max855 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how max855 ("the Company", "we", "us", "our"), the operator of the online gaming and sports betting platform at max855.win ("the Platform"), collects, processes, stores, and shares personal data relating to users of the Platform ("you", "your", "the Player"). This Policy applies to all interactions with the Platform, including account registration, login, gaming activity, financial transactions, and communications with our support team.

By registering an account with max855 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to any part of this Policy, you should discontinue use of the Platform and request account closure. This Policy should be read alongside the max855 Terms & Conditions.

2. Data Controller

max855 is the data controller in respect of personal data collected through the Platform. As data controller, max855 determines the purposes and means of processing personal data. Any queries relating to the processing of your personal data, or the exercise of your data rights, should be directed to the max855 support team via the contact details provided in the footer of this page.

3. Personal Data We Collect

max855 collects personal data in several categories depending on the nature of your interaction with the Platform:

• Registration Data: Full legal name, date of birth, gender, nationality, residential address (including postcode, city, state — for Malaysian players this typically includes Kuala Lumpur, Selangor, Penang, Johor, or other states), contact email address, and telephone number.
• Identity Verification Data: Copies of government-issued identification documents (such as MyKad or passport), proof of address documents, and proof of payment method ownership, collected as part of mandatory KYC procedures.
• Financial Data: Deposit and withdrawal transaction records, payment method references (e-wallet identifiers, bank account references), and transaction amounts in MYR. Full payment credentials are not retained by max855 following transaction authorisation.
• Gaming Activity Data: Records of games played, wagers placed, amounts won or lost, bonus usage, session duration, and login/logout timestamps. This data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.
• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, referring URLs, and pages accessed within the Platform. This data is collected automatically via server logs and analytics tools.
• Communications Data: Content of support tickets, live chat transcripts, email correspondence, and any feedback submitted to max855.

4. Legal Basis for Processing

max855 processes personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfil the contract between max855 and the Player, including account creation, game facilitation, payment processing, and support provision.
• Legal Obligation: Processing is required to comply with AML, CTF, KYC, and other regulatory obligations imposed by our licensing authority and applicable law.
• Legitimate Interests: Processing is necessary for the prevention of fraud, the security of the Platform, and the improvement of our services, where such interests are not overridden by your data rights.
• Consent: For certain optional processing activities such as marketing communications, processing is based on your explicit consent, which you may withdraw at any time.

5. How We Use Your Personal Data

max855 uses collected personal data for the following purposes:

• Creating and managing your max855 player account
• Processing deposits, withdrawals, and bonus credits in MYR
• Verifying your identity and age (21+) as required by our licensing obligations
• Detecting and preventing fraud, money laundering, and other unlawful activity
• Monitoring gaming behaviour for responsible gaming safeguard triggers
• Providing customer support and resolving disputes
• Sending transactional communications (account activity, withdrawal confirmations, security alerts)
• Sending promotional communications, subject to your consent and opt-in preferences
• Complying with regulatory reporting obligations to our licensing authority
• Analysing Platform performance and improving user experience on an aggregated, anonymised basis

6. Sharing of Personal Data

max855 does not sell or rent personal data to third parties for marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary and with appropriate safeguards in place:

• Payment Processors: Third-party payment service providers facilitating Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other banking integrations, for the sole purpose of processing transactions.
• Identity Verification Services: Third-party KYC and AML screening providers who assist in verifying identity documents and screening against sanctions and PEP lists.
• Regulatory Authorities: Disclosures required by our licensing authority, law enforcement agencies, or other competent regulatory bodies acting under legal authority.
• Technical Service Providers: Hosting, infrastructure, cybersecurity, and analytics providers who process data on our behalf under binding data processing agreements and are prohibited from using data for their own purposes.

7. Data Retention

max855 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable regulatory and legal obligations. Gaming transaction records, KYC documents, and account data are typically retained for a minimum of five (5) years following account closure, in line with standard AML compliance requirements for licensed gaming operators. Technical and session data is retained for shorter periods unless required for an ongoing investigation or dispute.

8. Cookies and Tracking Technologies

The max855 Platform uses cookies — small text files placed on your device — and similar tracking technologies for the following purposes:

• Essential Cookies: Required for the Platform to function correctly, including session authentication and security features. These cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data on how Players navigate the Platform. This helps us identify areas for improvement. No individually identifiable data is shared with third-party analytics services.
• Preference Cookies: Used to remember your language and display preferences across sessions.

You may manage cookie preferences through your browser settings. Disabling essential cookies may prevent certain Platform features from functioning correctly.

9. Your Data Rights

Subject to applicable law and our regulatory retention obligations, you have the following rights in respect of your personal data held by max855:

• Right of Access: Request a copy of the personal data max855 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where we no longer have a legal basis to retain it.
• Right to Restriction: Request that we limit the processing of your personal data in certain circumstances.
• Right to Object: Object to processing carried out on the basis of legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the max855 support team using the email address in the footer of this page. We will respond to all verified requests within 30 days.

10. Security Measures

max855 implements a range of technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include 256-bit SSL encryption for all data in transit, access controls limiting data access to authorised personnel on a need-to-know basis, regular security assessments, and incident response procedures. In the event of a data breach affecting your personal data, max855 will notify affected Players in accordance with applicable regulatory requirements.

11. Changes to This Policy

max855 reserves the right to update this Privacy Policy at any time. Material changes will be communicated via a notice on the Platform or by email to your registered address prior to the changes taking effect. The effective date at the top of this page reflects the date of the most recent revision. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

12. Contact

For any enquiries relating to this Privacy Policy, the exercise of your data rights, or any concern regarding the handling of your personal information by max855, please contact our support team at the email address displayed in the footer of this page. All privacy-related enquiries will be acknowledged within two business days and handled in strict confidence.