tmax88 Privacy Policy

1 Who We Are

1.1 This Privacy Policy is issued by tmax88 ("tmax88", "we", "us", "our"), the operator of the online casino and sportsbook platform accessible at tmax88.app.

1.2 tmax88 is the data controller responsible for the personal information of Players registered on the Platform. As data controller, tmax88 determines the purposes and means by which personal data is processed.

1.3 tmax88 operates under international gaming authority oversight and is subject to compliance requirements including KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations that directly affect the personal data tmax88 is required to collect and retain.

1.4 Questions or concerns regarding this Privacy Policy or the handling of personal data by tmax88 may be directed to the contact details set out in Section 15.

2 Data We Collect

2.1 tmax88 collects personal data from Players through the following categories of interaction:

Account Registration Data

• Full legal name as it appears on a government-issued identity document;
• Date of birth (used to verify the mandatory 21+ age requirement);
• Email address and Malaysian mobile phone number;
• Preferred username and encrypted account password;
• Residential address in Malaysia.

Identity Verification (KYC) Data

• Scanned copy or photograph of MyKad (Malaysian national identity card), passport, or other government-issued identity document;
• Proof of residential address (utility bill, bank statement, or equivalent document not older than 3 months);
• Source of funds documentation where required by tmax88's AML compliance procedures.

Financial Transaction Data

• Deposit and withdrawal history including amounts, timestamps, and payment channel used (e.g. Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, GrabPay);
• Partial payment method identifiers (e.g. masked account numbers) for fraud prevention purposes;
• MYR wallet balance history and transaction records.

Gaming Activity Data

• Betting history, game session records, stake amounts, outcomes, and winnings across all tmax88 products;
• Bonus utilisation, wagering progress, and VIP tier activity;
• Responsible gaming tool settings and usage including deposit limits, loss limits, and self-exclusion records.

Technical & Device Data

• IP address, device type, browser type and version, operating system;
• Login timestamps, session durations, and geographic location data derived from IP address;
• Cookies and similar tracking technologies as described in Section 8.

Communications Data

• Records of all communications between Players and the tmax88 support team, including live chat transcripts, email correspondence, and any documents shared during support interactions.

3 How We Use Your Data

3.1 tmax88 uses the personal data collected for the following purposes:

• Account creation and management: To register, maintain, and administer your tmax88 Account, including processing deposits, withdrawals, and MYR wallet transactions;
• Identity verification: To fulfil KYC obligations required by tmax88's international gaming authority licence and to prevent underage gambling;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, and other prohibited conduct;
• Service delivery: To provide access to tmax88 Games, process bets, calculate payouts, apply bonuses, and maintain accurate account records;
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling and to enforce player-set limits, cooling-off periods, and self-exclusion instructions;
• Legal and regulatory compliance: To comply with applicable laws, regulations, and gaming authority requirements including mandatory record-keeping and reporting obligations;
• Platform improvement: To analyse aggregated and anonymised usage patterns to improve the tmax88 Platform's performance, user experience, and product offering;
• Marketing communications: To send promotional offers, bonus notifications, and product updates to Players who have not opted out, subject to Section 12.

4 Legal Basis for Processing

4.1 tmax88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the tmax88 Player Agreement, including account management, game delivery, and payment processing;
• Legal obligation: Processing required to comply with applicable laws and gaming authority requirements, including KYC, AML, and age verification;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement where such interests are not overridden by the Player's privacy rights;
• Consent: Processing for marketing communications, where Players have provided or withheld their consent and retain the right to withdraw consent at any time.

5 Data Sharing & Disclosure

5.1 tmax88 does not sell, rent, or trade personal data to third-party advertisers or data brokers.

5.2 tmax88 may disclose personal data to the following categories of third parties where necessary:

• Gaming authority and regulators: tmax88's international gaming authority licence requires disclosure of Player account and transaction data upon request for compliance and audit purposes;
• Payment processors: Financial transaction data is shared with payment service providers (including e-wallet operators and banks) solely to the extent necessary to process deposits and withdrawals;
• Identity verification services: KYC document data may be processed by third-party identity verification providers operating under appropriate data processing agreements;
• Technology and infrastructure providers: Hosting, cloud infrastructure, and cybersecurity service providers may process data on tmax88's behalf under binding data processing agreements;
• Law enforcement and legal authorities: tmax88 may disclose personal data where required to do so by court order, subpoena, or applicable law, or where tmax88 reasonably believes disclosure is necessary to prevent fraud, criminal activity, or harm.

5.3 All third-party data processors engaged by tmax88 are contractually bound to process personal data only on tmax88's instructions and to implement appropriate security measures.

6 International Data Transfers

6.1 tmax88's platform infrastructure may involve the transfer of personal data to servers or processors located outside Malaysia. Where such transfers occur, tmax88 ensures that appropriate safeguards are in place, including contractual data protection provisions consistent with applicable data protection standards.

