Max Win Privacy Policy – Data Protection for Malaysian Players

Max Win is an online casino platform operating in Malaysia and acts as the data controller for all personal information collected through the website maxwin-khelo.net, our mobile app and all related services.

We understand that entrusting your personal information to any online platform is a significant decision. That is why Max Win takes a transparent and responsible approach to every aspect of data handling. This Privacy Policy is written in plain, easy-to-understand language — not complex legal jargon — so every Malaysian player knows exactly what happens with their information.

This policy applies to all players who register an account, make deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and play any games including slots, live casino, table games, roulette, lottery, Virtual Sports, or place bets on the Malaysia Super League and EPL football on the Max Win platform.

Max Win only collects data necessary to deliver a safe, fair, and efficient service. We do not collect excessive data and only process information that is directly relevant to the platform's operations.

Identity Data:

Financial Data:

Platform Usage Data:

Every piece of data we collect has a clear and lawful purpose. Max Win processes your data solely for the following purposes:

• Account Management: Creating, verifying, and maintaining your account so you can log in and access all features on the Max Win platform.
• Financial Transaction Processing: Processing your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks) and any other payment method you choose.
• Identity Verification & KYC Compliance: Verifying that you meet the minimum age requirement of 18 years and preventing fraud, money laundering and other illegal activities.
• Customer Support: Assisting you when you reach out to the Max Win support team via live chat, email or WhatsApp.
• Service Improvement: Analysing usage patterns (anonymously) to continually improve the playing experience on Max Win.
• Marketing Communications: Sending promotional information, bonuses and special offers – but ONLY if you have given your consent to receive them.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate support.

Max win firmly believes that your data belongs to you. We do not sell or rent your personal data to any third party for marketing or commercial purposes.

However, there are limited situations where Max Win may need to share your data with certain parties:

• Payment Service Providers: Payment gateways such as Touch 'n Go, GrabPay, Boost, ShopeePay and FPX require basic information to process your transactions. All such providers are subject to strict confidentiality agreements.
• Gaming Technology Providers: Our gaming software providers may receive usage data to ensure optimal game performance.
• Legal Authorities: Max Win is required by Malaysian law to disclose certain information to the relevant authorities upon receipt of a court order or official directive.
• Professional Consultants: Our lawyers, accountants and auditors may access data required for their professional duties, and all are bound by confidentiality obligations.

Max Win continually invests in security infrastructure to ensure your data remains protected at all times. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All communication between your browser and max win's servers is fully encrypted.
• Two-Factor Authentication (2FA): Available on all accounts as an added layer of security.
• Real-Time Threat Monitoring: A 24/7 monitoring system automatically detects and responds to suspicious activity.
• Regular Penetration Testing: We engage independent security specialists to conduct regular penetration testing.
• Strict Access Control: Only staff who require access to specific data to perform their duties are authorised to do so.
• Encrypted Data Backups: All data backups are encrypted and stored in separate, secure locations.

Max Win does not retain your data longer than necessary. Retention periods vary depending on the type of data and the purpose for which it is held:

• Active Account Data: Retained for as long as your account remains active on the Max Win platform.
• Financial Transaction Data: Retained for 7 years as required under Malaysian law in relation to financial records and anti-money laundering (AML) compliance.
• Support Communication Records: Retained for 3 years for reference and service improvement purposes.
• Security Logs: Retained for 1 year for security detection and investigation purposes.
• After Account Closure: Personal data no longer required for legal purposes will be deleted or anonymised within 90 days after an account closure request.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Max Win:

Max Win uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage or delete cookies through your web browser settings. Please note, however, that removing essential cookies may affect your ability to log in and use the Max Win platform.

In certain circumstances, your data may need to be processed or stored on servers located outside Malaysia — for example, for data backup purposes, cloud services, or international gaming technology providers.

All cross-border data transfers by Max Win are subject to the following conditions:

• The recipient country must provide a level of data protection equivalent to or higher than Malaysia's.
• Transfers are carried out with appropriate contractual safeguards, including Standard Contractual Clauses.
• Max Win ensures that all data transferred remains encrypted both in transit and at rest.

Max Win strictly prohibits individuals under the age of 18 from registering or using our platform under any circumstances. We do not knowingly collect any personal data from minors.

Should Max Win become aware that personal data has been collected from a minor, we will take immediate action to:

• Immediately delete all associated data.
• Permanently close the account in question.
• Cancelling all related transactions.

Max Win reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or improvements in how we protect your data. When we make material changes, we will:

• Updating the "Effective date" at the top of this document.
• Displays notifications within the Max Win platform.
• Sending an email to your registered address for changes that materially affect your privacy rights.

Continued use of the Max Win platform following notification of changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions or concerns, or wish to exercise your rights under PDPA 2010, we invite you to contact Max Win's Data Protection Officer (DPO).

• Dedicated Privacy Email: privacy@maxwin-khelo.net
• General Support Email: support@maxwin-khelo.net
• Live Chat: Available 24/7 within the Max Win platform
• Response Time: Within 14 working days for data-related requests

We are committed to handling every privacy enquiry seriously, professionally and within the stipulated timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Ministry of Digital.