Privacy Policy
— maxwin303

This Privacy Policy is issued by maxwin303 ("we", "us", "our", "the Platform"), the online casino and sports betting platform operated at https://maxwin303.cam. maxwin303 is the data controller responsible for personal data collected through this website and all services available on it.

This policy applies to all visitors, registered players, and users of the maxwin303 Platform, including individuals accessing the site from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia. It covers all personal data collected through account registration, gameplay, transactions, customer support interactions, and general platform use.

By using the maxwin303 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this policy, please discontinue use of the Platform and contact us to have your account and associated data managed in accordance with your rights under Section 11.

Throughout this Privacy Policy, the following definitions apply:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, or online identifiers.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. maxwin303 is the data controller for data collected on this Platform.
• "Data Processor" — A third party that processes personal data on behalf of the data controller under a formal data processing agreement.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of your personal data for a stated purpose.
• "Cookies" — Small text files placed on your device by the Platform for the purposes described in Section 9.
• "KYC" — Know Your Customer. The identity verification process conducted by maxwin303 before processing withdrawals and in compliance with anti-money laundering obligations.

maxwin303 collects the following categories of personal data from players and users:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond identity photographs required for KYC purposes. Where such data is incidentally disclosed during a support interaction, it will be treated with heightened confidentiality.

maxwin303 collects personal data through the following channels:

• Direct Registration: When you create a maxwin303 account, you voluntarily provide your name, date of birth, email address, mobile number, and other registration details;
• KYC Submission: When you complete identity verification, you submit copies of government-issued identification documents, proof of address, and payment method ownership confirmation;
• Transactions: Deposit and withdrawal transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and other payment channels generate financial records associated with your account;
• Platform Use: Your activity on the Platform — games played, bets placed, pages visited, and features used — is automatically logged by our systems;
• Support Interactions: When you contact our support team via live chat or email, the content of those communications is recorded;
• Cookies and Tracking Technologies: As described in Section 9, certain technical data is collected automatically through cookies and similar tools when you access the Platform.

maxwin303 processes your personal data for the following specific purposes:

• Account Creation & Management: To register your account, verify your identity, maintain your account profile, and communicate account-related information;
• Service Delivery: To enable you to access and use all features of the Platform, including games, sports betting markets, and promotional offers;
• Transaction Processing: To process deposits and withdrawals via your chosen Malaysian payment method and maintain accurate financial records in MYR;
• Regulatory Compliance: To meet our obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and responsible gambling obligations — including age verification to confirm players are aged 21 and above;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account compromise, collusion, and other prohibited conduct;
• Customer Support: To respond to your enquiries, resolve disputes, and provide ongoing assistance through our 24/7 live chat and email support team;
• Platform Improvement: To analyse usage patterns, identify technical issues, and develop and improve our games, features, and user experience;
• Responsible Gambling: To monitor gaming behaviour for signs of problem gambling and to administer self-exclusion, deposit limit, and cool-off requests;
• Marketing Communications: With your consent, to send you information about promotions, bonuses, and new features relevant to your interests. You may withdraw this consent at any time.

maxwin303 processes personal data on the following legal bases, depending on the activity:

• Contractual Necessity: Processing that is necessary to fulfil our obligations under the Terms & Conditions agreed with you at the point of registration — including account management, transaction processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable AML, KYC, responsible gambling, and other regulatory obligations — including age verification (21+ requirement) and suspicious transaction reporting;
• Legitimate Interests: Processing necessary for maxwin303's legitimate interests in fraud prevention, platform security, and service improvement, where those interests are not overridden by your fundamental rights and freedoms;
• Consent: For optional activities such as marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

maxwin303 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's existence, plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for financial audit and regulatory compliance purposes;
• Support Communications: Retained for a minimum of two (2) years from the date of the interaction, or longer if the communication relates to an unresolved dispute;
• Marketing Consent Records: Retained for the duration of the consent plus one (1) year following withdrawal, as evidence of consent management;
• Technical Logs: Session and access logs are typically retained for a period of twelve (12) months for security monitoring and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

maxwin303 does not sell, rent, or trade your personal data. We share data only in the following limited and controlled circumstances:

