Maxim99 Privacy Policy – Malaysian Player Data Protection

1. Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") is an official document outlining how Maxim99 ("Platform", "We") handles personal data. It applies to all players who register an account, use our services, or visit the Maxim99 website.

Maxim99 processes players' personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We take our responsibilities as a data controller seriously and are committed to ensuring that your data is processed transparently, fairly, and securely at all times.

This Policy applies to all Maxim99 channels, including the main website, mobile platform, applications, and any electronic communications we send to you. It does not apply to third-party websites or services that you may access via links from our platform.

2. Types of Personal Data We Collect

2.1 Personal Identification Data

Maxim99 collects personal identification data necessary to register and verify your account:

• Full name as it appears on your Malaysian identity card
• National identity card number (MyKad) or passport number
• Date of birth
• Current residential address
• Mobile phone number
• Email address

2.2 Financial & Payment Data

To process deposits and withdrawals, we collect the necessary payment information:

• Bank account number or bank name (Maybank, CIMB, Public Bank, and others)
• E-wallet account information (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow)
• Deposit and withdrawal transaction history
• Betting records and gaming activity

Maxim99 does not store credit or debit card details directly. All payments made via these methods are processed by recognised third-party payment providers.

2.3 Technical & Usage Data

Maxim99 automatically collects technical data whenever you use the platform:

• Your device's IP address
• Web browser type and operating system
• Access time and date
• Pages visited and actions taken within the platform
• General location data (country/city) based on IP address
• Login session information

3. How We Collect Your Personal Data

3.1 Directly from You

Most of the data we collect comes directly from you as you interact with Maxim99:

• During account registration — basic profile information you entered in the registration form
• During the KYC process — identity verification documents you have submitted
• During deposits and withdrawals — payment information required to process transactions
• When contacting support — records of live chat or email conversations with the Maxim99 support team
• When completing survey forms — feedback you have voluntarily provided

3.2 Automatically Through Technology

Maxim99 uses industry-standard technology to automatically collect usage data:

• Cookies — small files stored on your device to enhance your user experience
• Server logs — technical records of platform activity required for security and maintenance purposes
• Tracking pixels — code elements that help us understand how players interact with the platform
• Local storage — session data stored in your browser to maintain session continuity

3.3 From Legitimate Third Parties

In certain circumstances, Maxim99 may receive data from legitimate third-party sources:

• Identity verification service providers for KYC purposes
• Payment providers (such as e-wallet processors) to verify financial transactions
• Regulatory bodies or law enforcement agencies when required by law

4. How We Use Your Personal Data

Maxim99 uses your personal data only for legitimate and necessary purposes. The table below outlines the purposes of data use along with their legal basis:

5. Sharing Data with Third Parties

Maxim99 does not sell, rent, or trade players' personal data to any third party. However, in the course of operating the platform, we may share your data with the following parties for legitimate purposes:

5.1 Contracted Service Providers

Maxim99 works with contracted third-party service providers to support platform operations. These include:

• Payment providers — e-wallet and FPX processors that facilitate your deposit and withdrawal transactions
• KYC Provider — an identity verification service to ensure account security
• Cloud infrastructure providers — secure and reliable server hosting
• Analytics providers — tools that help us understand and improve the user experience

All third-party service providers are bound by data protection agreements that prohibit them from using our players' data for any purpose other than the contracted services.

5.2 Legal Requirements

Maxim99 may be required to disclose player data to the relevant authorities when:

• Ordered by a court or tribunal with the relevant jurisdiction
• Required by a relevant financial or gambling regulatory body
• Required to investigate or prevent fraud, money laundering, or other financial crimes
• Required to protect the safety of a player or the public in an emergency

6. Maxim99 Data Security Measures

Maxim99 takes infrastructure security seriously to protect our players' personal data. The key security measures we have in place are as follows:

6.1 Technical Security

• 256-bit SSL/TLS Encryption for all data in transit
• Data encryption at rest (at-rest encryption) for sensitive data stored in our database
• Multi-layer firewall which protects server infrastructure from external attacks
• Intrusion detection system (IDS) which monitors network traffic in real time
• Two-factor authentication (2FA) available to all player accounts
• 24/7 Security Monitoring by Maxim99's cybersecurity team

6.2 Access Controls

Access to player data within the maxim99 system is restricted to staff who genuinely need it to perform their duties. Every access instance:

• Requires strong identity verification with a unique login for each staff member
• Automatically recorded in audit logs retained for a minimum of 12 months
• Subject to the principle of least privilege — staff may only access the data they need to perform their specific duties

6.3 Incident Response

While Maxim99 takes all reasonable steps to protect your data, no security system is one hundred percent foolproof. In the event of a data breach affecting players:

• The Maxim99 security team will promptly investigate and contain any incident
• Affected players will be notified within 72 hours of the incident being confirmed
• Appropriate remedial actions will be taken to minimise the impact on players
• Incident reports will be submitted to the relevant authorities if required by law

7. Data Retention Period

Maxim99 does not retain your personal data for longer than necessary. Below are the retention guidelines for different categories of data:

Once the retention period expires, your data will be securely deleted or fully anonymised so that it can no longer be linked to your identity. Where there is an ongoing legal dispute, relevant data may be retained for longer until the matter is resolved.

