Privacy Policy

Privacy Policy Maxwin138
Your Data Is Fully Protected

At maxwin138, your privacy is not merely a legal obligation — it is a core value. This document clearly explains how we collect, use, store and protect the personal information of every Malaysian member.

Last Updated: 1 January 2026 Malaysia PDPA Compliance 256-bit SSL Bahasa Malaysia Version
SSL 256-bit Encryption
PDPA Full Malaysia Compliance
0 Third-Party Data Sales
24/7 Security Monitoring
01

Introduction – maxwin138's Commitment to Your Privacy

Maxwin138 values the privacy of every member. This privacy policy outlines our practices regarding the collection, use, disclosure and protection of personal information you provide to us when using the maxwin138 platform.

This policy is drafted in compliance with Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices on data privacy. By using the maxwin138 platform, you agree to the collection and use of your personal information as described in this policy.

Maxwin138 does not sell, rent, or trade members' personal information to any third party for their own marketing purposes. This is our commitment to each and every one of our 500,000+ Malaysian members who trust us.

Note: This privacy policy applies to all users of the maxwin138 platform, including website visitors, registered members, and former members. If you do not agree with the terms set out here, please discontinue use of our platform.

02

Information We Collect

Maxwin138 collects various types of information depending on how you interact with our platform. We only collect what is strictly necessary to deliver the best possible service to you.

2.1 Information You Provide Directly

Type of Information Purpose of Collection Legal Basis
Full name (as per MyKad) Identity verification (KYC) PDPA s.6
Malaysia phone number OTP verification & communications Consent
Email address Account notifications & promotions Consent
Date of birth Minimum age verification of 18 years PDPA s.6
MyKad / Passport Copy Full KYC identity verification Regulations
Payment method information Deposit & withdrawal processing Contract

2.2 Information Collected Automatically

  • Server log data – IP address, browser type, operating system, pages visited and access times.
  • Device data – phone model, operating system version, unique device identifier.
  • Usage data – games played, session duration, betting patterns (for abnormal activity detection purposes only).
  • Cookie data – user preferences, login sessions and website analytics data (see Section 6).
  • Location data – general location based on IP address for operating region verification.
03

How We Use Your Information

Maxwin138 uses your personal information solely for legitimate and transparent purposes. We will not use your data for any purpose not stated here without your prior consent.

3.1 Primary Purposes of Use

  • Managing your account – registration, identity verification, balance management and transaction history.
  • Processing financial transactions – deposits via Touch 'n Go, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks, RHB Now), Boost and ShopeePay; as well as withdrawal of winnings.
  • Delivering platform services – providing access to all games including slots, Live Casino, football betting (EPL, Malaysia Super League), BWF badminton, poker, blackjack, roulette and e-sports.
  • Legal compliance verification – ensuring compliance with PDPA, anti-money laundering (AML) requirements and Know Your Customer (KYC) obligations.
  • Account security – to detect and prevent fraud, unauthorised access and suspicious activity.
  • Service communications – transaction notifications, security alerts and important policy updates.
  • Customer support – handling your complaints, enquiries, and requests for assistance.

3.2 Secondary Purposes (with your consent)

  • Sending promotional information, bonus offers, and the latest maxwin138 news via email or WhatsApp — only if you have opted in to receive marketing communications.
  • Personalising your gaming experience based on your play patterns and preferences.
  • Aggregated data analysis (with no personally identifiable information) for platform improvement.

Your Rights: You may withdraw your consent to marketing communications at any time by contacting the maxwin138 support team or through your account settings. Withdrawing consent will not affect your core account services.

