maxwin Privacy Policy

1. Introduction

maxwin ("maxwin", "we", "us", "our") operates the online gaming and sports betting platform at maxwin.vu. We are committed to protecting the privacy and personal data of every player and visitor who interacts with the maxwin Platform.

This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we use it, how long we retain it, and the rights you have in relation to your data. This Policy applies to all users of the maxwin Platform, including registered Players, prospective registrants, and casual visitors.

By accessing or using the maxwin Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to this Policy, please do not access or use the maxwin Platform. This Policy should be read together with our Terms & Conditions.

2. Data Controller

2.1 maxwin is the data controller responsible for the personal data collected through the maxwin Platform. As data controller, maxwin determines the purposes and means of processing your personal data.

2.2 If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection team via the support email listed in Section 15 of this Policy.

3. Personal Data We Collect

maxwin collects the following categories of personal data from users of the Platform:

Category	Examples	When Collected
Identity Data	Full name, date of birth, MyKad or passport number, nationality	Registration & KYC verification
Contact Data	Email address, mobile number, residential address	Registration
Financial Data	Bank account details, e-wallet identifiers (TnG, Boost, GrabPay), transaction history	Deposits & withdrawals
Technical Data	IP address, browser type, device identifiers, operating system, session data	Each Platform visit
Gaming Data	Bet history, game session logs, wager amounts, win/loss records	Each gaming session
Communications Data	Live chat transcripts, support emails, feedback submissions	When you contact support
Marketing Data	Promotional preferences, bonus claim history, opt-in/opt-out status	Account usage

maxwin does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless required for specific regulatory compliance purposes (for example, self-exclusion or responsible gaming programmes).

4. How We Collect Your Data

4.1 Directly from you. We collect personal data that you provide directly to us when you: register an account on the maxwin Platform; complete identity verification (KYC); make a deposit or request a withdrawal; contact our customer support team; participate in a promotion or survey; or update your account settings.

4.2 Automatically. When you visit the maxwin Platform, we automatically collect technical data via cookies, log files, and similar tracking technologies. This includes your IP address, device identifiers, browser type, pages visited, session duration, and referring URLs. See Section 8 for our full cookies policy.

4.3 From third parties. We may receive personal data about you from third parties in the following circumstances: payment service providers processing your deposits or withdrawals (such as FPX, DuitNow, or Touch 'n Go eWallet); identity verification and fraud prevention services; public databases and registries used for KYC and anti-money laundering (AML) compliance; and responsible gaming self-exclusion registries.

5. How We Use Your Personal Data

maxwin uses your personal data for the following purposes:

• Account Registration and Management: To create, verify, and administer your maxwin account, including authentication of your maxwin login credentials and enforcement of the one-account-per-player policy.
• Payment Processing: To process deposits, verify funding sources, execute withdrawal requests to your nominated bank account or e-wallet, and maintain accurate financial records.
• Regulatory Compliance: To fulfil our obligations under applicable gaming regulations, including KYC/AML requirements, age verification, responsible gaming obligations, and mandatory reporting to regulatory authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical support via live chat, email, and other support channels.
• Service Improvement: To analyse usage patterns, improve Platform features and performance, conduct research and analytics, and personalise your experience on the maxwin Platform.
• Marketing Communications: To send you promotions, bonus offers, and news about maxwin — but only where you have given your consent or where permitted by applicable law. You may opt out at any time via your account settings.
• Responsible Gaming: To monitor gaming patterns, enforce deposit and loss limits you have set, process self-exclusion requests, and provide responsible gaming tools and resources.

6. Legal Basis for Processing

maxwin processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to register your account, process transactions, and deliver the Services you have requested under our Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable gaming regulations, AML laws, KYC requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing for fraud prevention, security monitoring, Platform analytics, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have given explicit prior consent. You may withdraw consent at any time without affecting prior processing.