6.2 In all cases, personal data transferred internationally by tmax88 is subject to the same level of protection described in this Privacy Policy, regardless of where the processing takes place.

7 Data Retention

7.1 tmax88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Active Account data is retained for the duration of the Player's registration on the tmax88 Platform;
• Following Account closure, tmax88 retains personal data for a minimum of five (5) years to comply with gaming authority record-keeping requirements and applicable anti-money laundering legislation;
• Financial transaction records are retained for a minimum of seven (7) years in accordance with applicable financial regulatory requirements;
• KYC identity verification documents are retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later;
• Support communication records are retained for a minimum of two (2) years from the date of the interaction.

7.2 At the expiry of applicable retention periods, tmax88 will securely delete or anonymise personal data in accordance with its data destruction protocols.

8 Cookies & Tracking Technologies

8.1 tmax88 uses the following categories of cookies and similar technologies on the Platform:

• Strictly necessary cookies: Required for Platform functionality including maintaining authenticated login sessions, processing transactions, and enforcing security controls. These cannot be disabled without disrupting Platform use;
• Performance and analytics cookies: Used to collect anonymised data about how Players navigate the tmax88 Platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve Platform performance;
• Fraud prevention cookies: Used to fingerprint devices and detect anomalous access patterns consistent with account takeover, bot activity, or multi-accounting.

8.2 Players may manage cookie preferences through their browser settings. Disabling strictly necessary cookies will impair or prevent access to the tmax88 Platform.

9 Your Data Rights

9.1 Subject to applicable law and tmax88's legal obligations, Players have the following rights with respect to their personal data:

• Right of access: The right to request a copy of the personal data held by tmax88 about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by tmax88;
• Right to erasure: The right to request deletion of personal data where processing is no longer necessary, consent has been withdrawn, or processing is unlawful — subject to tmax88's legal retention obligations;
• Right to restriction: The right to request that tmax88 restrict the processing of your personal data in certain circumstances;
• Right to data portability: The right to receive your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity;
• Right to object: The right to object to processing based on legitimate interests, including the right to opt out of direct marketing communications at any time.

9.2 Requests to exercise any of the above rights should be submitted in writing to the tmax88 data contact address set out in Section 15. tmax88 will respond within 30 calendar days of receipt of a verifiable request. Identity verification may be required before a request is actioned.

10 Children & Minors

10.1 tmax88 enforces mandatory age verification at the point of registration and during the KYC process to prevent minors from accessing the Platform.

10.2 Parents and guardians who believe a minor may have created a tmax88 account are encouraged to contact the tmax88 support team immediately at the contact details in Section 15.

11 Security Measures

11.1 tmax88 implements a multi-layered security framework to protect Player personal data, including:

• 256-bit SSL/TLS encryption applied to all data transmitted between Players' browsers and tmax88 servers;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls restricting internal access to personal data to authorised personnel with a demonstrable business need;
• Multi-factor authentication for all tmax88 administrative and operational system access;
• Regular penetration testing and vulnerability assessments of Platform infrastructure;
• Automated monitoring for anomalous login patterns and data access events consistent with a potential breach.

11.2 Notwithstanding these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in material risk to Players, tmax88 will notify affected Players and relevant authorities in accordance with applicable legal requirements.

12 Marketing Communications

12.1 With the Player's consent at the time of registration, tmax88 may send promotional emails, SMS notifications, and in-platform messages regarding bonuses, new games, seasonal promotions, and Platform updates.

12.2 Players may withdraw their consent to marketing communications at any time by:

• Updating communication preferences through the account settings panel;
• Clicking the unsubscribe link in any marketing email received from tmax88;
• Contacting tmax88 support at the details listed in Section 15.

12.3 Withdrawal of marketing consent does not affect the delivery of transactional communications necessary for account management, including deposit confirmations, withdrawal notifications, KYC requests, and security alerts. These communications are delivered on the basis of contractual and legal obligation and cannot be opted out of while an Account is active.

12.4 Players who are subject to a self-exclusion or cooling-off period on the tmax88 Platform are automatically removed from all marketing communications for the duration of that period, in accordance with responsible gaming obligations.

13 Third-Party Links

13.1 The tmax88 Platform does not contain links to third-party websites. This Privacy Policy applies solely to data processing activities conducted by tmax88 on the tmax88.app platform and associated services.

14 Changes to This Privacy Policy

14.1 tmax88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or tmax88's data processing practices.

14.2 Material changes to this Privacy Policy will be communicated to registered Players via email to the registered address or via a prominent notice on the tmax88 Platform at least 14 days before the change takes effect.

14.3 The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the tmax88 Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

15 Contact & Complaints

15.1 For any questions, access requests, or concerns regarding this Privacy Policy or tmax88's handling of personal data, Players may contact the tmax88 data team using the following details:

15.2 If a Player is not satisfied with tmax88's response to a privacy complaint, they may escalate the matter to the relevant data protection supervisory authority or the tmax88 licensing authority's dispute resolution mechanism.