Privacy Policy Maxwin –
User Data Protection & Privacy

This Privacy Policy explains how Maxwin ("we", "our platform") collects, processes, uses, stores, and protects your personal data when you use the maxwin.sx website and all related services. This document forms part of your agreement with Maxwin together with the platform's Terms and Conditions.

We take user privacy extremely seriously. In today's digital environment, trust is the most valuable asset. Maxwin believes you have the right to know exactly what happens with your data — not in complex legal language, but in clear, straightforward terms that anyone can understand.

By using the Maxwin platform, you agree to the data protection practices described in this Privacy Policy. If you do not agree with any aspect of this policy, please discontinue use of the platform and contact our team for assistance with closing your account.

Maxwin collects several categories of personal data when you register and use our platform. We only collect data that is genuinely necessary for the stated purposes and do not collect excessive information.

• Full name as stated on your official identity document
• Date of birth for age verification (must be at least 18 years old)
• An active email address for communications and account verification
• Phone number for two-factor authentication (2FA) and important notifications
• Current residential address for KYC verification purposes
• Copies of identity documents (MyKad, passport) for the KYC process
• Payment method details (account name, bank account number or digital wallet)

• Your device's IP address when accessing the platform
• Browser type, operating system, and device model
• Login history including date, time, and access location
• Game history, betting records, and activity within the platform
• Cookie data and similar tracking technologies (see Section 6)
• Communication logs with the customer support team

Maxwin uses collected personal data for clear and legitimate purposes. We will not use your data for purposes unrelated to the services we provide without first obtaining your consent.

• Account Management: Creating, verifying, and maintaining your user account securely
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the platform
• Identity Verification (KYC): Ensuring compliance with anti-money laundering (AML) requirements and related laws
• Platform Security: Detecting, investigating, and preventing fraudulent activity, abuse, or security breaches
• Customer Support: Responding to enquiries, complaints, and technical support requests
• Service Communications: Sending important notifications relating to your account, transactions, and platform changes
• Platform Improvements: Analysing usage patterns to improve user experience and platform performance
• Legal Compliance: Fulfilling legal obligations and responding to requirements from the relevant authorities

Maxwin does not sell, rent, or trade users' personal data to any third party. Data sharing only occurs in limited situations and solely for legitimate operational purposes, as outlined below.

• Payment Service Providers: Information required to process transactions is shared with licensed and trusted payment service providers
• Game Software Providers: Game session data required for gameplay functionality is shared with game providers partnering with Maxwin
• KYC & Identity Verification Services: Identity document information is shared with licensed KYC service providers for the verification process
• Regulatory Authority: Maxwin will disclose the required information to the relevant authorities when required by law
• Legal Advisors & Auditors: In situations requiring legal advice or compliance audits, relevant information may be shared with professionals bound by confidentiality obligations

All third parties that receive user data from maxwin are bound by strict confidentiality and data protection agreements. They are only permitted to use the data for the stated purpose and may not use it for any other reason.

User data security is Maxwin's top priority. We continuously invest in the latest security infrastructure and technology to ensure your data is always protected from unauthorized access, loss, or unintended disclosure.

• 256-bit SSL/TLS encryption for all data communications between your device and Maxwin servers
• Passwords are stored using a one-way hashing algorithm that cannot be decrypted
• Strict internal access controls — only staff who require access to perform their duties are permitted
• 24/7 system monitoring to promptly detect and respond to security threats
• Regular penetration testing by independent security experts
• Automatically encrypted data backups stored across multiple separate locations
• Tested incident response protocols to ensure swift and effective action in the event of a data breach

The maxwin Platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyze platform performance. Cookies are small text files stored on your device when you visit our website.

Maxwin uses three main types of cookies:

• Essential Cookies: Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled as they ensure the platform operates correctly
• Performance Cookies: Gathering information on how users interact with the platform to help us identify and improve areas that need enhancement
• Preference Cookies: Storing your preferences such as language, display settings, and saved login information to facilitate future access

You can manage and control cookies through your browser settings. However, disabling essential cookies may disrupt platform functionality and your overall user experience.

Maxwin retains users' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable laws and regulations.

• Active Account Data: Retained for the duration your account is active and used to enable continued access to Maxwin's services
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with anti-money laundering and tax legal requirements
• KYC Data: Retained for the period stipulated by the relevant regulatory authority, generally no less than five (5) years after account closure
• Security Logs: Retained for 12 months for security incident investigation purposes if required
• Support Communication Data: Retained for two (2) years for reference and service improvement purposes

Once the designated retention period expires, data will be securely deleted or anonymized so it can no longer be linked to your identity. Users may request early deletion of their personal data — see Section 8 for details.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data held by Maxwin. Maxwin is committed to respecting and facilitating the exercise of these rights.

To exercise any of the above rights, please contact the maxwin team via the platform's Live Chat or email [email protected], including your full name and account number. maxwin will process your request within 30 business days.

As a responsible platform, maxwin requires all registered users to complete a full Know Your Customer (KYC) process. This is not only a legal requirement — it is also an essential safeguard to protect our users from identity fraud.

Documents required for KYC include a valid Malaysian identity card (MyKad), recent proof of address (not more than three months old), and in certain cases, proof of source of funds. All submitted documents are processed through a secure system and accessed only by authorized personnel.

Information collected during KYC is used solely for identity verification purposes, compliance with Anti-Money Laundering (AML) laws, and fulfilling reporting obligations to the relevant authorities. KYC information is not used for marketing purposes or shared with third parties except as stated in Section 4.

In the context of online platform operations, some user data may be processed or stored on servers located outside Malaysia, particularly in relation to international game software providers partnering with Maxwin.

When cross-border data transfers occur, Maxwin ensures that:

• The country or region receiving the data has a level of data protection equivalent to or higher than Malaysia
• Legally binding data protection agreements have been established with data recipients
• Data transfers only take place for the stated purposes and with adequate safeguards in place
• All overseas data recipients are bound by data protection obligations equally as stringent as those of maxwin

Maxwin reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technologies used, legal requirements, or user feedback. Any material changes will be communicated to registered users via email or in-platform notification.

The effective date of the latest version of this Privacy Policy will always be displayed at the top of this document. We encourage users to review this page periodically. Continued use of the platform after any changes take effect constitutes acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, Maxwin's data protection team is ready to assist. We are committed to responding to all privacy-related inquiries seriously and within a reasonable timeframe.

• Live Chat on the platform – the fastest option for general enquiries
• Dedicated privacy email: [email protected]
• General support: [email protected]

For requests relating to data access, correction, or deletion rights, please use the privacy email above and include the following: your full name, maxwin account number, and details of your request. maxwin will verify your identity before processing any request involving personal data.