Privacy Policy max66 – Member Personal Data Protection

This Privacy Policy is published by max66 ("we", "Platform") and applies to all individuals who register, browse, or use any services provided through the official max66 website and our mobile app. This document details our personal data protection practices, which comply with recognised privacy protection principles.

By using the max66 platform, you acknowledge that you have read and understood this Privacy Policy. We encourage you to read this document carefully as it contains important information about your rights as a member and how we manage the information you entrust to us.

This Privacy Policy should be read together with Terms and Conditions max66. In the event of any conflict between the two documents, this Privacy Policy shall apply specifically to matters relating to personal data protection.

Max66 collects several categories of personal information to enable us to provide a safe, efficient, and high-quality service to our members. Below is a summary table of the types of data collected:

We only collect data that is strictly necessary for the stated purposes. The "data minimisation" principle is upheld at all times — we do not collect irrelevant or excessive information.

• Information you provide directly during registration and the KYC process.
• Data automatically generated when you use the platform (technical and activity data).
• Information received from trusted third-party payment processors to verify transactions.
• Data collected through cookies and tracking technologies described in Section 6.

Every piece of personal information collected is used solely for legitimate and transparent purposes. We do not use your data for any purpose unrelated to the provision of max66 services.

• Account Management: Creating, verifying, and managing your member account, including a secure Login process.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions quickly and securely.
• Identity Verification: Conducting required KYC and AML checks to comply with regulatory requirements.
• Platform Security: Detecting and preventing fraud, hacking, unauthorised access, and account abuse.
• Service Communications: Sending important notifications related to your account, transactions, and security updates.
• Customer Support: Helping resolve enquiries and complaints more efficiently through access to relevant account history.
• Responsible Gaming: Monitoring gaming patterns to identify members who may require responsible gaming support.
• Platform Improvements: Analysing usage data in aggregate (not individually) to improve the user experience.

Max66 does not sell, rent, or trade members' personal information to any third party. However, under certain limited and lawful circumstances, we may share your information with the following parties:

• Payment Processors: Payment service providers such as DuitNow, FPX, and e-wallet operators for processing your financial transactions securely.
• Technology Service Providers: Companies that provide the technical infrastructure, server hosting, and cybersecurity services that support our platform's operations.
• Game Providers: Game developers and Live Casino operators providing gaming content on the max66 platform, limited to data required for service delivery.
• Regulatory Authority: Government agencies, law enforcement bodies, or financial authorities where required by law or court order.
• Identity Verification Service: A third-party provider that assists in the identity document verification process for KYC compliance.

All third parties who receive your data are bound by strict confidentiality agreements and are only permitted to use the data for agreed purposes. They are not allowed to process your data for their own purposes.

Protecting your personal data is max66's top priority. We continuously invest in cybersecurity infrastructure to keep your information safe from both external and internal threats.

• 256-bit SSL Encryption: All data communications between your device and max66 servers are encrypted using the latest TLS protocol, making data unreadable to unauthorised parties during transmission.
• Multi-Layer Firewall: Our servers are protected by sophisticated firewall systems that continuously monitor and filter all incoming and outgoing traffic.
• Strict Access Controls: Only max66 staff with legitimate work requirements are permitted to access sensitive data, and every access is logged and monitored.
• Two-Factor Authentication (2FA): 2FA is available for all member accounts, adding an important extra layer of security during login.
• Regular Security Scanning: Our platform undergoes regular penetration testing and security audits conducted by independent cybersecurity experts.
• Real-Time Threat Monitoring: An automated threat detection system operates 24 hours a day to identify and respond to any suspicious activity immediately.

While we take all reasonable steps to protect your data, no system is completely infallible. We encourage you to use a strong password, enable 2FA, and report any suspicious activity to our team promptly.

Max66 uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and understand how members interact with our platform.

Types of cookies used:

• Essential Cookies: Required for essential platform functions such as login session verification and security. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Collecting information on how you use the platform (pages visited, time spent) to help us improve website performance.
• Functionality Cookies: Remembering your preferences and settings, such as language and display preferences, to improve ease of use.
• Security Cookies: Used to detect fraudulent activity and ensure the security of your account by identifying the devices used.

You can manage cookie usage through your web browser settings. However, disabling essential cookies may affect certain platform functions and your gaming experience.

As a max66 member, you have certain rights regarding your personal information. We fully respect and facilitate the exercise of these rights:

Max66 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations.

• Active Account Data: Retained for the duration your account is active, plus any additional period required for legal compliance.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and AML compliance legal requirements.
• KYC Documents: Retained for the period specified by the relevant regulatory body, typically 5–7 years after the business relationship ends.
• Security Logs: Technical log data is retained for 12 months for security investigation and fraud detection purposes.
• Communication Data: Customer support records are retained for 3 years for service quality and reference purposes.

Once the retention period ends, your data will be securely deleted or anonymised using methods that ensure the data cannot be recovered.

Max66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. We are committed to informing you of any significant changes.

• The "Updated" date at the top of this page will be revised whenever an amendment is made to this policy.
• For significant changes, we will send a notification via your registered email or an in-platform notice at least 14 days before the changes take effect.
• Continued use of the max66 platform after any Privacy Policy changes are published will be considered your acceptance of the updated terms.
• If you do not agree with the changes made, you have the right to close your account before the effective date of those changes.

If you have any questions, concerns, or complaints regarding how we handle your personal data, or wish to exercise any of your rights as a data subject, please do not hesitate to contact our team.

The max66 customer support and data privacy team is available to assist you 24 hours a day, 7 days a week. We are committed to responding to all privacy-related enquiries within 3 business days.

You may also refer to the FAQ us for answers to frequently asked questions about privacy and account security.