Privacy Policy — Maimun88

This Privacy Policy ("Policy") is issued by Maimun88 ("the Platform", "we", "us", "our"), operator of the online gaming and sports betting platform accessible at https://maimun88.cam. This Policy applies to all individuals ("you", "your", "the Player", "data subject") who access, register on, or interact with the Maimun88 platform, including players located across Malaysia — Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions.

Maimun88 operates as a data controller in respect of the personal data it collects and processes in connection with the provision of its gaming and betting services. We process personal data lawfully, fairly, and transparently, and only to the extent necessary for specified, explicit, and legitimate purposes.

By accessing the Maimun88 platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the data processing practices described herein to the extent that consent is the applicable legal basis. Where processing is based on another legal ground, your continued use of the platform confirms your awareness of those practices.

For the purposes of this Privacy Policy, the following terms carry the meanings ascribed below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. Maimun88 is the Data Controller in respect of player data.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under a data processing agreement.
• "KYC" — Know Your Customer; the identity and age verification process required for account activation and withdrawal processing.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data.
• "Cookies" — small text files stored on your device by a website to retain information across sessions or to track user behaviour.

Maimun88 collects the following categories of personal data in connection with the registration, operation, and maintenance of player accounts:

Maimun88 collects personal data through the following channels:

• Direct Provision: Data you submit when creating an account, completing KYC, making a deposit or withdrawal, contacting support, or responding to a survey.
• Automated Technologies: Data collected automatically when you access the platform, including IP address, browser fingerprint, device identifiers, and session activity logs via cookies and server logs.
• Third-Party Sources: Identity verification data returned by KYC service providers; fraud signals from payment processors; geolocation data derived from IP addresses to enforce jurisdictional restrictions.
• Payment Service Providers: Confirmation data returned by Malaysian payment processors including DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, Hong Leong, Touch 'n Go eWallet, Boost, and GrabPay to verify transaction completion.

Maimun88 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions — including account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable law — including anti-money laundering ("AML") regulations, KYC requirements, and obligations imposed by our licensing authority.
• Legitimate Interests: Processing necessary for our legitimate business interests where these are not overridden by your rights — including fraud detection, platform security, responsible gambling monitoring, and service analytics.
• Consent: Processing based on your freely given consent — including the setting of non-essential cookies, marketing communications, and certain profiling activities. You may withdraw consent at any time.

Maimun88 uses the personal data we hold for the following specific purposes:

• To create, verify, and manage your player account on the Maimun88 platform.
• To process deposits and withdrawals via your chosen Malaysian payment method and to maintain accurate financial records.
• To perform identity and age verification (KYC) as required under our licensing obligations, and to confirm that you are aged 21 or above.
• To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other forms of prohibited conduct.
• To monitor gaming activity for the purposes of responsible gambling — identifying patterns consistent with problem gambling and taking appropriate action where required.
• To provide customer support, respond to queries, and resolve disputes.
• To comply with applicable legal and regulatory requirements, including reporting obligations to relevant authorities.
• To send you transactional communications including account confirmations, withdrawal notifications, security alerts, and policy updates.
• To improve platform functionality, game performance, and overall user experience through aggregated analytics.
• To send you promotional communications, where you have provided consent and not subsequently withdrawn it.

Maimun88 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We may share your personal data with third parties only in the following limited circumstances:

• Service Providers: Third-party vendors who process data on our behalf under data processing agreements — including KYC verification providers, payment processors, cloud hosting providers, and analytics services. These providers are contractually prohibited from using your data for any purpose beyond the specific service they provide to Maimun88.
• Regulatory and Legal Authorities: Where required by applicable law, court order, or direction from a regulatory body, Maimun88 will disclose personal data to the relevant authority. We will notify affected players of such disclosures where permitted by law.
• Fraud Prevention Agencies: Where we have reasonable grounds to suspect fraud, money laundering, or criminal activity, relevant data may be shared with fraud prevention organisations or law enforcement agencies.
• Business Transfers: In the event of a merger, acquisition, or sale of business assets, player data may be transferred to the successor entity, subject to the same or equivalent privacy protections.

Maimun88 supports a range of Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and direct bank transfers with Maybank, CIMB, Public Bank, RHB, and Hong Leong. The processing of payment transactions is handled by our certified payment service providers.