7. Data Sharing and Disclosure

7.1 maxwin does not sell your personal data to third parties. We share your data only in the following circumstances and with the following categories of recipients:

• Payment Service Providers: Banks, FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and other payment processors require certain personal and financial data to process your transactions.
• Identity Verification Services: Third-party KYC and AML service providers who assist us in verifying your identity and complying with regulatory requirements.
• Game Providers: Licensed game studios and providers (such as Pragmatic Play, Evolution Gaming, Play'n GO) may receive limited account and session data necessary to deliver gaming services.
• Regulatory Authorities: We may disclose personal data to gaming regulators, law enforcement agencies, or other governmental authorities where required by applicable law or regulatory order.
• Service Providers: Trusted third-party vendors who provide IT infrastructure, cloud hosting, analytics, customer support tools, and marketing services under strict data processing agreements.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

7.2 All third parties with whom maxwin shares personal data are required to handle that data in accordance with applicable data protection laws and are prohibited from using it for any purpose other than the specified service delivery purpose.

8. Cookies and Tracking Technologies

8.1 The maxwin Platform uses cookies and similar tracking technologies (including web beacons, pixel tags, and session tokens) to operate the Platform, authenticate your maxwin login sessions, maintain your preferences, and collect analytical data.

8.2 The following categories of cookies are used on the maxwin Platform:

• Strictly Necessary Cookies: Essential for Platform operation, including login session management and security. These cannot be disabled.
• Functional Cookies: Remember your language preferences, game settings, and other personalisation choices.
• Analytical Cookies: Collect aggregated, anonymised data about how visitors use the Platform to help us improve performance and content.
• Marketing Cookies: Used to deliver relevant promotional content. Only placed where you have given consent.

8.3 You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the maxwin Platform, including the maxwin login functionality.

9. Data Retention

9.1 maxwin retains your personal data for as long as your account is active and for a period thereafter as required by applicable gaming regulations, AML laws, and financial record-keeping requirements. Regulatory obligations typically require retention of KYC and transaction records for a minimum of five (5) years following account closure.

9.2 Gaming session data and bet history is retained for a minimum of three (3) years from the date of the relevant transaction or session, or longer if required by applicable law or ongoing investigation.

9.3 Marketing communication preferences and consent records are retained until you withdraw consent or for a reasonable period following account closure.

9.4 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

10. Your Data Rights

Subject to applicable law and regulatory restrictions, you have the following rights in respect of your personal data held by maxwin:

• Right of Access: Request a copy of the personal data maxwin holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary, subject to our regulatory retention obligations.
• Right to Restriction: Request that we restrict processing of your personal data in certain circumstances.
• Right to Data Portability: Request a machine-readable copy of the personal data you provided to us, where processing is based on consent or contract.
• Right to Object: Object to processing based on our legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Withdraw consent for any processing based on consent at any time, without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Protection team via the contact details in Section 15. We will respond to verified requests within 30 calendar days. Some requests may be subject to verification of your identity before we can action them.

11. Data Security

11.1 maxwin implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL encryption of all data in transit, encrypted storage of sensitive personal and financial data, access controls limiting data access to authorised personnel only, regular security audits and penetration testing, and two-factor authentication available for all maxwin account logins.

11.2 While maxwin takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, maxwin will notify affected individuals and relevant regulatory authorities in accordance with applicable law.

12. Third-Party Links

The maxwin Platform does not contain links to third-party websites. In the event that any third-party content or service integrations are introduced in future, this Policy will be updated to reflect how your data may be affected. maxwin is not responsible for the privacy practices of third-party service providers beyond the contractual data processing obligations imposed on them.

13. Children and Minors

13.1 The maxwin Platform is strictly restricted to individuals aged 21 years and above. maxwin does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

13.2 If you believe that a minor has registered on the maxwin Platform, please contact our support team immediately at the address provided in Section 15.

14. Changes to This Privacy Policy

14.1 maxwin reserves the right to update or amend this Privacy Policy at any time. Amended versions will be published on the maxwin Platform with a revised "Last Updated" date. We will take reasonable steps to notify registered Players of material changes via email or prominent notice on the Platform prior to the changes taking effect.

14.2 Your continued use of the maxwin Platform following publication of an amended Privacy Policy constitutes your acknowledgement of and agreement to the updated Policy. If you do not agree to a material change, you should cease use of the Platform and contact us to close your account.

15. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data by maxwin, please contact our Data Protection team:

Support Email: [email protected]

We aim to respond to all privacy-related enquiries within 5 business days and to fulfil verified data rights requests within 30 calendar days of receipt.