Privacy Policy Max Win – Malaysian Member Data Security

Max Win (maxwin-khelo.com) is an online entertainment platform operated for Malaysian users. We take every member's privacy seriously and are committed to ensuring your personal data is handled responsibly, transparently, and securely.

This Privacy Policy describes the practices of Max Win regarding the collection, use, storage, protection, and disclosure of personal data collected from you when you:

• Browsing or using the maxwin-khelo.com website.
• Registering and managing your Max Win member account.
• Making deposits or withdrawals using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX online banking.
• Participating in games, promotions, or other activities on the Max Win platform.
• Contacting the Max Win customer support team.

This Policy applies to all Max Win platform users regardless of access method (laptop, smartphone, tablet, or other device) and covers all services provided by Max Win.

Max Win collect your personal data through a variety of means. Below are the categories of data we collect, along with their sources and purposes:

Max Win uses the personal data collected for the following purposes. We will only use your data for the stated purposes or other compatible and related purposes:

• Account Management: Creating, verifying, and managing your Max Win member account, including the required identity verification (KYC) process.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as withdrawals of winnings to your Malaysian bank account or e-wallet.
• Provision of Gaming Services: Giving you access to all games on Max Win including slots, Live Casino, blackjack, Sports Betting (Malaysia Super League, EPL, badminton), and virtual sports.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, multi-account usage, and other unlawful activities.
• Marketing Communications: Sending information about Max Win promotions, bonuses, and new offers — only to members who have consented to receive such communications.
• Legal Compliance: Fulfilling the legal obligations applicable to Max Win under Malaysian legislation.
• Analytics & Improvement: Analysing usage patterns to improve the user experience and performance of the Max Win platform.

Max Win will not use your data to make automated decisions that significantly affect your legal rights without meaningful human involvement.

Max Win does not sell your personal data. However, we may share your data in the following limited and controlled circumstances:

• Trusted Service Providers: Third parties we engage to provide specialised services such as payment processing (DuitNow, Touch 'n Go, GrabPay gateways), gaming software providers (Evolution Gaming, Pragmatic Play, and others), and cloud computing services. All such third parties are bound by strict confidentiality agreements.
• Legal Requirements: Where required by Malaysian law, court order, or direction from a competent authority such as Bank Negara Malaysia or the Malaysian Anti-Corruption Commission (MACC).
• Fraud Prevention: To fraud prevention agencies or law enforcement in cases of suspected fraud or criminal activity involving a Max Win account.
• Business Transfers: In the event that Max Win undergoes a merger, acquisition, or asset sale, member data may be transferred as part of that transaction, provided the receiving party maintains an equivalent level of protection.

Max Win implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure:

• Data Encryption: All data transmitted between your browser and Max Win's servers is encrypted using TLS 1.3 protocol with 256-bit encryption. Sensitive data such as passwords are stored in hashed form using the bcrypt algorithm.
• Access Control: Access to members' personal data is strictly limited to Max Win staff who require it to perform their duties, based on the principle of least privilege.
• 24/7 Monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) continuously monitor Max Win's infrastructure for any suspicious activity.
• Penetration Testing: Max Win conducts regular security assessments by independent third parties to identify and address any system vulnerabilities.
• Data Backups: Data is securely backed up across multiple locations to ensure rapid recovery in any emergency scenario.

While we take all reasonable precautions, no system is 100% secure. You also play an important role in keeping your data safe — use a strong password, enable two-factor authentication (2FA), and never share your login credentials with anyone.

Max Win only retains your personal data for as long as necessary for the purpose it was collected, or as required under Malaysian law:

Once the retention period expires, or upon your request for data deletion (subject to applicable legal obligations), Max Win will securely delete or anonymise your data using methods that ensure it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal data held by Max Win:

Max Win uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

Platform Max Win is strictly for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will promptly delete that data and close the associated account. If you believe your child or someone under the age of 18 has registered an account on Max Win, please contact us immediately at support@maxwin-khelo.com.

Max Win reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other relevant factors.

In the event of significant amendments, we will:

• Displaying clear notices on the Max Win platform homepage.
• Sending notification emails to all active registered members.
• Updating the "Last Updated" date at the top of this document.
• Providing a minimum of 14 days' notice before any amendment takes effect, giving you time to review the changes.

Your continued use of the Max Win platform after any amendments take effect constitutes your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account before they come into effect.

If you have any questions, concerns, or wish to exercise your data protection rights, please contact Max Win through the following channels: