1. Home
  2. Privacy Policy
PERSONAL DATA PROTECTION

Maxslot Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

At Maxslot, your privacy is not merely a legal obligation — it is a responsibility we take seriously every day. This document clearly explains what data we collect, why we collect it, how we protect it, and your rights as the owner of that data.

This Privacy Policy applies to all services provided by Maxslot including our online casino platform, Sports Betting, lottery, and all our communication channels. It should be read together with Terms & Conditions ours.

Updated: 1 January 2026
Standard: AES-256 & SSL
OUR PRIVACY COMMITMENT
AES-256 encryption for all data
No data sold to third parties
You have the right to access & delete your data
Full compliance with Malaysia's PDPA
Data breach notification within 72 hours
Financial data processed through a secure gateway

Why Your Privacy Matters to maxslot

We did not write this privacy policy merely to satisfy a legal requirement. It reflects the way we conduct our business with integrity.

When you register an account at Maxslot, you are placing your trust in us — not just your money, but your personal information as well. Your name, phone number, email address, and payment method details such as your Touch 'n Go or DuitNow account are sensitive data. We understand how important this is to you, and we do not take lightly the responsibility that comes with that trust.

Platform Maxslot operates on a "privacy by design" principle – meaning data protection is not something we add as an afterthought, but something built into our systems from the ground up. From how we store passwords (which are never kept in plain text – only irreversible hashes) to how we process financial transactions through certified payment gateways, every layer of our system is designed with data security as a priority.

Many Malaysian players we've spoken with share the same concern: "Can I really trust an online platform with my personal information?" That's a fair question. Here's our answer – Maxslot never sells, rents, or uses user data for third-party advertising purposes. Your data is used solely for the purposes stated in this document – to operate your account, process transactions, provide customer support, and fulfil legal compliance requirements.

If at any time you have a question, concern, or wish to exercise your privacy rights – such as requesting access to your data or requesting its deletion – you can reach us directly by email at support@maxslot.best. Our team will respond within 5 business days.

Maxslot's Six Data Protection Principles

How we protect your privacy – not just a policy on paper, but real practices you can see and feel.

Full AES-256 Encryption
All personal data stored in Maxslot's databases is encrypted using AES-256 – the same standard used by major Malaysian banks. Even if an unauthorised party were to gain access to our database, the data would be unreadable without the correct encryption key.
Internal Data Access Control
Not all Maxslot staff have access to player personal data. Access is divided by role and job function – for example, customer support agents can only view information necessary to resolve your issue. All access is logged and audited on a regular basis.
Financial Data Not Stored
maxslot does not store your complete payment method details – your full bank account number, Touch 'n Go PIN, or GrabPay password never passes through or is stored in our systems. All transactions are processed directly through certified payment gateways that handle financial data securely.
No Data Sold to Third Parties
maxslot has never and will never sell, rent, or share your personal data with advertisers, data brokers, or third parties unrelated to the operation of the platform. Your data belongs to you – it is not a business asset for us to trade.
Data Collection Minimisation
We only collect data that is strictly necessary for the specific purposes stated. For example, we do not ask for more information than is needed to verify your identity or process a payment. This "data minimisation" principle directly reduces the privacy risks to you.
Data Breach Notification
In the event of a data security breach involving your personal information, maxslot is committed to notifying you within 72 hours of the breach being detected. The notification will include details of the breach and the steps we have taken to address it.
Contents
01Data Collected 02Data Usage Purposes 03Legal Basis 04Data Sharing 05Storage & Security 06Your Rights 07Cookies & Tracking Technologies 08Children's Data 09Cross-Border Data Transfers 10Privacy Policy Changes 11Contact Us
1
Personal Data We Collect
The types of information collected when you use the Maxslot platform

Maxslot collects your personal data through several means: information you provide directly during registration and platform use, information collected automatically as you browse the platform, and in certain cases, information from legitimate third-party sources.

Data Type Example Information How It Is Collected
Identity Data Full name, identity card number, date of birth, gender Account registration & KYC
Contact Data Phone number, email address, state of residence Account registration
Financial Data Bank account or eWallet holder name, account number (masked), transaction history Deposits & withdrawals
Gaming Data Betting history, games played, session duration, wins and losses Automatically during gameplay
Technical Data IP address, browser type, operating system, device type, screen resolution Automatically while browsing
Communication Data Customer support conversation records, emails sent, and complaints submitted Support interactions
Maxslot never storing your eWallet PIN, password, or payment method login credentials. All financial transactions are processed through certified third-party payment gateways that bear full responsibility for the security of financial data during processing.
2
How Your Data Is Used
Why we collect data and how it is used in platform operations

The personal data we collect is used solely for the following purposes. Maxslot will not use your data for any other purpose without first obtaining your consent:

  • Account Management: Creating, verifying, and managing your Maxslot account. This includes processing registrations, verifying identities, and maintaining accurate account records.
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, as well as withdrawal processing to your registered bank account or eWallet.
  • Service Provision: Gives you access to all games on the platform, including Baccarat, Roulette, slots, Sports Betting on the Malaysia Super League and EPL, as well as 4D lottery and Keno.
  • Security & Fraud Prevention: Monitoring account activity to identify and prevent fraud, money laundering, unauthorised access, and platform abuse.
  • Customer Support: Providing effective technical support and customer service in Bahasa Malaysia when you contact us.
  • Legal Compliance: To fulfil applicable legal and regulatory obligations, including anti-money laundering (AML) requirements and identity verification (KYC).
  • Platform Improvements: Analysing usage patterns in aggregate and anonymised form to improve the user experience, identify technical issues, and plan new features that players need.
  • Service Communications: To send you important notifications relating to your account, such as transaction confirmations, changes to terms, and security alerts.
For marketing communications such as promotional offers and the latest bonuses, we will only contact you if you have given your explicit consent during registration or through the communication preferences in your account settings. You may opt out of marketing communications at any time via the "Unsubscribe" link in any email or through your account settings.
3
Legal Basis for Data Processing
The legal basis that permits maxslot to process your personal data

Maxslot processes your personal data on one or more of the following legal bases recognised under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Consent: You provide explicit consent during account registration when you agree to this Privacy Policy. This consent may be withdrawn at any time, though withdrawal may affect our ability to provide certain services.
  • Contract Performance: Processing is necessary to perform the service agreement between you and Maxslot – for example, processing deposits and withdrawals, verifying your identity, and managing your account.
  • Legal Obligations: Certain data processing is mandatory to comply with applicable Malaysian law, including KYC requirements under anti-money laundering regulations.
  • Legitimate Interests: Maxslot has a legitimate interest in processing certain data for platform security, fraud prevention, and risk analysis purposes – provided that this interest does not override your fundamental rights and freedoms.

Our data processing consistently adheres to PDPA principles — fair processing, collection for legitimate purposes, no processing beyond those purposes, accuracy, retention no longer than necessary, and protection through appropriate security measures.

4
Data Sharing with Third Parties
When and with whom your data may be shared – along with our guarantees

maxslot does not sell your personal data to anyone. However, in certain circumstances, your data may be shared with the following parties within strict and necessary limits:

  • Payment Providers: Payment gateways that process your transactions — such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX service providers — receive only the minimum information necessary to complete a transaction. They are governed by their own strict privacy policies and security standards.
  • Game Providers: Gaming partners such as Evolution Gaming and Pragmatic Play may receive the minimum technical data necessary to enable games to function within your account. They do not receive any personally identifiable information or your personal financial details.
  • Technology Service Providers: Companies that provide technical infrastructure such as server hosting, email services, and analytics tools. All such providers are bound by data processing agreements that hold them to security standards equal to or higher than those of Maxslot.
  • Legal Authorities: maxslot will disclose data requested by Malaysian government authorities or law enforcement when required by law, court order, or valid legal process. We will endeavour to notify you of any such request unless prohibited by law from doing so.
All third-party service providers we work with are required to sign data processing agreements obligating them to protect your data in accordance with standards set by maxslot and applicable Malaysian law. We do not work with providers that cannot meet these security standards.
5
Data Retention & Security Measures
How long data is retained and how it is protected against security threats

Data Retention Period

Maxslot retains your personal data for as long as your account remains active, and for an additional period following account closure as required by law or legitimate business needs:

