Privacy Policy maxim8 – Your Privacy, Our Priority

1Introduction

Welcome to the maxim8 Privacy Policy page. We, maxim8 ("Company", "us", or "our platform"), recognise that privacy and personal data protection are fundamental rights of every individual. This policy is designed to clearly and transparently explain how we handle your personal information when you use the maxim8 online entertainment platform at maxim8.app.

By registering and using the maxim8 platform, you acknowledge that you have read, understood and agreed to the terms set out in this Privacy Policy. This Policy should be read together with Terms and Conditions maxim8 and Responsible Gaming Policy us.

Maxim8 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable data protection laws. We only collect data that is genuinely necessary to deliver the best service to you, and we are committed to ensuring that data is managed responsibly, securely, and transparently.

2Personal Data We Collect

Maxim8 collects several categories of personal information depending on how you interact with our platform. Below is a detailed breakdown of the data we collect and its purposes:

A. Information You Provide Directly

• Full name as stated on official identification document
• National identification number (MyKad) or passport number
• Date of birth for age verification
• Current residential address
• Active email address
• Mobile phone number
• Bank account details for deposit and withdrawal purposes
• Registered e-wallet details

B. Automatically Collected Data

• IP address and IP-based geographical location
• Device type, operating system and web browser version
• In-platform gaming and betting activity history
• Login records including date, time, and location
• Website usage data such as pages visited and time spent
• Cookie information and device identifiers

C. Identity Verification Data (KYC)

• Front and back copy of identity card or passport
• Selfie holding identity document (if required)
• Proof of address such as a recent utility bill or bank statement
• Source of funds documentation if requested for large transactions

3How We Use Your Data

Every piece of personal data we collect is used for legitimate and transparent purposes. The table below outlines the purposes of data use and the relevant legal basis:

Maxim8 will not use your personal data for any purpose other than those stated above without informing you in advance and, where necessary, obtaining your renewed consent.

4Personal Data Sharing

Maxim8 does not sell or rent members' personal data to any third party for their own marketing purposes. However, in the course of operating the platform, we may need to share your data with certain parties under limited and controlled circumstances:

• Payment service providers: Payment gateways and financial institutions that process your deposits and withdrawals, subject to strict confidentiality agreements.
• Game software providers: Licensed game companies that provide game content on the maxim8 platform, limited to data required to process gameplay.
• KYC service providers: Third-party identity verification companies that assist us in verifying member identities in line with anti-money laundering (AML) requirements.
• Regulatory authority: Regulatory bodies, law enforcement agencies or courts when required by Malaysian law or a valid court order.
• Analytics service providers: Analytics tools that help us understand platform usage patterns for improvement purposes — data is shared in anonymised form where possible.

5Data Security

The security of your personal data is maxim8's top priority. We continuously invest in our security infrastructure and apply multiple layers of protection to safeguard your information:

• 256-bit SSL/TLS encryption: All communications between your device and maxim8 servers are encrypted using the latest SSL/TLS protocols, making transmitted data unreadable to third parties.
• Data-at-rest encryption: Personal data stored in our databases is also encrypted, including financial information and KYC documents.
• Two-factor authentication (2FA): A 2FA system is available for all member accounts to add an extra layer of security to the login process.
• 24/7 security monitoring: Our cybersecurity team monitors the maxim8 infrastructure around the clock to detect and respond to any threats or suspicious activity.
• Strict access controls: Only specifically authorised maxim8 staff may access members' personal data, and all such access is logged and audited regularly.
• Periodic penetration testing: Our platform undergoes regular independent security testing to identify and resolve any vulnerabilities before they can be exploited.

While we take every reasonable step to protect your data, no system is entirely impenetrable. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities within the timeframe required by law.

6Cookies & Tracking Technologies

Maxim8 uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns, and maintain platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Collecting anonymous information on how users interact with the platform to help us improve the user experience.
• Functional Cookies: Storing user preferences such as game settings, preferred language, and login details for a more convenient return experience.
• Security Cookies: Helping detect fraudulent activity, suspicious login attempts, and cyberattacks on your account.

7Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and maxim8's privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our data protection team via email [email protected] with the subject line "Personal Data Rights Request". We will process your request within 30 business days.

8International Data Transfers

In operating the maxim8 platform, your personal data may need to be transferred to or accessed from countries outside Malaysia, particularly for server hosting, technical support and international payment processing purposes.

When such data transfers occur, maxim8 ensures that:

• The recipient country provides a level of data protection adequate to or equivalent with Malaysia's PDPA.
• Appropriate data transfer agreements have been signed with recipient parties, including standard contractual clauses covering personal data protection.
• Appropriate technical and organisational measures are in place to protect data during and after transfer.
• Data transfers are carried out only when necessary and to the extent required for service purposes only.

9Children's Data

The maxim8 platform is strictly for individuals aged 18 years and above only. We do not knowingly collect, store, or process personal data from children or individuals under the age of 18.

An age verification process (KYC) is carried out during registration and upon the first withdrawal request to ensure no underage users access our platform. If we discover that personal data of an individual under 18 has been collected inadvertently, we will:

• Immediately suspend the account in question while an investigation is conducted.
• Deleting all related personal data as soon as possible.
• Returning any funds that may remain in the account through the appropriate method.
• Reporting the case to the relevant authorities where required.

If you have information that a child is using the maxim8 platform, please contact us immediately at [email protected].

10Privacy Policy Amendment

Maxim8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform improvements. Any significant changes will be communicated to members via:

• In-platform notification on maxim8 upon next login.
• Notification email to the email address registered in your account.
• Updates are reflected on the "Last Updated" date at the top of this page.

Your continued use of the maxim8 platform after the effective date of any amendments constitutes your acceptance of the latest version of this Privacy Policy. We encourage you to review this page periodically to stay informed on how we protect your information.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the maxim8 Data Protection Officer (DPO) through the following channels:

We are committed to resolving every query and complaint fairly and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Personal Data Protection Department or the relevant regulatory authority.