Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is issued by max855 ("Company", "we", "us", "our"), the operator of the online gaming platform accessible at max855.cam (the "Platform"). It describes our practices in relation to the collection, use, storage, disclosure, and protection of personal data submitted by or collected from users ("Player", "User", "you", "your") of the Platform.

max855 respects your privacy and is committed to handling your personal information with care, transparency, and in accordance with applicable data protection principles. By registering an Account, accessing the Platform, or otherwise providing personal information to max855, you acknowledge that you have read and understood this Policy, and that you consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform as a whole. In the event of any conflict between these two documents, the Terms & Conditions shall prevail unless the conflict specifically relates to a data protection matter.

02 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. Examples include your name, email address, phone number, MyKad number, IP address, and payment details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, deletion, or any combination thereof.
• "Data Controller" means max855, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party engaged by max855 to process Personal Data on our behalf, under our instruction.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "KYC Data" means identity verification documents and information collected as part of Know Your Customer compliance procedures, including government-issued identification, proof of address, and payment method verification.
• "Cookies" means small text files stored on your device by the Platform for the purposes of session management, analytics, personalisation, and security.
• "Platform" means the max855 website, mobile web application, and all associated services accessible at max855.cam.

03 Data We Collect

max855 collects Personal Data through several channels. The categories of data we collect and the typical source of each are outlined in the table below:

04 Legal Basis for Processing

max855 processes your Personal Data only where we have a valid legal basis for doing so. The primary legal bases we rely upon are:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and max855, including account registration, transaction processing, identity verification, and the provision of gaming services.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) regulations, and responsible gambling mandates.
• Legitimate Interests: Processing is necessary for the legitimate interests of max855, including fraud prevention, platform security, service improvement, and the protection of our players and staff — provided such interests do not override your fundamental rights and freedoms.
• Consent: For specific processing activities not covered by the above bases — such as the delivery of personalised marketing communications — we will seek your prior consent. You may withdraw consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

05 How We Use Your Data

max855 uses collected Personal Data for the following purposes:

• To create and administer your Player Account on the Platform.
• To verify your identity and age (minimum 21 years) in accordance with KYC obligations.
• To process deposits and withdrawals in MYR via your chosen payment method, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and supported banks.
• To provide, maintain, and improve the gaming services and features available on the Platform.
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct.
• To comply with our legal obligations under applicable gaming regulations and anti-money laundering frameworks.
• To deliver customer support via live chat and email, and to maintain a record of communications for quality and compliance purposes.
• To send transactional notifications, including deposit confirmations, withdrawal updates, and security alerts.
• To send promotional communications, bonus offers, and personalised recommendations — subject to your marketing preferences and applicable opt-in requirements.
• To monitor responsible gambling indicators and apply player protection measures where appropriate, including initiating contact with Players who show signs of problem gambling behaviour.
• To conduct analytics and product development to improve Platform performance, user experience, and feature offerings.
• To respond to enquiries, complaints, or disputes raised by you or a relevant authority.

06 Data Sharing & Disclosure

max855 does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We may, however, share your data with the following categories of recipients under controlled and limited circumstances:

• Payment Service Providers: We share financial data with payment processors — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency network validators — solely to the extent necessary to process your transactions.
• Identity Verification Partners: We may engage third-party KYC service providers to assist in verifying your identity documents. These providers are contractually bound to process your data only for verification purposes.
• Technology & Infrastructure Providers: Hosting, database, analytics, cybersecurity, and communications service providers may process data on our behalf as Data Processors, under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: We will disclose Personal Data to competent authorities where required by law, court order, regulatory direction, or where we have a reasonable belief that disclosure is necessary to prevent fraud, money laundering, or harm to any person.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by max855 may access relevant Personal Data in the course of providing professional services, under obligations of confidentiality.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of max855's assets, your Personal Data may be transferred as part of that transaction. You will be notified in advance of any such transfer that materially affects your privacy rights.

07 Data Retention

max855 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be linked to an individual.

