Mmaxbet Privacy Policy – Protecting Your Personal Data

1. Personal Data We Collect

Mmaxbet collects various types of personal data from our members for different purposes. We only collect data that is genuinely necessary to deliver our services safely and efficiently. The following are the categories of data we collect:

We do not collect sensitive categories of personal data such as medical information, religious beliefs, or political views unless specifically required by applicable law. All data we collect is directly related to the provision of our betting services to you.

2. How We Use Your Personal Data

The personal data we collect is used solely for legitimate and transparent purposes. mmaxbet never uses your data for purposes beyond what is stated here without obtaining your prior consent.

• Account Management: To create, maintain and manage your account at mmaxbet, including registration processing and identity verification.
• Transaction Processing: To process deposits, withdrawals and any other financial transactions you carry out through our platform.
• Platform Security: To detect, investigate and prevent fraudulent activity, money laundering and any misuse of the platform.
• Legal Compliance: To fulfil reporting and compliance requirements set by the relevant authorities, including KYC and AML (Anti-Money Laundering) obligations.
• Service Communications: To send important notifications regarding your account, transactions, policy changes and security information.
• Service Improvement: To analyse usage patterns on an aggregate (non-individual) basis for the purpose of improving the platform and user experience.
• Marketing (with consent): To send promotional information and special offers, only where you have given consent to receive marketing communications.

3. Data Sharing and Disclosure

Mmaxbet does not sell your personal data to any party. However, in certain limited situations, we may need to share your data with trusted third parties for the purpose of operating our services:

• Payment Processors: Required financial information is shared with payment gateway providers (such as FPX and e-wallet operators) solely to process your transactions. All such providers are bound by strict data protection agreements.
• Technical Service Providers: Our hosting, cybersecurity and technical infrastructure service providers may process your data as part of delivering their services to mmaxbet. They are only permitted to use your data in accordance with our instructions.
• Regulatory Authorities: mmaxbet will disclose data when required by law, court order, or a valid request from a law enforcement agency.
• Identity Verification Providers: Data required for the KYC process is shared with accredited identity verification service providers to ensure compliance with legal requirements.

Every third party we work with is bound by comprehensive confidentiality and data protection agreements. They are not permitted to use your data for any purpose other than the specific services they provide to mmaxbet.

4. Data Security Measures

Mmaxbet continuously invests in high-grade security infrastructure to ensure your personal data is always protected against unauthorized access, disclosure, alteration, or destruction.

• Transit Encryption: All communications between your device and mmaxbet's servers are encrypted using TLS 1.3 protocol with a valid 256-bit SSL certificate.
• Storage Encryption: Sensitive data such as passwords is stored using the bcrypt hashing algorithm, which cannot be decrypted. Financial information is stored in an obfuscated format.
• Internal Access Controls: Only specifically authorised staff may access member personal data, and every access is automatically logged for audit purposes.
• 24/7 Security Monitoring: Our cybersecurity team continuously monitors the platform infrastructure to detect and respond to any threats or suspicious activity.
• Regular Penetration Testing: mmaxbet conducts regular security audits by independent security experts to identify and address any vulnerabilities in our systems.

5. Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights that we fully respect:

To exercise any of the above rights, please contact our data protection team by email at [email protected]. We will process your request within 21 business days as required by the PDPA. In situations requiring additional identity verification, this period may be extended with reasonable notice given to you.

6. Use of Cookies and Tracking Technologies

Mmaxbet uses cookies and similar tracking technologies to enhance user experience and ensure the platform functions properly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: We collect information about how you use the platform to help us understand usage patterns and improve the overall user experience.
• Functional Cookies: Your preferences such as language and display settings are saved to ensure a more personalized experience during each session.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect your ability to access certain features on the mmaxbet platform. mmaxbet does not use third-party cookies for advertising purposes.

7. Data Retention Period

Mmaxbet retains your personal data for as long as your account is active or as long as necessary to provide services to you. Once an account is closed, we may be required to retain certain data for periods stipulated by law:

• KYC and identity verification data is retained for a minimum of 7 years after account closure for AML compliance and legal requirements.
• Financial transaction records are retained for a minimum of 7 years in accordance with tax and financial reporting legal requirements.
• Customer support communication logs are retained for 3 years for reference and dispute resolution purposes.
• Technical and security log data is retained for 1 year for security audit purposes.

Once the mandatory retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

8. Amendments to This Privacy Policy

Mmaxbet reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or the services we offer. Any significant amendments will be communicated to you via your registered email or an in-platform notification at least 14 days before taking effect.

We encourage you to review this page regularly to stay informed about how we protect your data. The date of the most recent amendment is always displayed at the top of this document. Continued use of the mmaxbet platform after any amendment takes effect indicates your acceptance of the revised policy.

9. How to Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding how mmaxbet handles your personal data, we encourage you to contact us directly. We are committed to addressing every privacy enquiry seriously and within a reasonable timeframe.

• Privacy-Specific Email: [email protected] — for data inquiries, access requests, and privacy complaints.
• Live Chat Support: Available 24/7 through the mmaxbet platform for general privacy-related questions.
• General Support: [email protected] — for all other account and service-related inquiries.

Our data protection team will endeavour to respond to all enquiries within 5 business days. For formal data rights requests, the response period is up to 21 business days as required by Malaysia's PDPA.