max855 Privacy Policy – Your Data, Our Responsibility

1. Identity of the Data Controller

The data controller responsible for personal data collected through the max855 Platform (accessible at max855.asia) is the licensed operator of max855, operating under international gaming authority oversight. For all data privacy enquiries, please contact us via the details set out in Section 13 of this Privacy Policy.

References to "max855", "we", "us", or "our" in this Privacy Policy refer to the max855 platform operator. References to "you" or "your" refer to any individual who accesses the Platform, registers an Account, or otherwise interacts with max855 services.

2. Categories of Personal Data We Collect

max855 collects the following categories of personal data, depending on how you interact with the Platform:

max855 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where strictly required under anti-money-laundering or responsible gaming obligations and only to the extent permitted by applicable law.

3. How We Collect Personal Data

max855 collects personal data through the following means:

• Direct interactions: Data you provide when registering an Account, completing KYC, making deposits or withdrawal requests, contacting support, or responding to promotions.
• Automated technologies: When you use the Platform, we automatically collect Technical Data using cookies, server logs, and similar tracking technologies. See Section 6 for more detail.
• Third-party sources: max855 may receive data from identity verification providers, payment processors, fraud detection services, and analytics partners, where you have consented to those third parties sharing data or where max855 has a legitimate interest or legal obligation to verify information.

4. Purposes for Processing and Legal Basis

max855 processes your personal data for the following purposes, each supported by a legal basis:

• Account registration and management — necessary for the performance of our contract with you.
• Identity verification (KYC) — compliance with our legal and regulatory obligations under international gaming authority licensing conditions and applicable anti-money-laundering frameworks.
• Processing deposits and withdrawals — necessary for the performance of our contract with you.
• Fraud prevention and security monitoring — legitimate interests of max855 and our players to maintain a secure Platform.
• Customer support — necessary for the performance of our contract with you and legitimate interests in resolving disputes and improving services.
• Responsible gaming compliance — legal obligation and our legitimate interest in promoting player welfare.
• Marketing communications — where you have given explicit consent, or where we have a legitimate interest in communicating with existing Account holders about offers relevant to their use of max855. You may withdraw consent for marketing at any time through Account Settings.
• Platform analytics and improvement — legitimate interests in understanding how players use max855 in order to improve the product.
• Legal and regulatory compliance — compliance with applicable laws, regulations, and regulatory requests.

5. Data Sharing with Third Parties

max855 does not sell your personal data. We share personal data only in the following circumstances:

5.1 Service Providers

max855 shares data with third-party service providers who process data on our behalf under binding data processing agreements. These providers include:

• Identity verification and KYC service providers
• Payment processors and e-wallet operators (including Touch 'n Go, Boost, GrabPay, DuitNow, and banking partners such as Maybank, CIMB, and Public Bank)
• Gaming software licensors (including Evolution Gaming, Pragmatic Play, PG Soft, and others providing games on the Platform)
• Fraud detection and cybersecurity service providers
• Customer support platform providers
• Cloud hosting and infrastructure providers

5.2 Regulatory and Legal Obligations

max855 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by applicable law, court order, or our licensing obligations. We will notify you of any such disclosure where we are legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of max855's business, personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change and provided an opportunity to close your Account before the transfer takes effect.

6. Cookies and Tracking Technologies

max855 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to understand how players interact with max855 — which pages are most visited, where players encounter errors, and how the Platform is navigated. Data is aggregated and anonymised where possible.
• Functional Cookies: Used to remember your preferences such as language, display settings, and last login device.
• Marketing Cookies: Used to deliver relevant promotional content and to measure the effectiveness of max855 marketing communications. These are only deployed where you have consented.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform but may affect certain features and personalisation.

7. Data Retention

max855 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Account data: Retained for the duration of the Account and for a minimum of 5 years following Account closure, in accordance with our licensing obligations and applicable anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• KYC verification documents: Retained for a minimum of 5 years following Account closure.
• Customer support communications: Retained for 3 years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn, plus 12 months for audit purposes.

Following the expiry of the applicable retention period, max855 will securely delete or anonymise your personal data unless retention is required by a specific legal obligation.

8. International Data Transfers

max855 is a platform serving Malaysian players. Some of our third-party service providers — including gaming software licensors and cloud infrastructure providers — may process data outside Malaysia. Where personal data is transferred internationally, max855 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into agreements with data recipients;
• Transfer only to recipients in jurisdictions with adequacy decisions or equivalent data protection standards; or
• Binding corporate rules where the recipient is a group company of a max855 affiliate.

You may request details of the specific safeguards in place for any particular international transfer by contacting max855 support.

9. Your Data Rights

As a max855 player, you have the following rights in respect of your personal data. These rights may be subject to limitations under applicable law:

• Right of Access: You may request a copy of the personal data max855 holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that max855 restrict processing of your data in certain circumstances, for example while we investigate a data accuracy dispute.
• Right to Data Portability: Where processing is based on your consent or on contract, you may request a machine-readable copy of your personal data for transfer to another provider.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, max855 will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time through Account Settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, contact max855 support via live chat or email. Requests will be acknowledged within 5 business days and resolved within 30 calendar days.

10. Children's Privacy

The max855 Platform is strictly for adults aged 21 and above. max855 does not knowingly collect personal data from individuals under the age of 21. If max855 becomes aware that an Account has been registered by a person under 21, the Account will be suspended immediately, all Funds will be held pending investigation, and the individual's data will be deleted in accordance with applicable requirements. If you believe a minor has registered on max855, please contact us immediately via live chat or email.

11. Security Measures

max855 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS encryption for all data in transit between your device and max855 servers;
• Encryption at rest for all stored personal and financial data;
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their role;
• Two-factor authentication requirements for all staff accessing production systems;
• Regular security audits and penetration testing of the Platform;
• Automated fraud and anomaly detection on all login, deposit, and withdrawal events;
• Data backup and recovery procedures to ensure continuity.

No system is entirely impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, max855 will notify affected players without undue delay in accordance with applicable legal requirements.

12. Changes to This Privacy Policy

max855 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. Where changes are material — meaning they affect how we use your personal data in a way that may impact your privacy interests — max855 will notify you by email to your registered address and via an in-Platform notification at least 14 days before the changes take effect. The updated Privacy Policy will always be accessible at max855.asia/privacy-policy with the effective date prominently stated. Your continued use of the Platform after the effective date of any update constitutes acceptance of the updated policy.

13. Contact Us & Complaints

For all privacy-related enquiries, requests to exercise your data rights, or complaints regarding max855's data handling practices, please contact our support team:

• Live Chat: Available 24/7 via the chat widget on max855.asia. This is the fastest channel for most enquiries.
• Email: support@max855.asia — for formal written requests and document-heavy matters. Responses within 2–4 hours; formal data rights requests addressed within 30 calendar days.

If you are not satisfied with how max855 has addressed your privacy concern, you may escalate your complaint to the relevant data protection authority or gaming regulatory body under whose jurisdiction max855 operates. max855 will provide details of the applicable supervisory authority upon request.