Privacy Policy

1. What We Collect

To operate a regulated gambling service we collect:

• Identity data. Full name, date of birth, government-issued ID (NRIC, passport or driving license).
• Contact data. Mobile number, email address, residential address.
• Financial data. Payment method details (last 4 digits, channel), deposit and withdrawal history.
• Account & gameplay data. Username, hashed password, betting and game history, bonus claim history.
• Technical data. IP address, device type, browser, login timestamps. We use this for fraud screening and to remember your login.
• Communications. Live-chat transcripts, Telegram conversations and emails you exchange with our support.

2. Why We Collect It

• To verify your identity and age (legal requirement — KYC and AML).
• To process deposits, withdrawals and bonuses.
• To detect and prevent fraud, money laundering and underage access.
• To deliver and improve the service (game recommendations, support).
• To comply with PAGCOR licensing and applicable AML/CFT regulations.
• To send service-related communications (account, payment, security). Marketing communications only with your opt-in consent.

3. How Long We Keep It

Personal data is retained for the duration of your account plus the regulatory minimum (typically 5–7 years for KYC and transaction records). After that period, identifying data is anonymised or deleted. Anonymised analytical data may be retained indefinitely.

4. Who We Share It With

• Payment processors (PayNow, Help2Pay, EeziePay, crypto custodians) — for deposit/withdrawal processing only.
• KYC/AML providers — for identity verification and sanctions screening.
• Game providers (Evolution, Pragmatic Play, JILI, etc.) — only the minimum data needed for game session integrity. Game providers don't receive your real-world identity.
• Regulators & law enforcement — when legally compelled (PAGCOR audits, court orders, AML reporting).
• Service providers (cloud hosting, customer-support platform) — under strict data-processing agreements.

We do not sell your data to anyone. Ever.

5. International Transfers

Maxim88's primary servers are located within the Philippines. Some service providers may process data in other jurisdictions (Singapore, Hong Kong, EU). All transfers occur under contractual safeguards equivalent to the protections of Singapore's Personal Data Protection Act.

6. Security Measures

• 256-bit TLS encryption for all data in transit.
• At-rest encryption for stored documents and KYC files.
• Two-factor authentication available (and recommended) for all member accounts.
• Layered fraud screening on every deposit, withdrawal and game session.
• Quarterly third-party penetration tests of the platform.
• Strict internal access controls — staff see only the data necessary for their role.

7. Your Rights

Where applicable law permits, you have the right to:

• Request a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of data we are not legally required to retain.
• Object to specific processing activities (e.g., marketing).
• Lodge a complaint with your local data-protection authority.

To exercise any right, contact @maxim88_support on Telegram or use the contact options at /contact.

8. Cookies

Maxim88 uses cookies and similar technologies to: remember your login, remember your age-gate confirmation, prevent fraud, and (with your consent) measure site usage. You can clear cookies via your browser settings, but doing so may log you out and require re-confirmation of the age gate.

9. Changes to This Policy

Material changes will be announced by email and on your account dashboard at least 14 days before they take effect. Minor clarifications may be made without notice.

10. Contact

Questions about this Privacy Policy? Message @maxim88_support or see the Contact page.