Max389 Privacy Policy — Your Personal Data Protection

1 Introduction & Scope of This Privacy Policy

Welcome to the max389 Privacy Policy. This document explains in detail how we — max389 and its operating companies — collect, process, store and protect your personal information when you use our platform, accessible via max389.fun and any related applications.

We understand that your trust is our most valuable asset. That is why we have written this privacy policy in clear, plain language — not confusing legal jargon. Our goal is for you to know exactly what happens to your information from the moment you register to the time you use the platform.

This Privacy Policy applies to all registered members, website visitors, and any individual who interacts with the max389 platform in any capacity. By using our platform, you agree to the collection and use of information as described herein.

2 Types of Personal Data We Collect

Max389 collects various categories of information depending on how you use our platform. Below is a full breakdown of the data we collect:

We only collect data that is genuinely necessary for the stated purposes. This "data minimisation" principle ensures we do not gather excessive information that is irrelevant to the platform's operations.

3 How We Use Your Personal Data

Every piece of data we collect is used for a specific and legitimate purpose. max389 uses your information for the following purposes:

• Account management: Creating and maintaining your account, processing registration, verifying identity through the KYC process, and enabling secure login to the platform.
• Transaction processing: Handling deposits, withdrawals, and all other financial activities securely using authorised payment providers.
• Platform security: Detecting and preventing fraud, money laundering, unauthorised access, and any suspicious activity that could compromise the platform or other members.
• Service improvements: Analysing usage patterns to improve platform performance, introduce new features, and ensure a better user experience over time.
• Service communications: Sending important account-related notifications, security updates, transaction confirmations, and any critical information relevant to your use of the platform.
• Legal compliance: Fulfilling obligations under Malaysian law, including the PDPA, anti-money laundering (AML) policies, and other applicable regulatory requirements.
• Responsible gaming: Monitoring wagering patterns to identify early signs of problem gambling and offering appropriate support or limits.

4 Data Sharing & Disclosure

Max389 does not sell, rent, or trade your personal data to any external party for their own commercial purposes. However, there are limited situations where we may share your data with certain parties:

• Payment service providers: Required financial information is shared with licensed payment processors such as FPX, Touch 'n Go, GrabPay and Boost solely to process your transactions.
• Identity verification providers: For KYC purposes, we work with accredited identity verification partners bound by strict confidentiality agreements.
• Legal authorities: We will disclose required information to Malaysian government authorities or legitimate investigative bodies where mandated by law or court order.
• Technology partners: Technical infrastructure providers such as cloud services and analytics platforms may process limited technical data on our behalf, subject to strict data processing agreements.

All third parties we share data with are contractually bound to handle your information at the same or higher level of protection as our own standards.

5 Data Storage & Security Measures

Your data security is a responsibility we take extremely seriously. max389 implements multiple layers of technical and organisational protection to ensure your data remains safe at all times:

• 256-bit SSL encryption: All data transmitted between your device and max389 servers is protected by military-grade encryption that cannot be easily broken.
• Hashed password storage: Your account password is never stored in plain text — we use a secure one-way hashing algorithm so that even our own staff cannot read your password.
• Role-based access control: Only specifically authorized staff may access member data, and every access is recorded in a monitored audit log.
• 24/7 security monitoring: Our systems are continuously monitored by a security team to detect any unauthorised access attempts or cyber threats.
• Retention period: Active account data is retained for as long as your account remains active. Following account closure, financial and identity data is retained for 7 years as required by Malaysian law, after which it is permanently deleted.

6 Cookies & Tracking Technologies

Max389 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as session management and security. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Helping us understand how members use the platform — which pages are visited most frequently, where they spend the most time, and how they navigate between pages. This information is used for platform improvements.
• Functional Cookies: Saving your preferences such as language, display settings, and other personal preferences so you do not need to reset them each time.
• Analytics Cookies: We use internal analytics tools to understand usage trends in an aggregated and anonymous manner, helping us make better product decisions.

You can manage your cookie preferences through your browser settings at any time. However, disabling essential cookies may affect platform functionality and your login experience.

7 Your Rights Under This Privacy Policy

As a max389 member and under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our privacy team via support email or live chat. We will process your request within 30 business days.

8 Children's Data Protection

The max389 platform is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

Should we discover or be notified that personal data of a minor has been collected without our knowledge, we will take immediate action to:

• Suspending the related account immediately while an investigation is conducted.
• Deleting all personal data associated with the account as promptly as possible.
• Notifying a parent or legal guardian if their contact information is available.
• Reporting the incident to the relevant authorities where required by law.

If you believe a child may have registered an account on our platform, please contact our support team immediately so we can take appropriate action without delay.

9 Links to Third-Party Websites

The max389 platform may contain references or links to third-party websites in certain contexts. It is important for you to understand that this Privacy Policy applies exclusively to the max389 platform.

Max389 is not responsible for the privacy practices, content, or policies of any third-party websites you may visit. We encourage you to read the privacy policy of each website you visit separately. Your safety outside the max389 platform is your own responsibility.

10 Changes to This Privacy Policy

Max389 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending notifications to your registered email to inform you of important changes.
• In the event of highly significant changes, we may request your renewed consent upon your next login.

We encourage you to review this page regularly. Your continued use of the max389 platform after any amendments are published will be considered your acceptance of the updated privacy policy.

11 Contact Our Privacy Officer

If you have any questions, concerns, or wish to exercise your privacy rights, the max389 privacy team is here to help. We are committed to addressing every inquiry seriously and in a timely manner.

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available directly on the platform, 24 hours a day, 7 days a week
• Response Time: Privacy enquiries are answered within 5–10 business days; urgent cases within 48 hours

For issues related to responsible gaming or self-exclusion, we also encourage you to visit our Responsible Gaming page for further resources and assistance.