08 Data Security

max855 employs a range of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the Platform is protected using 256-bit SSL/TLS encryption. Stored passwords are hashed using industry-standard cryptographic algorithms and are never stored in plain text.
• Access Controls: Access to Personal Data within max855 is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo regular training and background checks.
• Two-Factor Authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their Accounts. Internal administrative access to systems holding Personal Data also requires multi-factor authentication.
• Security Monitoring: Our infrastructure is continuously monitored for anomalous activity, intrusion attempts, and data exfiltration risks by automated systems and a dedicated security team.
• Incident Response: In the event of a confirmed data breach affecting your rights and freedoms, max855 will notify affected Players and relevant authorities within the timeframes required by applicable law.
• Third-Party Audits: Our security controls are subject to periodic independent assessment to ensure ongoing effectiveness.

09 Cookies & Tracking Technologies

max855 uses cookies and similar tracking technologies (such as pixel tags and web beacons) to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These are essential for the Platform to function correctly. They include session cookies that keep you logged in and security cookies that protect against fraudulent activity. These cannot be disabled.
• Analytics Cookies: These collect aggregated, anonymised data on how Players use the Platform — including which pages are visited most frequently and how long sessions last. This data helps us improve the Platform's content and performance.
• Functional Cookies: These remember your preferences — such as language settings and previously used payment methods — to provide a more personalised experience on return visits.
• Marketing Cookies: With your consent, these track your activity on the Platform to enable more relevant promotional communications and to measure the effectiveness of our marketing campaigns.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may impair the functionality of the Platform. Analytics and marketing cookies may be declined without affecting your core experience.

10 Third-Party Services

The Platform integrates with a number of third-party service providers to deliver its features. This includes payment processors, game content providers, identity verification services, and analytics platforms. Each third-party provider operates under their own privacy policy and is responsible for the data they independently collect from your device or browser.

max855 does not control third-party data collection practices and encourages you to review the privacy policies of any third-party services you interact with through the Platform. Where third parties process Personal Data on our behalf, they do so as Data Processors under binding contractual obligations consistent with this Policy.

The Platform does not contain links to third-party websites unrelated to max855's services.

11 Your Rights as a Data Subject

Subject to applicable data protection law, you hold the following rights in relation to your Personal Data held by max855. You may exercise any of these rights by contacting our support team:

12 Minors & Age Policy

During registration and KYC verification, we take active steps to verify the age of all Players. If we discover or have reason to believe that Personal Data has been collected from a person under 21 years of age, we will promptly:

• Suspend and permanently close the relevant Account.
• Securely delete all Personal Data associated with that Account to the extent permissible under our legal obligations.
• Reverse any deposits and cancel any outstanding withdrawals or bonus balances associated with the Account.

If you are a parent or guardian and believe that your child under 21 may have registered an Account or provided Personal Data to max855, please contact us immediately at [email protected] so that we can take appropriate action.

13 Marketing Communications

With your consent, max855 may contact you with promotional offers, bonus notifications, special events, and other marketing communications relevant to your use of the Platform. These may be delivered by email, SMS, or in-platform notification.

• You may opt in to marketing communications during registration or through your Account settings at any time.
• You may opt out of marketing communications at any time by updating your Account preferences, clicking the unsubscribe link in any marketing email, or contacting our support team directly.
• Transactional notifications — such as deposit confirmations, withdrawal updates, account security alerts, and KYC status updates — are not marketing communications and will continue regardless of your marketing preferences.
• max855 will not send marketing communications to Players who are subject to a self-exclusion or responsible gambling cooling-off period.

14 International Data Transfers

max855 operates a globally distributed infrastructure. In the course of providing the Platform, your Personal Data may be transferred to, stored in, or processed by systems located outside of Malaysia. Where such transfers occur, max855 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections afforded under this Policy.

Safeguards employed for international data transfers include:

• Contractual data processing agreements requiring overseas processors to maintain adequate data protection standards.
• Use of service providers with established, independently audited data security certifications.
• Encryption of data in transit and at rest across all jurisdictions in which data is processed.

15 Policy Changes

max855 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes, we will notify registered Players by email and/or by posting a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page will be revised to reflect the most recent amendment. We encourage you to review this Policy periodically. Continued use of the Platform following notification of any change constitutes your acceptance of the revised Policy.

16 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the max855 Data Protection team using the details below. We will respond to all data-related enquiries within a reasonable timeframe.

If you are not satisfied with max855's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.