Privacy Policy — max855my

max855my ("we", "us", "the Operator", "the Platform") is committed to protecting the privacy and personal data of all users who access and use our website athttps://max855my.cam ("the Platform"). This Privacy Policy ("Policy") sets out how max855my collects, processes, stores, shares, and protects personal information provided by or collected about registered Members and visitors to the Platform.

This Policy applies to all individuals who interact with max855my, including players who have registered accounts, visitors who browse the Platform without registering, and individuals who contact our customer support team. By accessing the Platform or registering an account, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions in relation to data protection matters, this Policy shall prevail.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data. This includes name, email address, date of birth, Malaysian identity card number, phone number, IP address, and payment account details.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transmission, deletion, or any combination thereof.
• "Data Controller" — max855my, as the entity that determines the purposes and means by which personal data is processed.
• "Data Subject" — the individual to whom personal data relates; in the context of this Platform, this is primarily the registered Member or visitor.
• "Third-Party Processor" — any external entity engaged by max855my to process personal data on our behalf under a written data processing agreement, including payment service providers and KYC verification partners.
• "Cookies" — small text files placed on your device by the Platform or third-party services that assist in site functionality, analytics, and session management.
• "KYC" — Know Your Customer, the identity and address verification process required before certain account functions (particularly withdrawals) are activated.

max855my collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarises the categories of data we collect, the specific data points within each category, and the primary reason for collection.

We do not collect special categories of sensitive personal data (such as health information, racial or ethnic origin, political opinions, or biometric data) unless required by law or expressly requested for the purposes of responsible gambling self-assessment. Where such data is voluntarily provided by a Member in the context of a self-exclusion or responsible gambling request, it is handled with enhanced confidentiality protections.

max855my collects personal data through the following channels and methods:

• Direct Submission: Data you provide when completing the registration form, submitting KYC documents, contacting support, completing bonus claim forms, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity logs via server-side logging and analytics tools.
• Payment Processors: Confirmation and reference data returned by payment service providers (including Touch'n Go eWallet, DuitNow, FPX, Boost, Maybank, CIMB, and other integrated payment channels) when you initiate a deposit or withdrawal transaction.
• KYC Verification Partners: Results and verification status data returned by third-party identity verification services engaged to validate submitted documents.
• Cookies and Tracking Technologies: Data collected via session cookies, persistent cookies, and similar tracking technologies as described in Section 9 of this Policy.
• Referal Information: Where you register via a referral link, we record the referring member's identifier to attribute and process the referral bonus. The referring member does not gain access to your personal data.

max855my processes personal data only for specific, identified purposes and one of the following legal bases: (a) performance of a contract; (b) compliance with a legal obligation; (c) legitimate interests pursued by the Operator; or (d) your explicit consent where required.

• Account Creation and Management: To create, maintain, and administer your max855my account, including authentication, account recovery, and profile management.(Basis: contract performance)
• Payment Processing: To facilitate deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other integrated channels, and to process withdrawal requests to verified accounts. (Basis: contract performance)
• KYC and Age Verification: To verify that you are aged 21 or above and that your identity matches the account details provided, in fulfilment of our anti-fraud and responsible gambling obligations. (Basis: legal obligation; legitimate interests)
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity unauthorised account access, money laundering, and other prohibited conduct. (Basis: legitimate interests; legal obligation)
• Customer Support: To respond to your enquiries, resolve complaints, and manage your requests submitted via live chat, email, or other support channels. (Basis: contract performance; legitimate interests)
• VIP Programme Administration: To calculate tier eligibility, apply cashback rates, and credit birthday and referal bonuses based on your verified account activity and turnover figures. (Basis: contract performance)
• Responsible Gambling Monitoring: To monitor betting patterns for indicators of problem gambling behaviour, to enforce self-imposed limits, and to action self-exclusion requests. (Basis: legal obligation; legitimate interests)
• Marketing Communications: To send you promotional emails, bonus notifications, and platform updates where you have opted in to such communications. You may withdraw this consent at any time. (Basis: consent)
• Platform Analytics and Improvement: To analyse aggregated usage data for the purpose of improving Platform performance, game selection, and user experience. (Basis: legitimate interests)

max855my does not sell, rent, or trade personal data. We may share personal data with third parties only in the following limited circumstances:

