Max39 Privacy Policy – Your Personal Data Protection

At max39, your privacy is not merely a legal obligation — it is our sincere commitment. This Privacy Policy clearly explains how we collect, use, store, and protect your personal information every time you use our platform.

Updated: January 2026 SSL 256-bit Malay
Our Privacy Commitment
Your data is never sold to third parties
256-bit SSL encryption for all transactions
Full control of your data is in your hands
Malaysia PDPA requirements compliance
Continuous 24/7 access and audit logs

Max39's Six Layers of Data Protection

Every aspect of your data management is designed with security and transparency as the priority.

End-to-End Encryption

All data transmitted between your device and max39 servers is protected by 256-bit SSL/TLS encryption. This means sensitive information such as banking details and passwords cannot be intercepted by any third party.

Secure Data Storage

Your personal data is stored in internationally certified data centres with strict physical and digital access controls. Passwords are stored in hashed form and cannot be read even by our own technical team.

Two-Factor Authentication

Two-factor authentication (2FA) is available for all max39 accounts. This additional security layer ensures only you can access your account, even if your password has been compromised.

Minimal Data Privacy

Max39 only collects information that is genuinely necessary for platform operations. We do not collect irrelevant data and periodically delete information that is no longer needed in accordance with our data retention policy.

Regular Security Audits

The max39 security system undergoes regular audits and penetration testing by independent parties. This ensures any vulnerabilities are identified and addressed before they can be exploited.

Breach Notification

Should any security incident affecting your data occur, max39 is committed to notifying you within 72 hours. We will also provide the necessary steps to protect your account.

Important Note: This Privacy Policy applies to all users of the max39 platform, including the max39.vu website and our mobile app. By using our platform, you agree to the practices described in this document.
01

Information We Collect

Max39 collects various types of information to ensure you enjoy a smooth, secure, and personalised gaming experience. We only collect data that is genuinely necessary for legitimate purposes, and nothing beyond that.

Information you provide directly:

  • Full name, email address, phone number and date of birth upon account registration
  • Bank or digital wallet details for processing deposits and withdrawals
  • Identity verification documents such as MyKad or passport for the KYC process
  • Communications you send to our customer support team
  • Feedback, reviews or survey responses you voluntarily provide

Automatically collected information:

Data Type Example Purpose
Device Data Device model, OS, screen resolution User experience optimisation
Network Data IP address, ISP, estimated location Security and location verification
Session Data Login time, session duration, actions Account security and audit
Game Data Wagering, wins, game history Regulatory compliance and support
Cookie Data Session cookies, preference cookies Platform functionality and analytics

All data collection is carried out transparently, and we do not collect sensitive information such as plain-text passwords, full credit card details, or biometric data.

02

How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. max39 does not use your data for undisclosed purposes without first obtaining your additional consent.

  • Account management: Creating and maintaining your account, processing registration, verifying identity and facilitating secure login.
  • Transaction processing: Processing deposits, withdrawals and all other financial transactions accurately and on time.
  • Service delivery: Allows you to access all games, bonuses and platform features available under your account.
  • Customer support: Using your account and transaction history to resolve issues, answer enquiries and provide relevant assistance.
  • Security and fraud prevention: Monitoring account activity to detect suspicious behaviour, unauthorised access attempts and fraudulent activity.
  • Legal compliance: Fulfilling reporting obligations to the relevant authorities, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
  • Platform Enhancements: Analysing usage patterns in aggregate (not individually) to improve platform performance, interface and features.
  • Marketing communications: Sending promotional information, bonuses and special offers — only if you have agreed to receive such communications.
You may opt out of marketing communications at any time by contacting our support team or through your account settings. Opting out of marketing will not affect your access to the platform's core services.
03

Information Sharing & Disclosure

Max39 does not sell, rent, or trade your personal information to any party for their commercial purposes. This is a core principle that is never compromised.

In certain limited circumstances, we may share your information with the following parties:

  • Payment service providers: DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost require transaction information to process your payments. They are governed by their respective privacy policies and are not permitted to use your data for any other purpose.
  • Game software providers: Gaming companies providing slot games, Live Casino, and sports betting on our platform may receive the minimum session data required to run the games properly.
  • Regulatory authority: Where required by law, we will disclose information to the relevant authorities, including law enforcement agencies, anti-money laundering bodies, or courts.
  • Technical service providers: Companies that assist us with technical operations such as cloud computing, analytics, and cybersecurity. All such parties are bound by strict confidentiality agreements.

In any data sharing, we ensure only the minimum necessary information is disclosed, and all recipients are bound by data protection obligations equivalent to our own standards.

04

Cookies & Tracking Technologies

The max39 website uses cookies and similar tracking technologies to ensure the platform functions properly and to deliver a personalised experience.