04

Third-Party Information Sharing

Maxwin138 does not sell or trade members' personal information to third parties. However, there are certain situations where we need to share information in order to deliver our services or meet our legal obligations:

4.1 Trusted Service Providers

Maxwin138 works with third-party service providers who assist us in platform operations. These providers are granted limited access to your information strictly to the extent necessary for their specific tasks, and are bound by strict confidentiality agreements:

  • Payment processor – to process deposits and withdrawals via accepted Malaysian payment methods.
  • Identity verification service provider – for KYC processing and age verification.
  • Cloud computing infrastructure provider – for secure data storage and processing.
  • Game software provider – the minimum information required to operate the games you play.

4.2 Legal Requirements

Maxwin138 may disclose your personal information to the relevant authorities if required by Malaysian law, including:

  • Investigations related to fraud, money laundering or financial crime.
  • A court order or valid legal process in Malaysia.
  • Requests from legitimate Malaysian law enforcement agencies.

Our Commitment: Maxwin138 never has and never will sell, rent or share members' personal information with advertising companies, data brokers or any third party for their own marketing purposes.

05

Data Security & Protection Measures

Maxwin138 continually invests in security infrastructure to ensure our members' personal and financial data is protected to the highest possible standard. Security is not a one-time project — it is an ongoing process that we take seriously every single day.

5.1 Technical Security Measures

  • 256-bit SSL/TLS Encryption – all data transmitted between your device and maxwin138's servers is fully encrypted.
  • Stored data encryption — sensitive information such as payment details and verification documents is encrypted in our database.
  • Two-Factor Authentication (2FA) – available and recommended for all member accounts.
  • 24/7 security monitoring – our security team monitors suspicious activity around the clock.
  • Regular penetration testing – our systems are regularly tested by independent security experts to identify vulnerabilities.
  • Strict access controls – only staff who require access for their specific duties may view member information, and all access is logged.

5.2 Organisational Security Measures

  • Regular security awareness training for all maxwin138 staff.
  • Documented and tested security incident response procedures.
  • Binding non-disclosure agreements (NDAs) for all staff and contractors.
  • Regular internal and external security audits.

Important Reminder: While maxwin138 takes all reasonable measures to protect your data, no security system is 100% impenetrable. You also play an important role – never share your account password with anyone, including maxwin138 staff, who will never ask for it.

06

Cookies & Tracking Technologies

Maxwin138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help the platform remember your preferences and session.

6.1 Types of Cookies We Use

  • Essential Cookies – Required for core platform operations, including login, game sessions, and security. These cookies cannot be disabled.
  • Optional Cookies – Saves your language settings, preferred betting denominations and display preferences.
  • Analytics Cookies – Helps us understand how members use the platform for improvement purposes. This data is collected in aggregate and is not personally identifiable.
  • Session Cookies – temporary cookies that are automatically deleted when you close your browser.

6.2 Managing Cookies

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the maxwin138 platform and prevent you from logging in or using certain features.

A cookie notice will be displayed on your first visit to maxwin138 to obtain your consent for non-essential cookies.

07

Your Privacy Rights as a Malaysian Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the maxwin138 privacy policy, you hold the following rights regarding your personal information. Maxwin138 is committed to respecting and facilitating the exercise of all these rights:

Right of Access

You have the right to request a copy of the personal information we hold about you. Requests will be processed within 21 business days.

Right to Rectification

You have the right to request the correction of any inaccurate or incomplete personal information we hold about you.

Right to Restrict Processing

You may request that we restrict how we use your data in certain circumstances permitted by law.

Right to Object to Marketing

You may opt out of all marketing communications from maxwin138 at any time, with no impact on your account.

Right to Data Portability

You may request a copy of your data in a structured, machine-readable format for transfer to another service provider.

Right to Complain

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, contact the maxwin138 Privacy Officer at privacy@maxwin138.im or via our customer support Live Chat. We will respond within 14 business days.

08

Data Retention & Deletion

Maxwin138 retains your personal information only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory requirements.