• Payment Service Providers: Transaction data is shared with relevant payment processors (including Touch 'n Go eWallet, DuitNow, FPX, Boost, Maybank, CIMB, Public Bank, and Hong Leong Bank) solely for the purpose of completing your requested financial transactions.
• KYC and Identity Verification Partners: Identity documents and verification data are shared with our contracted KYC partners for document authenticity checks and age verification processing.
• Game and Content Providers: Certain anonymised technical data (such as session identifiers) may be passed to game providers to support gameplay functionality. No personally identifiable data is shared with game providers beyond what is technically necessary.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or legitimate regulatory request, max855my may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities.
• Fraud Prevention Networks: Where fraud is suspected, relevant account and transaction data may be shared with industry fraud prevention networks and financial institutions to prevent further fraudulent activity.
• Professional Advisors: Legal counsel, auditors, and other professional advisors may access personal data to the minimum extent necessary in the course of providing their services, subject to confidentiality obligations.

max855my retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, and to comply with applicable legal, regulatory, and operational obligations. The following general retention periods apply:

• Active account data (identity, contact, and financial data) is retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, in accordance with applicable anti-money laundering record-keeping requirements.
• KYC documents are retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
• Transaction records including deposit and withdrawal histories are retained for a minimum of seven (7) years for financial audit and regulatory compliance purposes.
• Support communications (live chat logs, email correspondence) are retained for a period of two (2) years from the date of the communication.
• Marketing consent records are retained for the duration of the consent and for one (1) year following withdrawal of consent.
• Technical and log data (IP logs, session data) is generally retained for twelve (12) months unless a longer period is required for the investigation of a specific security incident.

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual. Where deletion is not immediately technically practicable (for example, where data is stored in backup archives), the data will be isolated from active processing until deletion is completed.

max855my implements a multi-layered approach to data security, incorporating technical and organisational measures proportionate to the risk associated with processing personal data in an online gaming environment. Our security measures include, without limitation:

• Encryption in Transit: All data transmitted between your browser or device and our servers is protected by 256-bit TLS/SSL encryption. The Platform operates exclusively over HTTPS.
• Encryption at Rest: Personal data stored in our databases is encrypted at rest. Payment credentials are tokenised and are not stored in plaintext form on our systems.
• Access Control: Access to personal data systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Two-Factor Authentication: Two-factor authentication (2FA) is available for Member accounts and is mandatory for staff accessing internal data management systems.
• Infrastructure Security: Our servers are hosted in secure, access-controlled data centres with redundant power, physical security controls, and continuous monitoring.
• Penetration Testing: We conduct periodic security assessments and penetration testing to identify and remediate vulnerabilities in our infrastructure and application layer.

While we implement robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for ensuring that you log out of your account at the end of each session, particularly when using shared devices. Please notify us immediately at support@max855my.cam if you suspect any unauthorised access to your account.

max855my uses cookies and similar tracking technologies to support Platform functionality, improve user experience, and analyse aggregated usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without significantly impairing your ability to use the Platform.
• Functional Cookies: Enable enhanced functionality such as remembering your language preferences, game lobby display settings, and chat widget state. Disabling these may reduce the convenience of your experience.
• Analytical Cookies: Allow us to understand how Members use the Platform by collecting aggregated, anonymised data on page visits, feature usage, and navigation paths. This data helps us improve the Platform over time.
• Security and Fraud Prevention Cookies: Used to detect and mitigate fraudulent activity, bot traffic, and suspicious login patterns.

You may manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please be aware that blocking strictly necessary cookies will prevent you from logging in to your max855my account and using core Platform features.

As a data subject, you have the following rights in relation to your personal data held by max855my. To exercise any of these rights, please contact our support team via live chat or at support@max855my.cam. We will respond to all verifiable requests within a reasonable timeframe, and in any event within thirty (30) days of receipt.