Max389 Privacy Policy – Malaysian User Data Protection

At max389, we believe trust is the foundation of every good relationship between a platform and its users. This Privacy Policy is designed to give you a clear and honest overview of how your personal information is handled when you use the platform. max389.vin.

This document applies to all users who register, browse, or use any services provided by max389, including our website, mobile app, and customer support channels. By using our platform, you agree to the practices described in this policy.

This Privacy Policy is issued by max389 and applies to all personal information collected through our platform. "Personal information" means any information that can be used to identify you directly or indirectly — including your name, email address, phone number, payment details, and in-platform activity data.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. Every data processing activity we carry out has a valid legal basis — whether based on your consent, contractual necessity, legal obligation, or our legitimate interests as a platform operator.

• This policy covers all max389 channels: website, iOS app, Android app, and live chat.
• This policy does not cover third-party websites or services that you may access through links on our platform.
• If you are under 18 years of age, you are not permitted to use our platform and we do not knowingly collect data from minors.

We collect information from you in several ways — directly when you register or use our services, and automatically through industry-standard tracking technologies.

We never collect sensitive information such as your medical details, religious beliefs, or political views. The information we collect is limited to what is necessary to operate the platform safely and efficiently.

Every piece of information we collect is used for clear and legitimate purposes. Below is the complete list of data processing purposes at max389:

• Account Management: Creating and maintaining your user account, including the login process and two-factor authentication (2FA).
• Payment processing: Facilitating deposits and withdrawals securely using your preferred payment methods.
• Identity Verification (KYC): Verifying your identity to comply with anti-money laundering legal requirements.
• Platform security: Detecting and preventing fraudulent activity, duplicate accounts, and unauthorised use.
• Customer support: Responding to inquiries, resolving disputes, and providing technical support to you.
• Responsible gaming: Monitoring gaming patterns to identify users who may need assistance or gaming limits.
• Service communications: Sending important notifications about your account, promotions you qualify for, and platform updates.
• Platform improvements: Analysing usage data in aggregate and anonymised form to improve the user experience.

The security of your personal information is a responsibility we take very seriously. max389 implements multiple layers of technical and organisational protection to keep your data safe at all times.

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard protocols. You can see the padlock icon in your browser's address bar as confirmation.
• Encrypted data storage: Sensitive information such as passwords and bank account numbers are stored in encrypted form on our servers — no employee can view your password in its original form.
• Two-factor authentication (2FA): We offer additional protection through OTP verification via SMS or an authenticator app every time you log in from a new device.
• 24/7 Monitoring: Our security team monitors platform activity around the clock to detect any unauthorised access or suspicious activity.
• Regular security audits: Our systems undergo regular penetration testing and security audits by independent third parties to ensure no vulnerabilities are exposed.
• Internal access restrictions: Only staff who require access to specific data to carry out their duties are granted permission — the principle of "least privilege" is strictly upheld.

Max389 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. However, there are limited situations where we may need to share your data with others:

• Payment service providers: Transaction information is shared with trusted payment processors (such as FPX, Touch 'n Go, and local banks) solely to complete your transactions.
• Gaming service providers: Minimum game data required is shared with our game software providers to ensure a smooth and fair gaming experience.
• Legal authorities: We will disclose information when required by Malaysian law, such as complying with court orders or investigations by lawful authorities.
• Fraud prevention: In cases involving serious fraud, we may share relevant information with authorities or other platforms in the industry for mutual protection purposes.

All third parties we work with are bound by strict data protection agreements and are not permitted to use your information for any purpose other than those specified in those agreements.

Like most modern websites, max389 uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly.

• Essential cookies: Required for core platform functions such as maintaining your login session. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting data on how you use the platform — for example, the most frequently visited pages. This data is used in aggregate and anonymised form for platform improvements.
• Functional cookies: Saving your preferences such as language, display settings, and last-used account for your convenience.
• Analytics cookies: Helping us understand overall platform usage patterns through internal analytics tools.

You can manage your cookie settings through your internet browser at any time. However, disabling certain cookies may affect your experience on the max389 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal information we hold about you:

• Right to access: You may request a copy of all personal information we hold about you.
• Right to correction: If your information is inaccurate or out of date, you have the right to request that we update it.
• Right to deletion: Under certain circumstances, you may request that we delete your personal information — subject to our legal obligations to retain certain records.
• Right to restrict processing: You may request that we temporarily suspend the processing of your data under certain circumstances.
• Right to withdraw consent: You may withdraw your consent to consent-based data processing at any time.
• Right to file a complaint: You have the right to file a complaint with Malaysia's Department of Personal Data Protection if you believe your privacy rights have been violated.

Max389 only retains your personal information for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law.

• Active account data: Retained for the duration your account is active and for 5 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for 7 years in accordance with Malaysian accounting and tax legal requirements.
• KYC Data: Retained for 5 years after account closure in accordance with AMLA (Anti-Money Laundering Act) requirements.
• Technical logs: Retained for 90 days before being automatically deleted.
• Customer support records: Retained for 2 years after the case is resolved.

Once the retention period expires, your data will be securely deleted or converted into an anonymised form that cannot be used to identify you.

Max389 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons.

When significant changes occur, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice on the platform's home page for at least 7 days.
• Sending notifications to registered users via email for changes that materially affect their privacy rights.

We encourage you to review this page periodically. Continued use of the platform after changes are published indicates your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please do not hesitate to contact us.

• Live Chat: Available 24/7 — the fastest way to get help, with a response time of under 2 minutes.
• Privacy Email: [email protected] — include "Privacy Enquiry" in your email subject line for faster handling.
• Response time: We are committed to responding to all privacy-related inquiries within 14 business days.

For more information about your rights under Malaysia's PDPA, you may visit the official website of the Department of Personal Data Protection Malaysia. Also refer to our FAQ page for answers to frequently asked questions.