8. Cookie Policy

Maxim99 uses cookies to ensure the platform runs smoothly and to deliver the best possible user experience. Cookies are small text files stored on your device when you visit the Maxim99 website.

8.1 Types of Cookies Used

8.2 Managing Your Cookies

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the Maxim99 platform, including your ability to log in to your account. For guidance on managing cookies in a specific browser (Chrome, Firefox, Safari), please refer to your browser's help documentation.

9. Cross-Border Data Transfers

In operating the Maxim99 platform, your personal data may be processed or stored on servers located outside Malaysia. This is a standard technical requirement for modern digital platforms to ensure service speed, reliability, and security.

When Malaysian player data is transferred overseas, Maxim99 ensures adequate protection is in place through:

• Binding data transfer agreements with receiving parties requiring data protection equivalent to Malaysia's PDPA
• Use of cloud service providers that comply with internationally recognised security standards (such as ISO 27001)
• Data transfer risk assessments conducted prior to establishing any new transfer

10. Your Data Protection Rights

Under Malaysia's PDPA and Maxim99's internal policies, you have the following rights regarding your personal data:

10.1 How to Exercise Your Rights

To exercise any of the rights below, contact the Maxim99 support team via:

• Live Chat: Directly within your maxim99 account, 24/7
• Email: support@maxim99.best with the subject line "Data Rights Request"

Include your account number and clearly state the right you wish to exercise. Maxim99 is committed to responding to all requests within 14 business days. For complex requests, this period may be extended by up to 30 days, with prior notice given to you.

10.2 Right of Access to Data

You have the right to confirm whether Maxim99 is processing your personal data and to obtain a copy of that data. We will provide a summary of the data we hold about you in a readable format.

10.3 Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. For basic details such as your phone number or email address, you may also update these directly through your Maxim99 account profile settings.

10.4 Right to Erasure ("Right to be Forgotten")

You may request maxim99 to delete your personal data under certain circumstances — for example, when the data is no longer needed for its original purpose, or when you withdraw your consent. Please note that this right is not absolute — we may need to retain certain data to fulfil legal obligations such as financial record-keeping requirements.

10.5 Right to Object to Marketing

You may object to the use of your data for direct marketing at any time. Once you raise an objection, Maxim99 will immediately stop using your data for that purpose. This does not affect your eligibility to receive essential service communications.

11. Protection of Children's Privacy

Maxim99 is a betting platform for adults only. We do not knowingly collect or process personal data from individuals under the age of 18.

If you are a parent or guardian and believe that a child under your care has provided their personal data to Maxim99 without your knowledge, please contact us immediately at support@maxim99.best. We will investigate and delete the relevant data as soon as possible once the minor's identity has been verified.

Maxim99 recommends that parents and guardians:

• Using parental control software on devices shared with children
• Ensuring that maxim99 account login credentials are not accessible to minors
• Educating children about the risks and age restrictions of gambling platforms

12. Amendments to This Privacy Policy

Maxim99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new service offerings. All material amendments will be communicated to players via:

• An in-account notification on your next login to Maxim99
• Email notification sent to the address registered to your account
• An announcement on the Maxim99 homepage

The "Effective Date" at the top of this document will be updated to reflect the latest version. We recommend reviewing this page periodically. Continued use of the platform after any changes take effect will be considered acceptance of the amended policy.

If an amendment involves a material change in how we use your personal data, we will seek your renewed consent where required by law before that amendment applies to existing data.

13. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

• Live Chat: Available 24 hours a day, 7 days a week, directly within your Maxim99 account
• Email: support@maxim99.best — for privacy-related enquiries, please use the subject line "Data Privacy Enquiry"

Our Bahasa Malaysia-speaking team is ready to assist you. We are committed to responding to all privacy-related enquiries within 3 business days and processing data rights requests within 14 business days.

We take every privacy-related complaint seriously. If you are not satisfied with our response, you have the right to refer the matter to the Department of Personal Data Protection Malaysia.