8.1 Data Retention Period

  • Active account data – retained for as long as your account remains active on maxwin138.
  • Financial transaction records – retained for a minimum of 7 years in accordance with Malaysian financial legislation and AML regulations.
  • Identity verification documents (KYC) – retained for 5 years after account closure in accordance with regulatory requirements.
  • Customer support communication logs – retained for 3 years for historical reference and dispute resolution.
  • Technical server log data – retained for 90 days for security and debugging purposes.
  • Analytical cookie data – deleted after 2 years.

8.2 Account Deletion

Upon request for account closure, maxwin138 will delete or anonymise your personal information within 30 days, except for data that must be retained to fulfil legal obligations as stated above. Retained data will be stored securely and will not be used for any other purpose.

09

Privacy & Child Protection

Maxwin138 strictly prohibits use of the platform by individuals under 18 years of age. This platform is for adults only, and we take child protection extremely seriously.

  • Maxwin138 does not knowingly collect, store or process any personal information from individuals under the age of 18.
  • If we discover that data belonging to anyone under the age of 18 has been collected, we will immediately delete that information and close the account in question.
  • Parents or guardians who believe their child may have registered an account on maxwin138 are urged to contact us immediately at support@maxwin138.im.

To Parents: Maxwin138 recommends that parents install parental control software on shared devices to prevent children from accessing gambling sites, including maxwin138. We fully support all efforts to protect minors in the digital space.

10

Privacy Policy Amendments

Maxwin138 reserves the right to update or modify this privacy policy from time to time to reflect changes in our practices, legal requirements, or service improvements.

  • Any material changes to this policy will be communicated to members via their registered email or an in-platform notification at least 14 days before taking effect.
  • The "Last Updated" date at the top of this page will always reflect the date of the latest version of this privacy policy.
  • Your continued use of the maxwin138 platform after any changes take effect constitutes your acceptance of the updated policy.
  • We encourage you to revisit this page periodically to stay informed about how we protect your information.
11

Contact the Maxwin138 Privacy Officer

If you have any questions, concerns or requests regarding maxwin138's privacy policy or how we handle your personal information, please contact us through the following channels:

  • Privacy Email: privacy@maxwin138.im
  • General Support Email: support@maxwin138.im
  • Live Chat: Available 24/7 on the maxwin138 platform
  • WhatsApp: Available via maxwin138's official support number

We are committed to responding to all privacy-related enquiries within 14 working days. For more urgent matters concerning your account security, please use the Live Chat channel for an immediate response.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia Personal Data Protection Department (JPDP) under the Personal Data Protection Act 2010.

Why Your Data Is Safe at Maxwin138

Six layers of protection we put in place to safeguard the privacy of every Malaysian member

256-bit SSL Encryption

All data transmitted between your device and maxwin138 servers is encrypted using the same standard employed by Malaysia's leading banks, including Maybank and CIMB. No third party can intercept these communications.

Malaysia PDPA Compliance

The maxwin138 privacy policy is designed in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to all data protection principles prescribed under Malaysian law.

Strict Access Control

Only maxwin138 staff who require access for their specific duties are permitted to view member information. All access is logged and regularly audited to ensure there is no misuse.

No Data Sales

Maxwin138 never has and never will sell, rent or share members' personal information with advertising companies or data brokers. Your data belongs to you – not to us as a business asset.

24/7 Monitoring

The maxwin138 security team continuously monitors the platform and infrastructure to detect any suspicious activity, intrusion attempts, or security anomalies before they escalate into issues.

Privacy Rights Respected

Maxwin138 makes it straightforward for members to exercise their privacy rights – from data access to the right to deletion. Requests are handled promptly and we are always transparent about how your data is used.

Join maxwin138 with Full Confidence

Your data is protected. The games are fair. Payouts are fast. Join over 500,000 Malaysian members who play with peace of mind at maxwin138 — a platform that truly respects your privacy.

PDPA Compliant 256-bit SSL No Data Selling 24/7 Support
256-bit SSL
Malaysia PDPA
24/7 Support
TNG & FPX
Pay in 3 Minutes
Officially Licensed
Bahasa Melayu