1. Data Controller
maxwinmy, operating the Platform at maxwinmy.club, is the data controller responsible for the personal data of Players. References to "maxwinmy", "we", "us", or "our" in this Privacy Policy refer to the operator of the maxwinmy Platform.
For any data protection enquiries, Players may contact our designated data protection point of contact via the details set out in Section 14 of this Policy.
2. Personal Data We Collect
maxwinmy collects personal data that is necessary for the operation of the Platform, delivery of gaming services, compliance with regulatory obligations, and protection of the integrity of the Platform. The categories of personal data we collect include:
2.1 Registration and Identity Data
- Full legal name as it appears on your government-issued identity document.
- Date of birth (for age verification purposes — players must be 21 or older).
- Residential address, including postcode and state within Malaysia.
- Email address and mobile phone number.
- Username chosen during registration.
2.2 Identity Verification (KYC) Data
- Copy of government-issued identity document (MyKad, passport, or equivalent).
- Proof of address documentation where required.
- Source of funds documentation in cases requiring enhanced due diligence.
2.3 Financial Data
- Payment method details (e-wallet IDs for Touch n Go eWallet and Boost; masked bank account numbers for FPX, Maybank2u, CIMB Clicks, Public Bank, and bank transfers).
- Transaction history: deposit amounts, withdrawal requests, dates, and status.
- Wallet balance and Bonus Fund credits.
2.4 Gaming Activity Data
- Game types played (slots, live casino, sportsbook, Toto 4D, Sic Bo).
- Wager history: selections, stakes, outcomes, and settlement records.
- Session durations and login timestamps.
- Responsible gaming settings activated on your Account.
2.5 Technical and Usage Data
- IP address and approximate geolocation derived from IP.
- Device type, operating system, browser type, and version.
- Platform usage patterns: pages visited, features accessed, time on page.
- Error logs and technical diagnostic data.
2.6 Communications Data
- Records of live chat communications with our support team.
- Email correspondence between you and maxwinmy.
- Records of formal complaints and their resolution.
3. How We Collect Your Data
maxwinmy collects personal data through the following means:
- Direct collection: Information you provide during Account registration, KYC verification, deposit and withdrawal transactions, and communications with our support team.
- Automated collection: Technical data collected automatically when you access and use the Platform, including via cookies and similar tracking technologies (see Section 9).
- Third-party collection: Identity and financial verification data received from licensed KYC service providers, payment processors, and fraud prevention services engaged by maxwinmy to support its compliance obligations.
4. How We Use Your Personal Data
maxwinmy processes your personal data for the following purposes:
- Account management: Creating and maintaining your maxwinmy Account, verifying your identity, processing login authentication, and enabling you to use all Platform features.
- Service delivery: Processing Wagers, settling bets, crediting winnings, and managing your MYR Wallet including deposits and withdrawals.
- Regulatory compliance: Meeting obligations under our operating licence, including anti-money-laundering (AML) checks, KYC verification, age verification (21+), and reporting requirements to licensing authorities.
- Fraud and integrity protection: Detecting and preventing fraudulent activity, multiple Account creation, bonus abuse, collusion, match-fixing, and other prohibited conduct as defined in our Terms & Conditions.
- Responsible gaming: Monitoring gaming activity for indicators of problem gambling, applying responsible gaming limits you have set, and contacting you where our monitoring systems flag a concern.
- Customer support: Responding to queries, resolving complaints, and providing assistance with Account-related matters.
- Platform improvement: Analysing aggregated usage data to identify and improve areas of the Platform experience, fix technical issues, and develop new features.
- Marketing communications: Sending promotional communications about maxwinmy offers and features, where you have provided consent to receive such communications. You may opt out at any time via your Account settings or by contacting support.
5. Legal Basis for Processing
maxwinmy processes your personal data under the following legal bases:
- Contractual necessity: Processing required to perform the contract between you and maxwinmy — including Account creation, game delivery, and payment processing — is lawful as it is necessary to fulfil the terms of your agreement with us.
- Legal obligation: Processing required for compliance with applicable laws and our licensing obligations, including AML, KYC, age verification, and regulatory reporting.
- Legitimate interests: Processing for fraud prevention, Platform security, and integrity protection, where our legitimate interests in operating a safe and compliant gaming platform are not overridden by your rights.
- Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6. Data Sharing and Disclosure
maxwinmy does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
- Payment processors: Touch n Go eWallet, Boost, FPX gateway operators, and Malaysian banking partners, for the purpose of processing deposits and withdrawals.
- KYC and AML service providers: Licensed identity verification and anti-money-laundering screening services engaged to support our compliance obligations.
