max885 Privacy Policy

This Privacy Policy ("Policy") is published by max885 ("max885," "we," "us," or "our") and applies to all personal data collected from individuals ("you," "Player," or "User") who access, register with, or use the max885 online gaming platform, including the website at max885.org and any associated mobile interfaces ("Platform").

max885 is committed to handling your personal data responsibly, transparently, and in accordance with the standards established under internationally recognised data protection frameworks. By registering an account or using the max885 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside the max885 Terms and Conditions. Capitalised terms used but not defined in this Policy have the meanings given to them in the Terms and Conditions.

When you register a max885 account, we collect the following personal information as part of the account creation and Know Your Customer (KYC) verification process:

• Full legal name as it appears on your government-issued identification.
• Date of birth (for age verification — players must be 21 or older).
• Malaysian IC number, passport number, or equivalent government-issued identification number.
• Residential address, including postcode and state within Malaysia.
• Email address and mobile phone number.
• Username selected at registration.

In order to process deposits, withdrawals, and comply with anti-money-laundering requirements, max885 collects the following financial data:

• Payment method type (e.g., Touch n Go eWallet, Boost, FPX bank transfer).
• Transaction amounts, dates, and references.
• FPX bank account details or e-wallet identifiers (as required for withdrawal verification).
• Betting and gaming activity, including stake amounts, game selections, and outcomes.

max885 automatically collects certain technical data when you access the Platform, including:

• IP address and approximate geolocation.
• Device type, operating system, and browser version.
• Session duration, pages visited, and features used.
• Login timestamps and access logs.
• Cookie identifiers and similar tracking technologies (see Section 8).

When you contact max885 customer support via live chat, email, or any other channel, we retain records of those communications — including the content of messages, timestamps, and resolution outcomes — for quality assurance, training, and dispute resolution purposes.

max885 collects personal data through the following means:

• Directly from you: when you register, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or update your account preferences.
• Automatically: through the use of cookies, web beacons, server logs, and similar technologies when you access and interact with the Platform.
• From third-party payment providers: transaction confirmation data received from Touch n Go eWallet, Boost, FPX, and other payment processors used to verify financial transactions.
• From identity verification services: where third-party KYC or age-verification service providers are used to confirm the authenticity of identification documents submitted during account registration or at withdrawal.

max885 uses the personal data we collect for the following purposes:

• Account management: to create, maintain, and secure your max885 account, verify your identity, and enforce the single-account policy.
• Age verification: to confirm that you meet the 21+ minimum age requirement before allowing access to any real-money gaming features.
• Transaction processing: to process deposits and withdrawals via your selected payment method, and to maintain accurate financial records.
• Gaming services: to operate the Sportsbook, live casino, slots, and arcade features; to record gaming activity; and to calculate and credit winnings.
• Promotions and bonuses: to determine eligibility for and administer promotional offers, and to track wagering requirements associated with bonuses.
• Anti-fraud and AML compliance: to detect and prevent fraudulent activity, money laundering, match-fixing, and other prohibited conduct.
• Responsible gaming: to monitor player behaviour for signs of problem gambling and to administer self-exclusion, deposit limit, and cool-off period requests.
• Customer support: to respond to enquiries, resolve disputes, and maintain records of interactions.
• Platform improvement: to analyse usage patterns and technical data for the purpose of improving Platform performance, user experience, and game offering.
• Marketing communications: where you have consented, to send promotional communications about max885 offers, new game launches, and platform updates via email or SMS.

max885 processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform the agreement between you and max885 under the Terms and Conditions — including account creation, identity verification, payment processing, and gaming service delivery.
• Legal obligation: processing necessary for compliance with anti-money-laundering requirements, age verification obligations, and other applicable regulatory frameworks.
• Legitimate interests: processing undertaken for the purpose of fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: for marketing communications and non-essential cookies, where your explicit consent has been obtained and may be withdrawn at any time.

max885 does not sell or rent personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and proportionate:

• Payment processors: Touch n Go eWallet, Boost, FPX banking partners, and other payment providers involved in processing your transactions.
• Game content providers: licensed game studios (such as Pragmatic Play, PG Soft, and similar providers) where technical integration requires the passing of session or account tokens for game delivery.
• Identity and KYC verification services: third-party services used to verify the authenticity of identity documents submitted during account verification.
• Regulatory and law enforcement authorities: where disclosure is required by applicable law, court order, or regulatory authority.
• Anti-fraud service providers: services used to detect and prevent fraudulent activity, including IP intelligence and device fingerprinting providers.
• Technology service providers: cloud hosting, analytics, and customer support platform providers operating under contractual data processing agreements with max885.

All third parties to whom max885 discloses personal data are contractually required to implement appropriate technical and organisational measures to protect that data and to use it only for the specified purpose.

max885 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting obligations. In particular:

• Account registration and KYC data is retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for up to three (3) years following the resolution of the relevant interaction.
• Technical and usage data collected via cookies and server logs is retained for a maximum of thirteen (13) months from the date of collection, unless a longer retention period is required for fraud investigation purposes.

Upon the expiry of the applicable retention period, max885 will securely delete or anonymise personal data such that it can no longer be attributed to an individual player.

max885 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. The categories of cookies used by max885 are as follows:

• Strictly necessary cookies: required for the Platform to function, including session management, login authentication, and fraud detection. These cookies cannot be disabled.
• Performance and analytics cookies: used to understand how players interact with the Platform, identify usability issues, and measure the effectiveness of features. These cookies collect aggregated, anonymised data.
• Functionality cookies: used to remember your preferences, such as language settings and display preferences, to personalise your Platform experience.
• Marketing cookies: used, where consent has been given, to track the effectiveness of max885's promotional campaigns. These cookies do not identify you personally.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access the core features of the max885 Platform.

max885 implements a range of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the max885 Platform.
• Encrypted storage of passwords using industry-standard hashing algorithms.
• Role-based access controls limiting internal access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Automatic session timeouts on idle accounts to prevent unauthorised access from unattended devices.

Notwithstanding the above measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, max885 will notify affected players as required under applicable data protection standards.

As a player with a max885 account, you are entitled to exercise the following rights in relation to your personal data:

• Right of access: the right to request a copy of the personal data max885 holds about you.
• Right to rectification: the right to request correction of inaccurate or incomplete personal data.
• Right to erasure: the right to request deletion of your personal data, subject to any overriding legal obligations to retain it.
• Right to restriction: the right to request that processing of your personal data be restricted in certain circumstances.
• Right to data portability: the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: the right to object to processing based on legitimate interests, including direct marketing.

To exercise any of the above rights, please contact max885 customer support with your account details and the specific right you wish to exercise. max885 will respond within thirty (30) calendar days of receiving a verifiable request.

The max885 Platform is strictly intended for adults aged 21 and above. max885 does not knowingly collect personal data from individuals under the age of 21. If max885 becomes aware that personal data has been collected from an individual who is under the minimum age requirement, that account will be closed immediately and all associated data will be deleted. If you have reason to believe that a minor has registered a max885 account, please contact our support team immediately.

max885 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. When material changes are made to this Policy, the updated version will be published on the max885 Platform with a revised effective date. Where changes materially affect the way your data is used, max885 will notify active account holders via email or through a notification within the Platform. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of those changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by max885, please contact our Data Protection team via the following channels. Our team is available 24 hours a day, seven days a week.

Email: [email protected]

max885 aims to acknowledge all data-related correspondence within 48 hours and to provide a substantive response within thirty (30) calendar days of receipt.