Privacy Policy

This Privacy Policy ("Policy") is issued by Maxim88 ("Company", "We", "Us", "Our") and applies to all personal data collected through the website maxim88.buzz and its associated services, including account registration, deposits and withdrawals, gameplay, customer support interactions, and marketing communications.

Maxim88 operates an online casino and sports betting platform built exclusively for players in Malaysia. We understand that the privacy of your personal information is important to you, and we are committed to handling it with care, transparency, and respect. This Policy explains in plain terms what data we collect, why we collect it, how it is used, who it may be shared with, how long it is held, and what rights you can exercise over it.

By registering an account on the Maxim88 platform, completing a deposit, or otherwise using our services, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform immediately.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which form part of your agreement with Maxim88.

Maxim88 collects the following categories of personal data from players and platform visitors:

Maxim88 collects personal data through the following channels and mechanisms:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and analytics tools each time you visit or interact with the Maxim88 platform.
• Third-Party Sources: Identity verification data from KYC service providers; fraud-risk data from fraud-prevention platforms; payment confirmation data from payment processors (Maybank, CIMB, DuitNow, Touch 'n Go eWallet, etc.).
• Public Sources: Publicly available information used to verify identity or investigate fraud-related concerns where legally permitted.

We process your personal data only for specific, legitimate purposes. The table below sets out the primary processing purposes and the corresponding legal basis for each:

Maxim88 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment Processors: Malaysian payment service providers (including those operating Maybank2u, CIMB Clicks, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay integrations) receive transaction data necessary to process your deposits and withdrawals.
• KYC & Fraud Prevention Providers: Third-party identity verification and fraud-detection platforms receive identity data as required to comply with KYC and AML obligations.
• Game Software Providers: Licensed game providers may receive anonymised or pseudonymised gameplay data for purposes of game operation, RNG integrity monitoring, and jackpot pool management.
• Regulatory & Law Enforcement Authorities: We may disclose personal data to competent authorities in Malaysia or internationally where required by applicable law, court order, or regulatory direction — including in connection with anti-money laundering investigations.
• Professional Advisors: Legal counsel, auditors, and compliance consultants may access personal data on a strictly confidential basis where necessary to advise on or audit our operations.

All third-party recipients who process personal data on our behalf are required to maintain appropriate technical and organisational security measures and to process the data only for the purposes specified by Maxim88.

Maxim88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Active Account Data: Retained for the duration of your account relationship with Maxim88, plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years following the end of the account relationship, or longer if required by applicable law.
• Transaction Records: Retained for a minimum of five (5) years to comply with financial record-keeping requirements.
• Customer Support Communications: Retained for a minimum of two (2) years from the date of the last interaction.
• Marketing Consent Records: Retained for the duration of your marketing consent and for one (1) year following its withdrawal, as evidence of compliance.
• Technical & Log Data: Typically retained for twelve (12) months in anonymised or aggregated form.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. We do not retain data beyond the periods necessary for legal compliance or legitimate operational purposes.

The Maxim88 website uses cookies and similar tracking technologies to improve your browsing experience, maintain your session, and collect analytics data. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Store your preferences (such as language or display settings) so that you do not need to reconfigure them on each visit.
• Analytics Cookies: Collect anonymised or aggregated data about how players use the platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve our services.
• Session Management Cookies: Manage your active session on the platform, ensuring that your account activity is attributed correctly and securely throughout your visit.

As a data subject whose personal data is processed by Maxim88, you have the following rights. To exercise any of these rights, please contact our support team via the live chat or email address provided in Section 14 of this Policy.

The Maxim88 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data from anyone under the age of 21.

If we become aware that personal data has been collected from an individual under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Any funds held in such an account will be returned via the deposit method used, after deducting any losses incurred.

Maxim88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encrypted storage of sensitive personal data and payment credentials at rest.
• Role-based access controls limiting internal data access to personnel with a verified operational need.
• Regular security audits and penetration testing of our platform infrastructure.
• Automated fraud-detection and suspicious-activity monitoring systems operating continuously.
• Secure session management with automatic timeout after periods of inactivity.
• Two-factor authentication options available for player accounts.

While we take all reasonable steps to protect your personal data, no online system is entirely infallible. In the event of a data security incident that is likely to pose a high risk to your rights and interests, we will notify you promptly and take immediate remediation steps.

The Maxim88 platform may contain links or references to third-party websites, services, or resources — for example, payment provider portals or game software developer sites. These third-party services have their own independent privacy policies and data practices, and Maxim88 assumes no responsibility or liability for the privacy practices of any third-party service.

We recommend that you review the privacy policies of any third-party service you access through or in connection with the Maxim88 platform before providing any personal data to them.

Maxim88 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players via the email address associated with their account and/or through a prominent notice on the platform.

The revised Policy will become effective on the date stated in the "Last Updated" field at the top of this document. Continued use of the Maxim88 platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, please contact our support team to close your account before the effective date.

The most current version of this Privacy Policy is always accessible on this page at maxim88.buzz/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 9, please contact the Maxim88 Data Privacy team through the following channels:

• 24/7 Live Chat: Available directly on the Maxim88 platform — our fastest channel for all data and account queries.
• Email: [email protected] — for formal written data rights requests. Please include your full registered name and account username, and specify clearly the right you wish to exercise or the nature of your query. Allow up to 30 days for a response to formal data rights requests.
• Support Hours: Malaysia Standard Time (MYT, UTC+8), 24 hours a day, 7 days a week.

We are committed to addressing all privacy-related queries promptly, fairly, and in accordance with applicable data protection standards. Serving players across Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and all other locations in Malaysia.