- Game content providers: Game studios whose titles are integrated into the maxwinmy Platform may receive session-level data necessary to deliver and audit game outcomes. Such providers operate under data processing agreements with maxwinmy.
- Regulatory and law enforcement authorities: Where required by our operating licence, a court order, or a lawful request from a regulatory or law enforcement authority in any applicable jurisdiction.
- Professional advisers: Legal, accounting, and auditing advisers engaged by maxwinmy, where disclosure is necessary for the purpose of obtaining professional advice.
All third parties with whom maxwinmy shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific engagement.
7. International Data Transfers
maxwinmy primarily operates in and for the Malaysian market. However, some of the service providers and licensing-related systems used by maxwinmy may involve processing personal data outside of Malaysia. Where personal data is transferred internationally, maxwinmy implements appropriate safeguards — including contractual data processing agreements — to ensure that your data receives a level of protection consistent with this Privacy Policy and applicable data protection requirements.
8. Data Retention
maxwinmy retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following retention principles:
- Active Account data: Retained for the duration of your Account relationship with maxwinmy and for a minimum of five (5) years following Account closure, in compliance with AML record-keeping obligations.
- KYC and identity documents: Retained for a minimum of five (5) years following the end of the customer relationship, as required under applicable AML regulations.
- Transaction records: Retained for a minimum of five (5) years for regulatory and audit purposes.
- Support communications: Retained for a minimum of two (2) years following the resolution of the relevant matter.
- Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to evidence the withdrawal of consent.
Data that is no longer required for any legitimate purpose is securely deleted or anonymised.
9. Cookies and Tracking Technologies
maxwinmy uses cookies and similar tracking technologies on the Platform for the following purposes:
- Essential cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without affecting Platform functionality.
- Functional cookies: Remember your Platform preferences, such as language settings and responsible gaming configurations.
- Analytics cookies: Collect aggregated, anonymised data about how Players interact with the Platform, used to identify usability issues and improve the experience. maxwinmy uses only privacy-respecting analytics tools.
Non-essential cookies are activated only where you have provided consent. You may manage cookie preferences at any time through your browser settings. Note that disabling essential cookies may impact your ability to use certain Platform features, including Account login.
10. Data Security
maxwinmy implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
- TLS/SSL encryption for all data transmitted between your device and the maxwinmy Platform.
- Encryption of sensitive stored data, including payment credentials and identity documents.
- Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
- Regular security assessments and penetration testing of Platform infrastructure.
- Two-factor authentication available for all Player Accounts.
While maxwinmy takes security seriously and implements industry-standard protections, no online system can guarantee absolute security. Players are responsible for maintaining the security of their own Account credentials and for accessing the Platform only through secure, trusted networks. If you believe your Account has been compromised, contact maxwinmy support immediately.
11. Your Data Rights
Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by maxwinmy:
- Right of access: You may request a copy of the personal data maxwinmy holds about you.
- Right to rectification: You may request correction of inaccurate or incomplete personal data. You can update most Account details directly through your Account settings.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (including AML record-keeping requirements, which may prevent immediate deletion).
- Right to restriction: You may request that processing of your data be restricted in certain circumstances, for example where you contest the accuracy of the data or object to processing on legitimate interest grounds.
- Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that maxwinmy provide your personal data in a structured, commonly used format.
- Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes. You may opt out of marketing communications at any time via your Account settings.
- Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please contact the maxwinmy support team using the details in Section 14. maxwinmy will respond to verified data rights requests within 30 days. We may request proof of identity before processing a data rights request to ensure we are responding to the correct individual.
12. Minors
The maxwinmy Platform is strictly intended for use by individuals aged 21 and above. maxwinmy does not knowingly collect or process personal data from minors. Age verification is a mandatory step in the Account registration and KYC process. If maxwinmy becomes aware that personal data has been collected from a person under the minimum age, the Account will be immediately closed and the data will be deleted, subject to any applicable legal retention obligations. If you believe a minor has registered an Account on the maxwinmy Platform, please contact our support team immediately.
13. Amendments to This Policy
maxwinmy reserves the right to update this Privacy Policy at any time. The current version will always be published on this page with the effective date noted at the top of the document. Where amendments are material, maxwinmy will use reasonable efforts to notify registered Players via their registered email address. Continued use of the Platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms.
14. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by maxwinmy, please contact our support team through the following channels:
- Live Chat: Available 24/7 via the chat interface on the maxwinmy Platform.
- Email: [email protected]
Please include your registered Account username and a clear description of your request in all correspondence. maxwinmy is committed to handling all data protection enquiries with promptness and confidentiality.