Privacy Policy — maxim888

maxim888 ("the Company", "we", "us", "our") operates the online gaming platform at https://maxim888.cam and any associated mobile applications, services, and sub-domains (collectively, "the Platform"). We are committed to protecting the personal data of every individual who visits, registers on, or interacts with our Platform ("you", "Member", "User").

This Privacy Policy describes how maxim888 collects, uses, stores, discloses, and protects personal data in connection with the provision of our services — including online casino games, sports betting markets, live dealer products, payment processing, customer support, and promotional communications. It also explains the rights available to you in relation to your personal data and how to exercise them.

This Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the Platform. By registering an account or continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, device identifiers, and behavioural data.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, combination, restriction, erasure, or destruction.
• "Data Controller" means maxim888, which determines the purposes and means of processing your personal data.
• "Data Processor" means a third-party entity that processes personal data on behalf of maxim888, strictly in accordance with our instructions and applicable data protection obligations.
• "KYC Data" means identity and age verification documentation collected as part of our Know Your Customer process, including government-issued identification documents and proof of address.
• "Cookies" means small text files stored on your device when you visit the Platform, used to recognise your browser, maintain session state, and collect usage analytics.
• "Consent" means freely given, specific, informed, and unambiguous agreement to the processing of your personal data for a stated purpose.

maxim888 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

We collect personal data through the following channels and methods:

4.1 Directly from You

• When you register an account on the Platform, including all information you submit in the registration form;
• When you complete the KYC verification process by uploading identity documents;
• When you make deposits or request withdrawals using a Supported Payment Method;
• When you contact our support team via live chat or email;
• When you participate in a promotion, survey, or feedback request;
• When you update your account profile or communication preferences.

4.2 Automatically

• Technical and usage data is collected automatically each time you access the Platform, via server logs, cookies, session tracking, and analytics tools;
• Device fingerprinting data is collected to support fraud detection and account security;
• Geolocation data (at the country / region level, derived from IP address) is collected to enforce jurisdiction restrictions.

4.3 From Third Parties

• Identity verification data from licensed KYC service providers used to confirm the authenticity of documents you submit;
• Payment verification and fraud screening data from payment processors and financial institutions, including banks operating in Malaysia (Maybank, CIMB, Public Bank, Hong Leong) and e-wallet providers (Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay);
• Responsible gambling data where required from self-exclusion registers or gambling harm prevention organisations.

maxim888 processes your personal data for the following specific purposes, each of which is supported by a lawful basis described in Section 6:

• Account Creation and Management: Processing your registration data to create, maintain, and administer your Member account, including authentication and access control;
• Identity and Age Verification (KYC): Verifying that you meet the minimum age requirement of 21 years and confirming your identity in compliance with our internal policies and applicable regulations;
• Payment Processing: Facilitating deposits and withdrawals via your chosen Supported Payment Method, reconciling transactions, and maintaining accurate financial records;
• Service Delivery: Providing access to casino games, sports betting markets, live dealer tables, and all other features of the Platform;
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, account takeovers, and other security threats;
• Responsible Gambling: Monitoring usage patterns to identify potential problem gambling behaviour; processing deposit limit requests, cooling-off periods, and self-exclusion applications;
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and maintaining records of support interactions;
• Marketing and Promotions: Sending promotional communications, bonus notifications, and personalised offers to Members who have opted in to marketing communications. You may withdraw consent at any time;
• Analytics and Platform Improvement: Analysing aggregated usage data to improve the Platform's performance, user experience, and game selection;
• Legal and Regulatory Compliance: Meeting our obligations under applicable laws, responding to lawful requests from competent authorities, and maintaining records required for audit purposes.

maxim888 relies on the following legal bases when processing your personal data:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration — including account management, game provision, and payment processing;
• Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including KYC obligations, anti-money laundering requirements, and responsible gambling standards;
• Legitimate Interests: Processing carried out in pursuit of our legitimate business interests — specifically fraud prevention, platform security, and business analytics — provided such interests are not overridden by your rights and interests;
• Consent: Processing for marketing and promotional communications, which is subject to your explicit opt-in consent and may be withdrawn at any time by contacting our support team or updating your account preferences.

