Privacy Policy

This Privacy Policy ("Policy") is issued by Maxxim88 ("we", "us", "our"), the operator of the online gaming and sports betting platform accessible at maxxim88.cam. This Policy applies to all personal data collected, processed, and stored by Maxxim88 in connection with your use of our platform, services, and any associated communications.

Maxxim88 serves players primarily across Malaysia, including in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other Malaysian cities. We process personal data in accordance with applicable data protection laws and regulations, including but not limited to the Personal Data Protection Act 2010 (PDPA) of Malaysia ("the PDPA").

By registering an account on the Maxxim88 platform, accessing our services, or otherwise providing us with your personal information, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree with the terms of this Policy, you must immediately discontinue your use of the platform and contact our support team to request account closure.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement governing your use of the Maxxim88 platform.

Maxxim88 collects the following categories of personal data from users of the platform:

3.1 Identity & Contact Information

• Full legal name (as per Malaysian Identity Card / MyKad or valid passport);
• Date of birth and age verification documents;
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru);
• Valid email address;
• Malaysian mobile phone number;
• Selfie photograph and identity document scans submitted during KYC.

3.2 Financial & Transaction Data

• Payment method details (e-wallet accounts such as Touch 'n Go eWallet, Boost, GrabPay; bank account numbers for Maybank, CIMB, Public Bank, Hong Leong, RHB; DuitNow registered identifiers; FPX details);
• Cryptocurrency wallet addresses used for deposits or withdrawals (BTC, ETH, USDT, BNB);
• Deposit and withdrawal transaction history, including amounts in MYR and timestamps;
• Source of funds documentation where required for regulatory or anti-money laundering compliance.

3.3 Platform Usage & Behavioural Data

• Login history and session data, including IP addresses and device identifiers;
• Betting history, game play records, and wagering patterns;
• Bonus claims, promotional participation records, and wagering requirement progress;
• Customer support interactions, including live chat transcripts and email correspondence;
• Responsible gambling tool usage (deposit limits set, self-exclusion requests, cooling-off activations).

3.4 Technical Data

• Browser type, version, and operating system;
• Device type (mobile, tablet, desktop) and screen resolution;
• Referring URL and pages visited on the Maxxim88 platform;
• Cookie identifiers and similar tracking technologies.

Maxxim88 collects personal data through the following means:

• Direct collection: Information you provide voluntarily when creating an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and behavioural data collected automatically as you use the Maxxim88 platform, including via cookies, server logs, and analytics tools.
• Third-party sources: Where permitted by applicable law, we may receive data from payment processors (including Touch 'n Go, Boost, GrabPay, Maybank, CIMB, and other Malaysian banking institutions), identity verification service providers, fraud detection agencies, and data analytics partners.
• KYC and compliance checks: Data obtained through identity verification processes, including document scanning services and databases used to screen against sanctions or politically exposed persons lists.

Maxxim88 uses the personal data we collect for the following purposes:

Maxxim88 processes personal data on the following legal bases, as applicable under the Personal Data Protection Act 2010 (Malaysia) and relevant data protection principles:

• Contractual necessity: Processing required to perform the contract between you and Maxxim88 — including account creation, payment processing, game delivery, and customer support.
• Legal obligation: Processing necessary for Maxxim88 to comply with applicable legal and regulatory obligations, including KYC/AML requirements, age verification mandates, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out in pursuit of Maxxim88's legitimate business interests, including fraud prevention, platform security, and service improvement — where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of direct marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Maxxim88 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment service providers: Including Malaysian e-wallet operators (Touch 'n Go, Boost, GrabPay), banking institutions (Maybank, CIMB, Public Bank, Hong Leong, RHB), DuitNow/FPX processors, and cryptocurrency payment processors — solely to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification service providers used to verify your identity and comply with regulatory obligations.
• Fraud detection and AML screening services: Specialist third-party providers used to screen for fraudulent activity, sanctions exposure, and politically exposed persons status.
• Technology and infrastructure providers: Cloud hosting, database management, and cybersecurity providers that support the operation of the Maxxim88 platform under strict data processing agreements.
• Game studios and content providers: Game software providers may receive limited technical data necessary to deliver game content and record game results. No personal identifying information beyond what is technically necessary is shared.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or directive from a competent regulatory or law enforcement authority.

The Maxxim88 platform uses cookies and similar tracking technologies to improve your experience, ensure platform security, and gather anonymised usage analytics. The following categories of cookies are used:

You may manage your cookie preferences at any time through your browser settings or the cookie consent tool displayed on the Maxxim88 platform. Please note that disabling essential cookies may affect the functionality of the platform and your ability to log in or complete transactions.

Maxxim88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulatory obligation, or legitimate business need.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification. Where data is subject to ongoing legal proceedings or regulatory investigation, retention may be extended until resolution of the relevant matter.

Maxxim88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the Maxxim88 platform;
• Encryption at rest for all sensitive personal and financial data stored on our servers;
• Access controls limiting data access to authorised personnel on a need-to-know basis, with role-based permissions and multi-factor authentication for internal systems;
• Regular security audits and penetration testing conducted by independent cybersecurity specialists;
• Firewalls, intrusion detection systems, and continuous monitoring for anomalous activity;
• Staff data protection training covering handling procedures, incident response, and regulatory obligations.

In the event of a data breach that poses a risk to the rights and freedoms of affected individuals, Maxxim88 will notify the relevant data protection authority and affected users in accordance with applicable law and as promptly as circumstances permit.

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the following rights with respect to your personal data held by Maxxim88:

To exercise any of these rights, please contact our support team via live chat or by email at [email protected]. We will respond to all verified data subject requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reason for it.

Please note that certain rights are subject to legal limitations — for example, we cannot delete data that we are legally required to retain for regulatory compliance purposes. Where a request cannot be fulfilled in full, we will provide a clear explanation of the reason.

The Maxxim88 platform is strictly intended for use by adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from any person under the minimum age of 21.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to verify the matter and, where confirmed, delete the data concerned and close the associated account without delay. Any funds deposited by an underage user will be handled in accordance with applicable law and our Terms & Conditions.

In the course of operating the Maxxim88 platform and providing our services, your personal data may be transferred to and processed in countries outside of Malaysia. This may occur where our technology infrastructure providers, game content suppliers, or fraud detection partners operate servers or facilities outside Malaysian territory.

Where personal data is transferred outside Malaysia, Maxxim88 ensures that appropriate safeguards are in place to protect your data, including but not limited to:

• Executing data processing agreements with recipient entities that incorporate data protection obligations equivalent to those under Malaysian law;
• Transferring data only to jurisdictions that provide an adequate level of data protection as recognised by applicable standards;
• Applying technical controls such as encryption to protect data in transit.

By using the Maxxim88 platform, you consent to such cross-border transfers of your personal data in accordance with the safeguards described in this Policy.

Maxxim88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform features. Any material changes will be communicated to registered users via the email address on file or through a prominent notice on the Maxxim88 platform, prior to the changes taking effect.

The effective date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the Maxxim88 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must cease using the platform and contact our support team to request account closure and data erasure where applicable.

We recommend reviewing this Policy periodically to remain informed of how Maxxim88 handles your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Maxxim88, please contact our Data Protection team through the following channels:

For formal data subject access requests or complaints regarding the handling of your personal data, please submit your request in writing via email with the subject line "Data Subject Request — [Your Full Name]". We will acknowledge receipt within two (2) business days and aim to resolve all data-related requests within thirty (30) calendar days.