Privacy Policy Maxwin138 — Malaysian User Data Protection

1 Introduction and Scope of This Privacy Policy

Maxwin138 is an online gaming platform operating exclusively for Malaysian players. We understand that your trust depends not only on the quality of games we offer, but also on how we handle the personal information you entrust to us.

This Privacy Policy applies to all users who access or use the maxwin138 platform, including the official website, iOS and Android mobile apps, and any related services we provide. By registering an account or continuing to use our platform, you agree to the practices described in this document.

Maxwin138 acts as the data controller for all personal information collected through our platform. This means we are fully responsible for determining the purpose and method of processing your data, and we do so in accordance with strict data protection standards.

2 Types of Personal Data We Collect

Maxwin138 only collects data necessary to deliver our services safely and effectively. The following are the main categories of information we collect:

Registration and Identity Data:

• Full name as shown on your identity document.
• MyKad number or passport number.
• Date of birth for age verification.
• Email address and mobile phone number.
• Current residential address.

Financial Data:

• Registered bank account details or e-wallet account number.
• Records of deposit and withdrawal transactions.
• History of financial activity on the platform.

Platform Usage Data:

• History of game activity, betting, wagering, and activity on the platform.
• Login data including date, time, and IP address.
• Device type, operating system, and web browser used.
• Session data and other relevant technical information.

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. maxwin138 uses your information for the following purposes:

Maxwin138 does not use your data for any purpose beyond those stated above without first obtaining your specific consent. We do not sell, rent, or allow third parties to use your data for their own marketing purposes.

4 Data Sharing With Third Parties

Maxwin138 only shares your personal data with third parties under the following limited and controlled circumstances:

• Payment Providers: FPX, DuitNow, Touch 'n Go, Boost, and our partner banks need to receive the necessary information to process your transactions securely.
• Game Providers: Game companies that partner with maxwin138 may receive player IDs and session data required to deliver a seamless gaming experience.
• Technical Service Providers: Server infrastructure providers, cybersecurity services, and analytics tools that help us operate the platform securely.
• Authorities: Maxwin138 will disclose information to government authorities, law enforcement, or regulatory bodies when required by law or court order.

Maxwin138 does not share your data with advertisers, data brokers, or any company that has no direct relationship with the delivery of our services to you.

5 Data Security and Protection Measures

Maxwin138 implements multiple layers of technical and operational security to protect your personal data from unauthorised access, loss, misuse, or unintended disclosure.

• 256-bit SSL Encryption: All data transmitted between your device and maxwin138 servers is protected with 256-bit SSL encryption — the same level of security used by major financial institutions in Malaysia.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including identity and financial information, is encrypted using AES-256 algorithms.
• Strict Access Controls: Only authorised staff with a legitimate business need may access user data, and every access is recorded in an audit log.
• Two-Factor Authentication (2FA): The maxwin138 platform supports 2FA for user accounts to add an extra layer of security.
• Vulnerability Scanning: Our systems undergo regular penetration testing and vulnerability scanning by independent security teams.
• 24/7 Monitoring: Our security team monitors the platform around the clock to detect and respond to any security threats promptly.

6 Use of Cookies and Tracking Technologies

Maxwin138 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as the platform cannot function properly without them.
• Performance Cookies: Helping us understand how users interact with the platform — which pages are visited most, time spent, and potential technical issues that need to be resolved.
• Functional Cookies: Storing your personal preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Used to analyse aggregate usage patterns to help us improve platform content and functionality.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the maxwin138 platform.

7 Data Retention Period

Maxwin138 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for as long as your account remains active on the maxwin138 platform.
• KYC and Identity Data: Retained for a minimum of 5 years after account closure to meet anti-money laundering (AML) compliance requirements.
• Transaction Records: Retained for 7 years in accordance with Malaysian financial regulations.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution.
• Marketing Data: Retained until you withdraw consent or request deletion.

Once the retention period expires and there is no legal requirement to continue storing it, your data will be securely deleted or anonymised so that it can no longer be identified.

8 Your Rights as a User

As a maxwin138 user, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

9 Children's Privacy Protection

The maxwin138 platform is not intended for individuals under the age of 18. We do not knowingly collect or process personal data of minors.

If we find that personal data has been collected from individuals under the age of 18 without valid age verification, we will take immediate action to delete that data and close the relevant account.

If you believe your child or any minor has registered an account on maxwin138, please contact our support team immediately so we can take the appropriate action.

10 Amendments to This Privacy Policy

Maxwin138 reserves the right to update or amend this Privacy Policy from time to time in line with changes in legislation, technology, or our business practices. The "Last Updated" date at the top of this document will be revised whenever changes are made.

For material changes — that is, changes that may significantly affect how we process your data — we will notify you via an in-account notification or registered email at least 14 days before the changes take effect.

11 How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 in your account — the fastest way to get an immediate response.
• Email: [email protected] — for written inquiries requiring documentation.

Our privacy team is ready to help you understand your rights and answer any questions regarding your personal data. We are committed to responding to all enquiries within 3 business days.

For data protection issues that cannot be resolved directly with maxwin138, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.