Maxim8 Privacy Policy – Malaysian Player Personal Data Protection

Maxim8 takes our responsibility to every player's privacy seriously. This Privacy Policy is designed to give you a clear and honest overview of how we handle your personal data — from the point of collection through to storage and deletion.

This document applies to all users accessing the maxim8 platform via the official website, Android mobile app, or any official maxim8 communication channel. It covers all types of personal data collected, how that data is used, who it may be shared with, and what rights you hold as the data owner.

All our practices comply with Malaysia Personal Data Protection Act (PDPA) 2010. This means your rights are protected under local law, not just internal company policy.

Maxim8 only collects data that is strictly necessary to provide you with a safe and seamless service. We do not collect data that is excessive or irrelevant to platform operations.

All data you provide must be accurate and up to date. Inaccurate information may affect our ability to process fund withdrawals or provide you with effective support.

Maxim8 uses your personal data only for legitimate purposes directly related to the provision of platform services. We do not use your data for any other purpose without first obtaining your consent.

The primary purposes for which your personal data is used include:

• Account management: Creating, verifying and maintaining your user account on the maxim8 platform.
• Transaction processing: Securely processing deposits and fund withdrawals through your chosen payment methods.
• KYC and anti-money laundering compliance: Meeting legal requirements related to identity verification and financial crime prevention.
• Account Security: Identifying and preventing unauthorised access, fraud and suspicious activity.
• Customer support: Helping you resolve technical issues, transactions or inquiries through our 24/7 support team.
• Platform improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the user experience.
• Important communications: Sending account and security notifications, terms updates and promotional information you have agreed to receive.

Maxim8 does not sell, rent, or trade players' personal data to any third party for marketing or commercial purposes. This has been an unchanged policy since the platform was established.

However, there are certain situations where we may need to share some of your data with selected third parties, namely:

• Payment providers: Financial institutions and payment processors involved in handling your deposits and withdrawals. They receive only the minimum data required for the relevant transaction.
• Game providers: Gaming software companies that work with maxim8 may receive session data required to ensure technical functions operate correctly.
• Legal authorities: If required by Malaysian law or a valid court order, maxim8 will disclose the requested data to the relevant authorities.
• Technical service providers: Companies providing infrastructure, cybersecurity, or analytics services necessary for platform operations, subject to strict confidentiality agreements.

Maxim8 uses cookies and similar tracking technologies to enhance your experience on the platform and maintain the security of your session. Cookies are small text files stored on your device when you access our website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting anonymous data about how you use the platform to help us understand areas that need improvement.
• Functional cookies: Saving your preferences such as language and display settings to deliver a more personalised experience.

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect certain functions on the maxim8 platform.

Maxim8 continuously invests in security infrastructure to ensure your personal data is protected at every stage — whether in transit, during processing, or in storage.

Key security measures we have in place:

• End-to-end encryption: All communications between your device and maxim8 servers are secured with 256-bit SSL/TLS encryption.
• Two-factor authentication: An extra layer of security is available for your account through two-factor authentication, which can be enabled in your account settings.
• 24/7 Monitoring: Our cybersecurity team monitors platform activity around the clock to identify and respond to any threats promptly.
• Regular security audits: Independent security assessments are conducted periodically to identify and address any potential vulnerabilities.
• Internal access controls: Only designated staff with specific authority may access user personal data, and all access is logged for audit purposes.

Under Malaysia's PDPA and the maxim8 privacy policy, you have the following rights regarding your personal data. We fully respect and facilitate the exercise of these rights.

To exercise any of the above rights, please contact the maxim8 support team via live chat on the platform. We will process your request within the timeframe stipulated by Malaysia's PDPA.

Maxim8 retains your personal data only for as long as it is needed for the purposes stated in this policy, or as required by applicable law.

In general, retention periods are as follows:

• Active account data: Retained for as long as your account remains active on the maxim8 platform.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysia's financial legal requirements.
• KYC documents: Retained for the duration of account activity and for at least five (5) years after account closure in accordance with anti-money laundering requirements.
• Support communication logs: Retained for three (3) years for reference and dispute resolution purposes.
• Technical data and system logs: Retained for twelve (12) months for security and technical troubleshooting purposes.

Once the retention period ends, your data will be permanently deleted or anonymised in a secure manner so that it cannot be recovered or identified.

Maxim8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform operations. The latest version will always be published on this page with a clear update date.

If a material change occurs — meaning a change that significantly alters how we use your personal data — we will notify you via an in-platform notification or your registered email before the change takes effect.

Continued use of the maxim8 platform after any policy changes take effect means you accept the latest version of this Privacy Policy. If you do not agree with the changes made, please stop using the platform and contact us to close your account.

For any inquiries regarding this Privacy Policy or how we handle your personal data, the maxim8 support team is available via live chat on the platform — 24 hours a day, 7 days a week. You may also refer to the FAQ us for answers to frequently asked questions about privacy and account security.