Types of cookies we use:

  • Essential Cookies: Required for core platform operations such as login authentication, session security, and basic site functionality. These cookies cannot be disabled.
  • Preference Cookies: Remembering your settings such as language preference, betting history and interface display to make your experience more comfortable.
  • Analytics Cookies: Helps us understand how users interact with our platform in aggregate so we can improve the user experience. This data is anonymised.
  • Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure the integrity of your login sessions.

You can manage your cookie preferences through your web browser. However, disabling certain cookies may affect platform functionality. We recommend keeping essential and security cookies enabled for the best experience.

max39 does not use third-party cookies for targeted advertising or to track your activity on other websites. Our cookies operate exclusively within the max39 platform ecosystem.
05

Your Rights Over Your Personal Data

As a max39 platform user, you have clear rights regarding your personal data. We fully respect these rights and provide straightforward channels for you to exercise them.

Your Data, Your Control

Max39 gives you full control over the personal information we hold.

Right to Access

You have the right to know what personal data we hold about you and how it is used. Request a full copy of your data records at any time.

Right to Rectification

If the information we hold is inaccurate or incomplete, you have the right to request an immediate correction through our support team.

Right to Erasure

You may request the deletion of your personal data, subject to our legal record-keeping obligations. Requests will be processed within 30 days.

Right to Restriction of Processing

You may request that we restrict how we process your data in certain situations, such as while a dispute investigation is ongoing.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider of your choice.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, and we will cease such processing immediately.

Security Status
SSL Certificate Active
Data Encryption 256-bit
Last Audit Jan 2026
Monitoring 24/7
PDPA Compliance Yes
06

Data Security Measures

Max39 continuously invests in the latest security infrastructure to keep your data safe. Our security approach is multi-layered, meaning that even if one layer is exposed, the remaining layers continue to protect your data.

  • Server infrastructure: Our servers are hosted in ISO 27001-certified data centres with physical access controls, redundant cooling systems and uninterruptible power supplies.
  • Encryption of data in transit: All communications between your browser or app and max39 servers use TLS 1.3, the industry's latest encryption standard.
  • Encryption of data at rest: Sensitive data such as banking information is stored encrypted at rest using AES-256, the encryption standard used by global financial institutions.
  • Employee access controls: max39 employees may only access data required for their roles based on the principle of least privilege. All access is logged and audited.
  • Real-time threat monitoring: Our intrusion detection system (IDS) continuously monitors network traffic and immediately alerts the security team if any suspicious activity is detected.
  • Regular security testing: We conduct quarterly penetration testing and vulnerability assessments by certified independent cybersecurity firms.
Shared Responsibility: While max39 takes all reasonable steps to protect your data, account security also depends on your own actions. Please use a strong password, enable 2FA, and never share your login credentials with anyone.
07

Data Retention & Deletion

Max39 does not retain your personal data longer than necessary. Data retention periods depend on the type of information and applicable legal requirements.

Data Category Retention Period Reason
Active account information Throughout active account period Service operations
Financial transaction records 7 years after account closure AML legal requirements
Security & access logs 2 years Security investigation
Customer support records 3 years Dispute resolution
Marketing & preference data Until you withdraw User consent
KYC Documents 5 years after account closure Regulatory requirements

After the applicable retention period expires, your data will be securely deleted or anonymised so it can no longer be linked back to you.

08

Changes to This Privacy Policy

Max39 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or technological developments. We are committed to providing you with adequate notice of any material changes.

When we make significant changes to this policy, we will:

  • Updating the "Last Updated" date at the top of this document
  • Displaying a clear notice on the platform homepage for at least 30 days
  • Sending email notifications to all registered users
  • For particularly significant changes, seek your consent again before you continue using the platform

Your continued use of the max39 platform after changes take effect constitutes your acceptance of the updated policy. If you disagree with any changes, you have the right to close your account and request data deletion in accordance with the established procedure.

The latest version of this Privacy Policy is always available at max39.vu/privacy-policy. We recommend reviewing it periodically to stay informed about how we protect your data.
09

Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist.

You can reach us via:

  • Privacy email: [email protected]
  • Live support: Via the in-platform help centre or page FAQ us
  • Response time: We are committed to responding to all privacy enquiries within 5 business days

For official requests relating to data rights such as access, correction, or deletion, please include your account number and a copy of a valid identification document to expedite the verification process. All data rights requests will be processed within 30 days as provided by law.

Trusted Platform, Privacy Guaranteed

Play with peace of mind at max39 — a platform that prioritises your data security as much as it does your gaming experience. Register your account today and enjoy internationally recognised privacy protection.

SSL 256-bit Data Not Sold PDPA Compliance 2FA Available
Bahasa Melayu