max88 Privacy Policy

01 Introduction

max88 ("we", "us", "our", "the Company") operates the online casino and sports betting platform accessible at max88.run (the "Platform"). We are committed to protecting the privacy and personal data of all players, visitors, and users ("you", "your") who interact with the max88 Platform.

This Privacy Policy describes how max88 collects, uses, stores, shares, and protects your personal data in connection with your use of the Platform. It also explains the rights available to you under applicable data protection laws and how you can exercise those rights.

This Privacy Policy should be read together with the max88 Terms & Conditions, which govern your use of the Platform. By registering on or using the max88 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

If you have any questions about this Privacy Policy or how max88 handles your personal data, please contact our Data Protection team at the details provided in Section 14.

02 Personal Data We Collect

max88 collects the following categories of personal data in connection with your use of the Platform:

max88 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required for responsible gaming assessments or regulatory compliance purposes.

03 How We Collect Your Data

max88 collects personal data through the following means:

• Direct Interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Technologies: Data collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, and server logs. See Section 7 for full details on our cookie practices.
• Third-Party Sources: Data received from identity verification providers, payment processors (such as GCash and PayMaya), fraud prevention services, and analytics providers, where permitted by applicable law.
• Publicly Available Sources: In limited circumstances, max88 may supplement your profile with data from publicly available sources for identity verification or fraud prevention purposes.

04 How We Use Your Personal Data

max88 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your max88 player account, including processing registrations, verifying identity, and managing account settings.
• Service Delivery: To provide access to casino games, sports betting markets, live dealer games, and all other Platform features and services.
• Payment Processing: To process deposits, withdrawals, and refunds through your chosen payment method, and to maintain accurate financial records.
• Identity Verification (KYC): To verify your identity and age in compliance with applicable regulations, including the 21+ age requirement for online gambling in the Philippines.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the Platform.
• Regulatory Compliance: To comply with applicable laws, regulations, and regulatory directives, including anti-money laundering (AML) obligations and reporting requirements.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance through our support channels.
• Responsible Gaming: To monitor gaming behaviour, identify potential problem gambling indicators, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the features, performance, and user experience of the max88 Platform.
• Legal Claims: To establish, exercise, or defend legal claims in connection with your use of the Platform.

05 Legal Basis for Processing

max88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you, including account management, service delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gaming obligations.
• Legitimate Interests: Processing necessary for max88's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

max88 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your financial transactions.
• Identity Verification Providers: Third-party KYC and age verification services used to confirm your identity and eligibility to use the Platform.
• Fraud Prevention Services: Specialist providers that help max88 detect and prevent fraudulent activity, money laundering, and bonus abuse.
• Technology & Hosting Providers: Cloud infrastructure, data hosting, and platform technology providers who process data on our behalf under strict data processing agreements.
• Game Providers: Licensed game studios and live casino operators whose games are available on the max88 Platform, where necessary for game delivery and dispute resolution.
• Regulatory Authorities: Government agencies, law enforcement bodies, and regulatory authorities where disclosure is required by applicable law or a valid legal order.
• Professional Advisers: Lawyers, auditors, and other professional advisers engaged by max88 in connection with legal, compliance, or business matters, subject to confidentiality obligations.

All third parties with whom max88 shares personal data are required to handle that data in accordance with applicable data protection laws and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

07 Cookies & Tracking Technologies

max88 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display options to personalise your experience on the Platform.
• Analytics Cookies: Collect anonymised data about how players use the Platform, including pages visited, time spent, and navigation paths. This data helps max88 identify areas for improvement.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of max88 marketing campaigns. These are only set with your consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the max88 Platform. For detailed information on the specific cookies used, please refer to our Cookie Notice available on the Platform.

08 Data Retention

max88 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with max88, plus a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements.
• Financial & Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• Identity Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process.
• Communications Data: Support tickets and live chat transcripts are retained for up to two (2) years from the date of the interaction.
• Technical & Usage Data: Retained for up to thirteen (13) months from the date of collection for analytics purposes.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with max88's data disposal procedures.

09 Data Security

max88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the max88 Platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls ensuring that only authorised max88 personnel can access personal data, and only to the extent necessary for their role.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with applicable notification requirements.

While max88 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, max88 will notify you and the relevant regulatory authority as required by applicable law.

You are responsible for maintaining the security of your max88 account credentials. Do not share your password with anyone, and contact max88 support immediately if you suspect unauthorised access to your account.

10 Your Data Protection Rights

As a max88 player, you have the following rights in relation to your personal data, subject to applicable legal limitations:

• Right of Access: You have the right to request a copy of the personal data max88 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by max88.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to max88's legal retention obligations.
• Right to Restriction: You have the right to request that max88 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to max88's overriding legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the max88 Data Protection team at [email protected] with the subject line "Data Rights Request". max88 will respond to all verified requests within fifteen (15) business days. We may need to verify your identity before processing your request.

11 Children's Privacy

The max88 Platform is strictly intended for adults aged 21 years and older. max88 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register on or use the max88 Platform.

If max88 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the max88 Platform, please contact our support team immediately at [email protected].

12 Third-Party Links

The max88 Platform may contain links to third-party websites, payment portals, or game provider interfaces. This Privacy Policy applies solely to the max88 Platform and does not cover the privacy practices of any third-party websites or services.

max88 is not responsible for the privacy practices, content, or data handling of any third-party websites. We encourage you to review the privacy policies of any third-party services you access in connection with your use of the max88 Platform.

13 Changes to This Privacy Policy

max88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. The date of the most recent revision is displayed at the top of this page.

Where changes are material, max88 will provide reasonable advance notice via the Platform or by email to your registered address. Your continued use of the max88 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

We recommend that you review this Privacy Policy periodically to stay informed of how max88 is protecting your personal data.

14 Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the way max88 handles your personal data, please contact our Data Protection team:

• Email: [email protected] (subject line: "Privacy / Data Rights Request")
• Live Chat: Available 24/7 via the chat icon on the max88 Platform
• Support Hours: 8:00 AM – 12:00 MN Philippine Standard Time (PHT)

max88 aims to acknowledge all data-related enquiries within 24 hours and to resolve them within fifteen (15) business days. For complex requests, resolution may take longer, and we will keep you informed of progress throughout.

If you are not satisfied with max88's response to a data rights request or privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in the Philippines.