Maxx66 Privacy Policy – Personal Data Protection for Malaysian Members

Maxx66 collects your personal data through several means — directly when you register an account or contact us, automatically as you use our platform, and in some cases through legitimate third-party sources.

A. Data You Provide Directly

This information is collected when you register a maxx66 account or interact with our platform:

• Identity Information: Full name, Malaysian identity card number (MyKad), date of birth and gender.
• Contact Information: Malaysian mobile number, email address and residential address.
• Financial Information: Payment method details used (bank account number, Touch 'n Go account number, GrabPay, DuitNow, etc.) for deposit and withdrawal purposes.
• Verification Information: Copies of identity documents requested during the account verification process, such as MyKad or passport.
• Communications: Records of conversations with the maxx66 support team via live chat or email.

B. Automatically Collected Data

When you use the maxx66 platform, our systems automatically record the following technical information:

• Usage Data: Betting history, game types played, session duration, login frequency, and platform usage patterns.
• Device Data: Device type, operating system, phone model, screen resolution and unique device identifiers.
• Network Data: IP address, internet service provider (ISP), and geographic location based on IP (state level only).
• Browser Data: Web browser type and version, language settings and referring page.
• Cookie Data: Session information and preferences stored via cookies (see Section 6 for details).

Maxx66 uses collected personal data solely for legitimate and transparent purposes. We do not use your data for any purpose not stated in this policy without first obtaining your additional consent.

The primary purposes for which your personal data is used at maxx66 are as follows:

Under Malaysia's Personal Data Protection Act 2010 (PDPA), maxx66 requires a valid legal basis for each personal data processing activity. The bases we rely on are:

• Contract Performance: Most data processing is carried out because it is necessary to perform the service agreement between you and maxx66 – including account management, bet processing and winnings payments.
• Consent: For marketing activities and optional communications, we require your explicit consent. You may withdraw this consent at any time.
• Legitimate Interest: For the purposes of platform security, fraud prevention and usage analysis to improve our services, maxx66 relies on legitimate interests that do not unreasonably override your privacy rights.
• Legal Obligation: For compliance with Malaysian legal requirements including AML, KYC, and mandatory tax reporting.

Maxx66 does not sell, rent or disclose your personal data to third parties for their own commercial marketing purposes. However, in the course of operating our platform, there are limited situations where data must be shared with specific parties:

Trusted Service Providers

Maxx66 works with carefully selected third-party service providers to support our platform's operations. These include:

• Payment Processors: Payment providers that process Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX transactions. They receive only the information necessary to process your transaction.
• Game Providers: Companies that provide casino game software, slots and lottery products for the maxx66 platform. They receive only the anonymised usage data necessary to deliver the games.
• Identity Verification Services: KYC providers that assist maxx66 in verifying member identities to meet legal compliance requirements.
• Cloud & Hosting Services: Technical infrastructure providers that store maxx66 platform data in a secure environment.

All third-party service providers are required to sign a strict data protection agreement with maxx66 and are not permitted to use your data for any other purpose.

Disclosure to Authorities

Maxx66 will disclose your personal data to Malaysian authorities if required by law, court order, or a directive from a legitimate regulatory agency. We will endeavour to notify you in advance should this occur, unless prohibited from doing so by law.

Maxx66 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Technical Security Measures

• Transmission Encryption: All data transmitted between your browser and the maxx66 platform is protected by TLS 1.3 protocol and 256-bit SSL encryption.
• Storage Encryption: Sensitive data stored in the maxx66 database is encrypted using AES-256 standard.
• Access Controls: Access to members' personal data within maxx66's internal systems is restricted to staff who require it to perform their duties, and every access is recorded in an audit log.
• Two-Factor Authentication (2FA): All maxx66 internal admin accounts are protected with 2FA to prevent unauthorised access.
• Continuous Monitoring: A real-time threat detection system monitors the maxx66 platform around the clock for anomalies or intrusion attempts.
• Regular Security Audits: Independent security audits are conducted periodically by recognised third-party cybersecurity firms.

Data Retention Period

Maxx66 retains your personal data for as long as necessary to fulfil the purposes stated in this policy or as required by Malaysian law:

• Active Account Data: Retained for the duration of your active account plus 7 years after closure (Malaysian legal compliance requirement).
• Financial Transaction Records: Retained for 7 years in accordance with Malaysian financial and tax legislation.
• Support Communication Logs: Retained for 3 years from the date of the last interaction.
• Technical Log Data: Retained for 12 months and subsequently deleted or anonymised.
• Marketing Data: Retained until you withdraw your consent or request deletion.

Once the relevant retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to you.

Maxx66 uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how members interact with our platform.

Cookies are small text files stored on your device when you visit the maxx66 platform. They do not contain viruses or malware and cannot access other files on your device.

Cookies categorised as "Essential" are required for the core functionality of the maxx66 platform and cannot be disabled. Analytical and Functional cookies can be managed through your browser settings, though this may affect your experience on the platform.

As a maxx66 member residing in Malaysia, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). maxx66 is committed to respecting and facilitating the exercise of these rights.

In the course of operating the maxx66 platform, some of your personal data may be stored or processed on servers located outside Malaysia. This occurs primarily in the context of cloud infrastructure used by maxx66's service providers.

Nonetheless, maxx66 ensures that all international data transfers are protected through appropriate safeguards:

• All vendors storing data outside Malaysia are required to comply with data protection standards equivalent to Malaysia's PDPA through legally binding data processing agreements.
• All transferred data is encrypted both in transit and at rest, regardless of its location.
• Maxx66 only uses cloud providers that hold recognised international security certifications.

For information on the countries where your data may be stored, you may contact the maxx66 privacy team at support@maxx66.best.

The maxx66 platform is intended solely for individuals aged 18 and above. maxx66 does not knowingly collect personal data from individuals under the age of 18.

Maxx66 uses age verification technology during account registration to detect and prevent underage individuals from signing up. If we find that personal data has been inadvertently collected from a minor, we will promptly delete that data and close the associated account.

If you are a parent or guardian who has discovered that your child under the age of 18 has registered an account on maxx66, please contact us immediately at support@maxx66.best so we can take the appropriate action.

Maxx66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements or improvements in how we handle member data.

When material changes are made to this policy, maxx66 will:

• Updating the "Last Updated" date at the top of this page.
• A clear notice is displayed on the platform when members log in after any changes take effect.
• Sending email notifications to all registered members at least 7 days before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how maxx66 protects your data. Continued use of the maxx66 platform after any changes take effect will be considered your acceptance of the revised policy.

If you have any questions, concerns or complaints about how maxx66 handles your personal data, we welcome you to get in touch. The maxx66 privacy team operates in both Bahasa Melayu and English, and is committed to providing prompt and helpful responses.

• Privacy Email: support@maxx66.best (please state "Privacy Enquiry" in the subject line of your email)
• Live Chat: Available on the maxx66 platform, 24 hours a day, 7 days a week
• Response Time: We are committed to providing an initial response within 3 business days and resolving privacy complaints within 30 business days.

If you are not satisfied with how maxx66 has handled your privacy complaint, you have the right to escalate it to the Department of Personal Data Protection Malaysia (JPDP), the regulatory authority for PDPA in Malaysia.