• Payment Service Providers: We share the minimum necessary financial data with payment processors — including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX member banks (Maybank, CIMB, Public Bank, Hong Leong), and other approved channels — strictly for the purpose of processing your deposit or withdrawal;
• Identity Verification Partners: KYC documents may be processed by third-party identity verification services operating under formal data processing agreements with maxwin303;
• Game Studio Technology Partners: Anonymised or pseudonymised gameplay data may be shared with licensed game technology partners for game performance monitoring. No personally identifiable information is shared with game studios;
• Regulatory Authorities: Where required by applicable law, maxwin303 may disclose personal data to Bank Negara Malaysia, the Royal Malaysia Police (PDRM), financial intelligence units, or other competent authorities without prior notice to the affected individual;
• Legal Proceedings: Where required by court order, subpoena, or equivalent legal process, maxwin303 may disclose personal data to relevant parties;
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of maxwin303's assets, personal data held by maxwin303 may be transferred to the successor entity, subject to equivalent privacy protections.

maxwin303 uses cookies and similar tracking technologies to operate the Platform effectively, improve your user experience, and gather analytical insights. The table below describes the categories of cookies we use:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the Platform's core functionality, including your ability to log in and place bets. Disabling fraud prevention cookies may result in additional security checks being applied to your account.

The maxwin303 Platform primarily serves players in Malaysia and processes data within secure data infrastructure. However, as an international online gaming platform, some data processing operations — including cloud hosting, game engine operations, and fraud prevention services — may involve the transfer of personal data to servers or service providers located outside Malaysia.

Where such transfers occur, maxwin303 ensures that appropriate safeguards are in place to protect the personal data being transferred. These safeguards include:

• Contractual protections in the form of Standard Contractual Clauses or equivalent data processing agreements with receiving entities;
• Transfers only to jurisdictions assessed as providing an adequate level of data protection;
• Technical security measures — including encryption — applied to data in transit and at rest.

As a data subject, you hold the following rights in relation to the personal data maxwin303 holds about you. To exercise any of these rights, contact us as described in Section 15.

maxwin303 is strictly an adults-only platform. Consistent with our Terms & Conditions, all players must be at least 21 years of age to register and use the Platform. We do not knowingly collect personal data from individuals under the age of 21.

Age verification is enforced at the point of registration and through our KYC process. Where maxwin303 discovers that personal data has been collected from a person under the age of 21, we will immediately close the associated account, forfeit any balance derived from prohibited use, and securely delete the data unless retention is required for regulatory purposes.

If you are a parent or guardian and believe that a minor has created an account on maxwin303, please contact our support team immediately so that appropriate action can be taken.

maxwin303 implements a range of technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). Data stored at rest is encrypted using AES-256 or equivalent standards;
• Access Controls: Access to personal data within maxwin303 is restricted on a strict need-to-know basis. Staff and contractors with data access undergo background screening and are bound by confidentiality obligations;
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts. Internal administrative access to player data systems requires multi-factor authentication;
• Penetration Testing: Our platform and infrastructure undergo regular third-party security assessments to identify and remediate vulnerabilities;
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify affected individuals without undue delay in accordance with applicable law.

While we apply industry-standard security measures, no online platform can guarantee absolute security. You play an important role in protecting your account by using a strong, unique password, enabling 2FA, and not sharing your login credentials with any other person.

maxwin303 reserves the right to update this Privacy Policy at any time. Material changes — meaning changes that significantly affect the nature of data processing or your rights — will be communicated to registered players via the email address associated with their account, or through a prominent notice on the Platform, prior to the change taking effect.

Non-material updates (such as corrections of typographical errors or clarifications that do not alter the substantive meaning of the policy) may be made without prior notification. The "Effective Date" at the top of this document will always reflect the date of the most recent version.

We encourage you to review this Privacy Policy periodically. Continued use of the Platform following the effective date of any update constitutes your acknowledgement of the revised policy.

For any questions, concerns, or formal requests relating to this Privacy Policy or the personal data maxwin303 holds about you, please contact our team through the following channels:

• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line, along with your registered account username and a clear description of your request.
• Live Chat: Available 24/7 on the Platform. Our support agents can direct privacy requests to the appropriate team and provide an initial acknowledgement within minutes.

maxwin303 will acknowledge all formal privacy requests within two (2) business days. We aim to provide a substantive response, or to fulfil the request, within thirty (30) calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.