Maimun88 does not store full bank account numbers, full card numbers, or e-wallet credentials on its own servers. Payment credentials are processed by PCI-DSS compliant payment partners who maintain their own data security standards. Maimun88 retains only the minimum payment reference data necessary for transaction reconciliation, withdrawal processing, and AML compliance.

All financial transaction records are retained for a minimum period as required under our licensing obligations and applicable AML regulations, after which they are securely deleted or anonymised.

Maimun88 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for platform functionality — including maintaining your logged-in session, remembering your language preference, and enabling secure transactions. These cannot be disabled without impairing platform usability.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the platform — page load times, navigation patterns, and error rates. This data is used solely to improve platform performance.
• Functional Cookies: Enable enhanced features such as personalised game recommendations, remembering your deposit preferences, and saving your responsible gambling settings between sessions.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and unauthorised login attempts.

You may manage your cookie preferences at any time via your browser settings or via the cookie preference centre within your Maimun88 account. Disabling non-essential cookies will not affect your ability to use the core features of the platform.

Maimun88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, and in accordance with our legal and regulatory obligations. The following indicative retention periods apply:

• Account Data: Retained for the duration of the active account relationship, and for a period of five (5) years following account closure, in compliance with AML and licensing requirements.
• KYC Verification Documents: Retained for five (5) years from the date of verification, or for the duration required by the applicable licensing authority, whichever is longer.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of the transaction.
• Support Communications: Retained for three (3) years from the date of the interaction, or longer where relevant to an active or anticipated legal dispute.
• Technical and Usage Logs: Retained for twelve (12) months from the date of creation, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data will be securely deleted or rendered permanently anonymous in a manner that prevents identification of the individual data subject.

Maimun88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between the player's device and our servers.
• Encryption of sensitive data at rest using industry-standard cryptographic protocols.
• Two-factor authentication (2FA) available to all registered players and enforced for administrative access.
• Role-based access controls ensuring that only authorised personnel have access to personal data, and only to the extent necessary for their job function.
• Regular security audits and penetration testing conducted by independent third-party specialists.
• Intrusion detection systems and real-time monitoring for anomalous activity on platform infrastructure.
• Staff data protection training and confidentiality obligations contractually binding all personnel who handle personal data.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, Maimun88 will notify you without undue delay and provide information on the nature of the breach, the data affected, and the remedial steps taken.

As a data subject, you hold the following rights in respect of your personal data held by Maimun88. To exercise any of these rights, please contact our support team via live chat or email. We will respond within 30 days of receiving a valid request.

Maimun88 does not knowingly collect personal data from individuals under the age of 21 years. The platform is strictly intended for adults aged 21 and above. We enforce this restriction through mandatory age declaration at registration and KYC document verification.

If Maimun88 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposits in accordance with applicable regulations.

If you believe that a minor has created an account on the platform, please contact our support team immediately at [email protected].

In providing our services to Malaysian players, Maimun88 may process or transfer personal data to service providers located in jurisdictions outside Malaysia. Where such transfers occur, Maimun88 ensures that:

• The receiving jurisdiction provides an adequate level of data protection, as determined by applicable law or independent assessment.
• Where an adequacy determination is not available, appropriate safeguards are in place — including standard contractual clauses, binding corporate rules, or equivalent contractual protections — before any transfer takes place.
• Data transferred internationally is limited to what is strictly necessary for the specific service being provided by the recipient processor.

Players may request further information regarding international data transfers applicable to their account by contacting our support team.

Maimun88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform operations, or our data processing practices. Where material changes are made that affect your rights or the way in which we use your personal data, we will notify you via the email address associated with your account and/or via a prominent notice on the platform at least 7 days prior to the changes taking effect.

The "Last Updated" date at the top of this page will be revised each time the Policy is amended. We encourage you to review this Policy periodically to remain informed of how your personal data is protected. Your continued use of the platform following any amendment constitutes your acknowledgement of the revised Policy.

For any questions, requests, or complaints relating to this Privacy Policy or the processing of your personal data by Maimun88, please contact our Data Protection team through the following channels:

• Email: [email protected] — mark the subject line "Privacy Request" or "Data Subject Request" for expedited handling.
• Live Chat: Available 24 hours a day, 7 days a week via the Maimun88 platform. Average first response under 90 seconds.

We will acknowledge your privacy request within 5 business days and provide a substantive response within 30 calendar days. Where the complexity of your request requires additional time, we will notify you of the extension and the reason for it.

If you are dissatisfied with our response to a data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.