxwin does not knowingly collect any personal information from children or minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.

Maxwin reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Any material amendments will be communicated to players via in-platform notifications or registered email at least 14 days before taking effect.

We encourage you to review this Policy periodically. The "Last Updated" date at the top of this document indicates when it was last modified. Continued use of the platform after any amendments take effect constitutes your acceptance of the latest version.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, you can reach the maxwin privacy team via: