Max855 Privacy Policy — Personal Data Protection for Malaysian Members

1Introduction & Policy Scope

max855 is an online entertainment and gaming platform operating in Malaysia. We take the privacy and personal data protection of our members extremely seriously. This Privacy Policy applies to all personal data we collect through the max855.ws website, mobile app, and all services we provide.

This document applies to all users who visit, register, or use any max855 services, whether as a guest or a registered member. If you are using the platform on behalf of another person, you are responsible for ensuring that person has reviewed and agreed to this Privacy Policy.

2Types of Personal Data We Collect

Max855 collects various categories of personal data depending on how you interact with our platform. Below is a table of data categories and example information collected.

We not collect sensitive category data such as health information, criminal records, or political views unless required by applicable law or with your explicit consent.

3How We Collect Data

Max855 collects your personal data through a number of different channels:

• Account Registration: Information you provide when registering a new account, including your name, email, and Malaysian phone number.
• KYC Verification: Identity documents uploaded during the account verification process, such as a copy of your MyKad or passport.
• Financial Transactions: Information processed when you make a deposit via Touch 'n Go, GrabPay, DuitNow, FPX, or any other Malaysian payment method.
• Platform Usage: Data generated automatically when you play slots, live casino, table games, or place sports and e-sports bets.
• Support Communications: Information you share when interacting with our customer support team via live chat, WhatsApp, or email.
• Cookies & Similar Technologies: Technical data collected automatically through session cookies, preference cookies, and website analytics tools.

4Purposes for Using Personal Data

Max855 uses collected personal data solely for the following purposes, and nothing beyond that:

• Account Management: Creating, verifying, and managing your member account, including the KYC process required by law.
• Transaction Processing: All deposits and withdrawals in Malaysian Ringgit (RM) are processed securely and efficiently through verified payment channels.
• Customer Service: Responding to enquiries, resolving complaints, and providing technical support to members.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, or platform abuse.
• Legal Compliance: Fulfilling legal and regulatory obligations applicable in Malaysia, including reporting to relevant authorities where required.
• Service Improvement: Analysing usage patterns in aggregate (not at an individual level) to improve the platform, introduce new games, and enhance the user experience.
• Marketing Communications: Sending promotional information, bonuses, and exclusive offers — only to members who have consented to receive such communications.

5Data Sharing With Third Parties

max855 does not sell, rent, or trade members' personal data to any third party for marketing purposes. However, under certain limited circumstances, we may share data with the following parties:

• Payment Service Providers: Payment gateways such as Touch 'n Go, DuitNow, and FPX processors that need to process your financial transactions. They receive only the minimum information required.
• Game Providers: Gaming software providers (such as Pragmatic Play, NetEnt, Microgaming) that supply slots, Live Casino, and table games on our platform — limited to game session data only.
• Malaysian Authorities: Law enforcement agencies, tax authorities, or Malaysian regulatory bodies where required by a valid court order or legislation.
• Auditors & Professional Advisors: Audit, legal, or compliance firms bound by strict professional confidentiality obligations.

All data sharing with third parties is governed by data processing agreements that prohibit them from using your data for any purpose other than those specified in the respective agreement.

6Security & Data Protection

Max855 invests seriously in security infrastructure to protect your personal data. Our technical and organisational security measures include:

• 256-bit SSL Encryption for all data transmitted between your browser and our servers.
• Data Encryption at Rest for all sensitive data stored in our databases.
• Two-Factor Authentication (2FA) for staff accounts and internal administrative access.
• 24/7 Security Monitoring by a dedicated cybersecurity team that monitors for anomalies and intrusion attempts.
• Penetration Testing conducted periodically by independent third parties to identify and address system vulnerabilities.
• Staff Security Training mandatory for all staff who handle member data.

7Data Retention Period

Max855 does not retain personal data longer than necessary for the stated purposes. Our standard retention periods are as follows:

• Active account records: For as long as your account remains active and in use on the platform.
• Financial transaction records (MYR): Minimum 7 years from the date of transaction, in line with Malaysian tax legislation requirements.
• KYC Documents: For the duration the account is active, plus 5 years after account closure for compliance purposes.
• Game and betting logs: 2 years from the date of last activity.
• Support communication records: 3 years from the date of last interaction.
• Technical data and access logs: 90 days for security and troubleshooting purposes.

Once the retention period has lapsed, data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to you.

8Cookies & Tracking Technologies

Max855 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting aggregated, anonymised information about how you use the platform (pages visited, time spent) to help us improve our services.
• Functional Cookies: Saves your preferences such as display settings and game choices to make your experience smoother on future visits.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect platform functionality and prevent you from logging in or completing transactions.

9Your Rights Over Your Personal Data

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you have the following rights, which you may exercise at any time:

• Right of Access: Requesting a copy of all personal data we hold about you in a readable format.
• Right to Rectification: Request the correction of any personal data that is inaccurate, outdated, or incomplete.
• Right to Erasure: Request the deletion of your personal data when it is no longer necessary, subject to legal retention obligations.
• Right to Data Portability: Receive your data in a structured, machine-readable format for transfer to another platform.
• Right to Object: Object to the processing of your data for direct marketing purposes at any time, without providing any reason.
• Right to Withdraw Consent: Withdraw consent previously given for specific processing purposes, without affecting the lawfulness of processing carried out prior to the withdrawal.

10Children's Privacy

Max855 is an entertainment platform that strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that we have collected personal data from an individual under the age of 18, we will immediately take the following steps:

• Closing the account in question immediately and without notice.
• Deleting all related personal data from our systems within 48 hours.
• Returning any account balance (if applicable) to the rightful account holder through the designated method.

If you believe someone under the age of 18 has registered an account on max855, please contact us immediately at privacy@max855.ws so that prompt action can be taken.

11Changes to This Privacy Policy

Max855 reserves the right to review and update this Privacy Policy from time to time to reflect changes in practices, technology, legal requirements, or the way we handle personal data.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a prominent change notice on the platform's main page for a minimum of 7 days.
• Sending email notifications to all registered members at least 14 days before material changes take effect.

Your continued use of the max855 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data.

12Contact Our Privacy Officer

Max855 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with PDPA 2010 and this Privacy Policy. You may reach our Privacy Officer through:

• Privacy Email: privacy@max855.ws (for data rights requests and privacy complaints)
• General Support Email: support@max855.ws
• Live Chat: Available 24/7 on the max855 platform — ask to be connected to the privacy team

If you believe that max855 has violated your privacy rights and we have failed to resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) which is the enforcement body for the PDPA 2010 in Malaysia.