maxim888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• KYC and Identity Verification Providers: Licensed third-party services engaged to verify identity documents and confirm age compliance;
• Payment Processors and Financial Institutions: Banks and e-wallet operators involved in processing your deposits and withdrawals, including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay, and cryptocurrency network infrastructure providers;
• Game Providers and Software Partners: Third-party game studios whose titles appear on the Platform may receive limited technical data (such as a pseudonymous player identifier and session data) necessary to deliver the game experience;
• Fraud Prevention Services: Third-party providers engaged specifically for fraud detection, device fingerprinting, and anti-money laundering screening;
• Regulatory and Law Enforcement Authorities: Competent governmental or regulatory bodies where disclosure is required by applicable law, court order, or lawful authority request;
• Professional Advisors: Lawyers, auditors, and accountants engaged in connection with the operation of the business, subject to professional confidentiality obligations;
• Business Transfers: In the event of a merger, acquisition, or sale of business assets, your personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

maxim888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and KYC Data: Retained for the duration of your active membership and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and financial record-keeping obligations;
• Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction to meet financial and tax record-keeping requirements;
• Support Communications: Live chat transcripts and email correspondence are retained for up to three (3) years from the date of the interaction;
• Technical and Usage Logs: Retained for up to twelve (12) months for security, fraud prevention, and platform performance purposes;
• Marketing Preferences: Retained until you withdraw consent or close your account, after which records of your opt-out are maintained to prevent inadvertent re-contact.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible. Where data is anonymised rather than deleted, the anonymised dataset may be retained for statistical and analytical purposes indefinitely.

The Platform uses cookies and similar tracking technologies to ensure proper functionality, maintain your session, and collect usage analytics. By using the Platform, you consent to our use of cookies as described below.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled without disrupting the service;
• Functional Cookies: Used to remember your preferences, language settings, and display configurations between sessions;
• Analytics Cookies: Used to collect anonymised or pseudonymised data about how Members use the Platform — pages visited, time spent, and navigation paths — to help us improve the user experience;
• Security and Fraud Detection Cookies: Used to identify unusual patterns of behaviour that may indicate fraud, account takeover, or bot activity.

9.2 Managing Cookies

You may adjust your browser settings to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation. On mobile devices using the maxim888 application, equivalent controls are available in the application settings.

maxim888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the Platform is protected using 256-bit Transport Layer Security (TLS) encryption. Data at rest, including KYC documents and financial records, is encrypted using AES-256 or equivalent standard;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis within the organisation, enforced through role-based access control and multi-factor authentication for internal systems;
• Regular Security Audits: The Platform and its underlying infrastructure undergo regular independent security assessments and penetration testing;
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected Members and relevant authorities within the timeframes required by applicable law;
• Staff Training: All personnel with access to personal data receive regular training on data protection obligations and security best practices.

Subject to applicable data protection law and certain conditions, you have the following rights in relation to your personal data held by maxim888:

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. This right does not apply where we are required to retain data to meet legal or regulatory obligations;
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved;
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Object: You have the right to object to processing based on our legitimate interests, including profiling for marketing purposes;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact our support team via live chat or at the email address provided in Section 15. We will respond to all verified requests within a reasonable timeframe and in accordance with applicable law. We may request proof of your identity before processing a rights request to prevent unauthorised access to another person's data.

The Platform is strictly for individuals aged 21 years and above. maxim888 does not knowingly collect personal data from individuals under the age of 21. All accounts are subject to mandatory age verification as part of the KYC process, and we reserve the right to request age confirmation documentation at any time.

If we discover, or are notified, that a Member is under 21 years of age, we will immediately suspend the account, void any associated balances and winnings, and securely delete the personal data collected in connection with that account to the extent permitted by our legal obligations. Where we are required to retain records for regulatory purposes (e.g., to report an underage gambling incident), we will retain only the minimum data necessary for that purpose.

Parents and guardians are encouraged to use parental control software to restrict access to online gambling platforms. If you believe an individual under 21 has accessed the Platform, please contact us immediately via live chat or at the email address in Section 15.

The Platform integrates with a number of third-party services to deliver core functionality. While maxim888 takes reasonable steps to ensure that third-party processors comply with appropriate data protection standards, we are not responsible for the independent privacy practices of these third parties.

Third-party services integrated with the Platform include payment infrastructure operated by financial institutions and e-wallet providers (including Touch 'n Go eWallet, DuitNow, FPX, Boost, and GrabPay), game content delivered by licensed third-party software studios, and technical services such as hosting, content delivery networks, and security monitoring. Each of these service providers operates under its own privacy policy and data protection framework.

The Platform does not contain links to external websites. Any third-party integration is strictly for operational purposes within the Platform itself, and not for the purpose of directing Members to external sites for advertising or commercial purposes.

maxim888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they substantively affect how we process your personal data or the rights available to you — we will provide reasonable prior notice via the Platform, by email to your registered address, or via an in-platform notification before the changes take effect.

Minor, non-material amendments (such as clarifications of existing provisions or corrections of typographical errors) may be made without prior notice. The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following any amendment to this Policy constitutes your acknowledgement of and agreement to the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how maxim888 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by maxim888, please contact our Data Protection team using the details below. We are committed to responding to all data-related enquiries promptly and transparently.

For requests related to responsible gambling tools, self-exclusion, or deposit limits, please visit our dedicated Responsible Gambling page for full details of the support options available to you.