Privacy Policy maxx66 —
Your Data, We Care

Maxx66 is fully committed to protecting the privacy and personal data security of every member. This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and explains in detail how we manage the information you provide when registering, using the platform, or interacting with maxx66 services.

This document applies to all interactions through the official maxx66.vip website, the maxx66 mobile app for Android and iOS, and any official maxx66 communication channels including live chat and support email. By using any maxx66 platform, you are deemed to have read and agreed to this Privacy Policy.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy maxx66 to form the entire agreement relating to the use of our platform.

Maxx66 collects information solely for the purpose of operating the platform safely and meeting legal requirements. The following are the categories of information we collect:

Information You Provide Directly

• Registration information: Full name, phone number, date of birth, username, and password.
• Identity verification (KYC): A copy of your identity card (MyKad), passport, or other valid identity verification document accepted in Malaysia.
• Payment information: Bank account details and e-wallet account numbers (Touch 'n Go, GrabPay) for deposit and withdrawal purposes.
• Communications: Any messages, enquiries, or feedback you send to our customer support team.

Information Collected Automatically

• Technical data: IP address, device type, operating system, web browser type, and language settings.
• Usage data: Login records, game history, transaction history, active time, and platform usage patterns.
• Location data: General location data based on IP address for regional compliance purposes.
• Cookie data: Session cookies, preference cookies, and analytics cookies to enhance the user experience.

The personal data we collect is used responsibly for the following purposes only:

• Account management: Create and manage your account, process registration, and ensure secure access to the platform.
• Transaction processing: Verify and process deposits, withdrawals, and all financial transactions securely and accurately.
• KYC/AML Compliance: Fulfil legal obligations related to identity verification and anti-money laundering.
• Customer support: Respond to enquiries, resolve disputes, and provide technical assistance to members.
• Platform security: Detect and prevent fraudulent activity, unauthorised access, and other security threats.
• Service improvement: Analyse usage patterns to improve platform quality, interface, and overall experience.
• Marketing communications: Send promotional information, bonuses, and exclusive offers — only if you have given your consent.
• Responsible gaming: Monitor gameplay patterns to identify signs of problem gambling and provide the necessary support.

Maxx66 does not sell, rent, or disclose your personal data to third parties except in the following limited circumstances:

Trusted Service Providers

Maxx66 works with carefully selected third-party service providers, including:

• Payment processors: DuitNow, FPX, Touch 'n Go, and GrabPay for secure financial transaction processing.
• Cloud service providers: Server infrastructure and data storage that comply with international security standards.
• Game providers: Game providers that supply slot, Live Casino, and other game content on our platform.
• Analytics services: Tools that help us understand usage patterns for platform improvement purposes.

All these service providers are bound by strict confidentiality agreements and are only permitted to use your data for specifically defined purposes.

Legally Required Disclosures

In certain circumstances, maxx66 may be required to disclose personal data to:

• Malaysian law enforcement authorities based on a court order or valid legal requirement.
• The regulatory authority with jurisdiction over maxx66's operations.
• Parties in legal proceedings where maxx66 is involved as a party or witness.

Maxx66 consistently invests in robust security infrastructure to ensure your personal data remains protected at all times. Our security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and maxx66 servers is encrypted to banking-grade encryption standards.
• Data-at-rest encryption: Personal data and financial information stored on our servers are protected with AES-256 encryption.
• Layered access control: Only staff with explicit authorisation may access member data, and every access is logged and monitored.
• Two-factor authentication (2FA): Available to all member accounts as an additional layer of protection against unauthorised access.
• 24/7 Monitoring: Automated monitoring systems are always active to detect anomalies, intrusion attempts, and suspicious activity.
• Regular penetration testing: maxx66 conducts regular security assessments by independent experts to identify and address any vulnerabilities.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against every threat. We encourage you to also take your own precautions, such as using a strong password and enabling 2FA on your account.

Maxx66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance cookies: Collect information on how you use the platform to help us improve performance and usability.
• Functional cookies: Remember your preferences such as display settings and game choices for a more personalised experience.
• Analytics cookies: Help us understand aggregate traffic and usage patterns without identifying you individually.

Manage Your Cookies

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the maxx66 platform. For more information on managing cookies in popular browsers, refer to your browser's help guide.

Under Malaysia's PDPA and data protection best practices, you have the following rights regarding your personal data held by maxx66:

• Right of access: You can request a copy of all personal data we hold about you at any time.
• Right to rectification: You have the right to correct any inaccurate or incomplete data through your account settings or by contacting support.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data — subject to our legal retention obligations.
• Right to object: You can object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent without affecting any prior processing.
• Right to data portability: You can request your data in a machine-readable format for transfer to another service provider.

Maxx66 may require identity verification before processing any data rights request to ensure the security of your information.

Maxx66 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law.

General data retention period guidelines are as follows:

• Active account data: Retained for the duration your account is active and for a reasonable period thereafter for support purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial and tax records.
• KYC Documents: Retained for a minimum of 5 years after account termination in accordance with AML/CFT requirements.
• Support communication logs: Retained for 2 years for service reference and improvement purposes.
• Technical log data: Retained for 12 months for security and incident investigation purposes.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be personally associated with you.

In certain circumstances, your personal data may be transferred to or stored on servers located outside Malaysia. This occurs when we use cloud service providers or internationally accredited technology vendors.

Maxx66 ensures that any international data transfers are safeguarded through appropriate measures, including:

• Ensure that data recipients comply with data protection standards equal to or stricter than Malaysia's PDPA.
• Apply approved standard data transfer agreements for countries without an adequate level of protection.
• Ensure all third-party data processors sign binding data processing agreements.

The maxx66 platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data of individuals under 18 years of age.

Should we discover that we have inadvertently collected personal data of an individual under the age of 18, we will take immediate steps to:

• Delete all data related to that individual from our systems.
• Close the relevant account immediately.
• Process any valid remaining balance for return to the lawful heir or guardian.

Maxx66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological requirements, or legal obligations. Members will be notified of any material amendments through:

• An in-platform notification when you log in to your account.
• Email to the address registered to your account.
• A clear notice on the maxx66 website homepage.

The "Updated" date at the top of this page always reflects the latest version of the Privacy Policy. Continued use of the maxx66 platform after any amendments constitutes acceptance of the updated terms.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, our team is ready to assist you through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the maxx66 platform.
• Email: [email protected] — response within 1–2 business days.
• Address: maxx66 Operations, Kuala Lumpur, Malaysia.

For formal complaints regarding data processing that does not comply with the PDPA, you also have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP).