Your privacy matters to us. This Policy explains exactly what personal data MaxWinMY collects, why we collect it, how we protect it, and the rights you hold over your own information as a player on our platform.
These cards highlight the key principles of our data practices. The full legal text follows below.
All personal data collected by MaxWinMY is stored using 256-bit AES encryption at rest and TLS 1.3 in transit. We do not store payment card numbers on our systems — all transaction processing is handled directly by our approved Malaysian payment partners.
MaxWinMY does not sell, rent, or trade your personal information to third-party marketers under any circumstances. Data sharing is limited strictly to service providers who support the operation of the platform — and all such parties are contractually bound to our data protection standards.
You have the right to access, correct, export, and request deletion of your personal data at any time. Requests are processed within 30 days. Account closure does not automatically erase all data — certain records are retained for legal and regulatory compliance obligations.
Transaction data processed via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and Malaysian bank transfers is handled in strict compliance with Bank Negara Malaysia guidelines and applicable financial data protection requirements.
We only collect data that is necessary for a defined, lawful purpose — account management, identity verification, fraud prevention, responsible gambling compliance, and customer support. We do not collect data "just in case" — every data field has a documented purpose and a defined retention period.
In the unlikely event of a data breach that affects your personal information, MaxWinMY will notify affected players within 72 hours of becoming aware of the incident, in accordance with applicable data protection regulations. We maintain an incident response plan that is reviewed and tested regularly.
This Privacy Policy ("Policy") sets out how MaxWinMY ("we", "us", "the Company", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "the Player", "the User") who access, register on, or otherwise interact with the MaxWinMY online gaming platform at https://maxwinmy.cam and any associated mobile or web-based applications.
MaxWinMY is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia and any other relevant international data protection frameworks that apply to our operations.
By creating an account, making a deposit, or continuing to use the MaxWinMY platform after this Policy has been made available to you, you acknowledge that you have read and understood how we process your personal data as described herein. If you have any questions or concerns about our data practices, please refer to Section 16 (Contact Us) for how to reach our Data Protection team.
The following terms carry the meanings assigned to them throughout this Policy:
MaxWinMY collects personal data that is necessary to provide our gaming services, comply with regulatory obligations, prevent fraud, and deliver a personalised and responsible player experience. The categories of data we collect are as follows:
| Category | Examples | Collected When |
|---|---|---|
| Registration Data | Full name, date of birth, email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru) | Account registration |
| Identity / KYC Data | MyKad number and image, passport number and image, selfie photograph, proof of address | KYC verification (prior to first withdrawal) |
| Financial Data | Bank account name and number (for FPX / DuitNow withdrawals), e-wallet account reference (Touch 'n Go, Boost, GrabPay), deposit and withdrawal amounts, transaction timestamps | Deposit and withdrawal processing |
| Gaming Activity Data | Games played, wager amounts, bet history, win/loss records, bonus usage, session durations | Continuous, during active play |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone | Each platform visit and session |
| Communications Data | Live chat transcripts, support email content, dispute correspondence, survey responses | When you contact support or provide feedback |
| Responsible Gambling Data | Self-imposed deposit limits, cooling-off periods, self-exclusion requests, responsible gambling assessment responses | When player-protection tools are activated |
We do not collect or store full payment card numbers, CVV codes, or sensitive authentication credentials for any payment instrument. Payment processing is handled exclusively by our approved payment partners operating within Malaysia's regulated financial infrastructure.
MaxWinMY collects personal data through the following means:
MaxWinMY processes your personal data on the following legal grounds, as applicable to each processing activity:
MaxWinMY uses the personal data we collect for the following specific, documented purposes:
MaxWinMY does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the following limited circumstances, and only to the minimum extent necessary:
Given that all MaxWinMY transactions are conducted in Malaysian Ringgit (MYR) through Malaysian payment infrastructure, the following specific provisions apply to the handling of payment-related personal data:
MaxWinMY uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, prevent fraud, and — where you have consented — personalise your experience. The categories of cookies we use are as follows:
You may manage your cookie preferences through your browser settings. Disabling functional or analytics cookies will not affect your ability to access the core gaming features of MaxWinMY, though some personalisation features may not function as intended.
MaxWinMY retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.
As a data subject under the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable international data protection frameworks, you hold the following rights with respect to your personal data held by MaxWinMY:
Request a copy of the personal data we hold about you, along with information on how it is being used and with whom it has been shared.
Request correction of any inaccurate or incomplete personal data we hold about you. Minor corrections (e.g., contact details) can be made directly through your account dashboard.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations described in Section 10.
Request that we limit the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
Request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible.
Withdraw consent to processing activities that rely on consent — such as marketing emails — at any time through your account notification settings, without affecting prior lawful processing.
To exercise any of the rights listed above, please submit a written request to our Data Protection contact at [email protected] (plain text — not a clickable link). We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) calendar days. Where a request is complex or we have received a high volume of requests, we may extend this period by a further thirty (30) days, with written notice provided to you.
We may need to verify your identity before processing a data rights request to ensure we are not disclosing your personal data to an unauthorised third party.
MaxWinMY implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:
While we employ robust technical and organisational security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying MaxWinMY immediately if you suspect any unauthorised access to your account.
MaxWinMY's gaming services are strictly intended for adults aged21 and above. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes an age declaration requirement, and our KYC verification process includes mandatory age verification against government-issued identification documents for all Players prior to their first withdrawal.
If MaxWinMY becomes aware that personal data has been collected from a person under the age of 21— whether through the registration process, KYC verification, or any other means — the relevant account will be immediately suspended, all associated funds will be frozen, and the personal data of the underage individual will be securely deleted as soon as practically possible following completion of any required investigation or legal process.
If you are a parent or guardian and have reason to believe that a person under the age of 21 in your care has created a MaxWinMY account, please contact our support team immediately at [email protected] (plain text — not a clickable link).
MaxWinMY's primary data infrastructure is hosted within secure data centres. Some of our third-party service providers — including game software providers, fraud detection services, and cloud infrastructure vendors — may operate from jurisdictions outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to the Malaysian PDPA, MaxWinMY implements appropriate safeguards, which may include:
By using the MaxWinMY Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia as described above, subject to the safeguards outlined in this Section.
MaxWinMY reserves the right to update or amend this Privacy Policy at any time. Material changes — including changes to the categories of data we collect, the purposes for which data is processed, or your rights under this Policy — will be communicated to registered Players by email to the address on file, and through prominent notice displayed on the Platform, at least seven (7) days before the changes take effect.
Minor updates — such as clarifications, typographical corrections, or changes to reflect updates in applicable law that do not alter the substance of how we handle your data — may be made without advance notice. The "Last Reviewed" date at the top of this page will be updated to reflect the date of the most recent revision.
Your continued use of the MaxWinMY Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should discontinue use of the Platform and may request account closure as described in our Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 11, or wish to raise a complaint about MaxWinMY's data practices, please contact our Data Protection team through the following channels:
For questions related to the full scope of your agreement with MaxWinMY, including account rules and financial terms, please review our Terms & Conditions.
For guidance on responsible gambling tools available on the Platform, including deposit limits, cooling-off periods, and self-exclusion, please visit our Responsible Gambling page.
Our support team is available24/7 and can connect you with our Data Protection team for any privacy-related enquiry. For players aged 21 and above.
For players aged 21 and above only. Play responsibly. If gambling is affecting you, call Talian Kasih at 15999.