  • Identity & account data: For the duration of the active account + 5 years after account closure (AML and legal requirements)
  • Financial transaction records: 7 years from the transaction date (Malaysian financial legal requirements)
  • Game and betting records: 5 years from the date of activity
  • Customer support logs: 3 years from the date of interaction
  • Technical data and system logs: 12 months, then deleted or anonymised

Technical Security Measures

Maxslot implements multiple layers of technical security to protect your data:

  • At-rest data encryption using AES-256 for all databases containing personal information
  • Data encryption in transit using TLS 1.3 / SSL for all communications between your browser and our servers
  • Role-based access control (RBAC) across all internal systems
  • 24/7 security monitoring and intrusion detection system (IDS)
  • Regular and secure data backups across geographically separate locations
  • Regular penetration testing by independent external parties
  • A regular security patch management programme covering all software and systems
While no system can guarantee 100% absolute security, maxslot employs industry-leading security measures and continuously updates our defences to keep pace with the ever-evolving landscape of cyber threats.
6
Your Rights as a Data Subject
The rights you hold over your personal data and how to exercise them

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by maxslot. We are committed to respecting and facilitating the exercise of these rights:

Right of Access
You have the right to request a copy of all personal data maxslot holds about you. Requests will be processed within 14 business days and can be submitted by email.
Right to Rectification
If your data is inaccurate or incomplete, you have the right to request a correction. Certain details such as your phone number can be updated directly through your account settings.
Right to Erasure
You may request the deletion of your personal data in certain circumstances – for example, if your account is closed and there is no legal obligation to retain it. Each request is assessed on a case-by-case basis.
Right to Restrict Processing
You may request that we restrict the processing of your data in certain circumstances – for example, while you are contesting the accuracy of the data or during a dispute regarding its use.
Data Portability Rights
You have the right to request the data you have provided to us in a machine-readable format (such as CSV or JSON) so that it can be transferred to another platform should you wish.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time. Objections raised for other purposes will be assessed in accordance with the applicable legal basis.

To exercise any of the above rights, submit a written request to support@maxslot.best with the subject line "Privacy Rights Request – [Right Type]". Include your account number and a copy of your identification for verification purposes. We will process your request within 14 business days.

7
Cookies & Tracking Technologies
How Maxslot uses cookies and similar technologies on the platform

The Maxslot platform uses cookies and similar tracking technologies to ensure the platform functions properly, enhance the user experience, and analyse how the platform is used. The following are the types of cookies we use:

Essential Cookies
Required for the platform to function – this includes login sessions, security, and basic preferences. These cannot be disabled as they are fundamental to platform operations.
REQUIRED
Performance Cookies
Collecting information about how visitors use the platform in aggregated, anonymised form – such as the most visited pages and error messages received. This helps us improve platform performance.
OPTIONAL
Functional Cookies
Allows the platform to remember your preferences such as language, last game type, and display settings to deliver a more personalised experience.
OPTIONAL
Security Cookies
Used to detect and prevent suspicious activity, fraud, and unauthorised access to your account. This includes recognising the devices you regularly use to log in.
REQUIRED

You can manage cookies through your browser settings. However, disabling certain cookies may affect platform functionality. The cookies we use do not contain directly identifiable personal information.

8
Protection of Children's Data
maxslot's commitment to not collecting data from minors

The Maxslot platform is exclusively for individuals aged 18 and above. We strictly do not knowingly collect, store, or process personal data from children or anyone under the age of 18.

All account applicants go through an age verification process during registration. Should we find that we have inadvertently collected data from an underage individual, we will take immediate steps to delete that data and close the account in question.

If you become aware that a child has registered a Maxslot account, please contact us immediately at support@maxslot.best. We will act promptly to close the account and delete all associated data.
9
Cross-Border Data Transfers
Circumstances in which your data may be processed outside Malaysia

In operating a platform that utilises global technology services, there are situations where your data may be processed or stored outside of Malaysia. This includes the use of cloud hosting services and global technical infrastructure.

In all such cases, maxslot ensures that:

  • Data is only transferred to countries or parties that provide an equivalent or higher level of data protection than Malaysia
  • Legally binding and appropriate data transfer agreements exist between Maxslot and data recipients
  • Transferred data is encrypted in transit using TLS 1.3
  • Data transfers are carried out solely for lawful and necessary purposes in connection with the delivery of Maxslot's services to you

The majority of maxslot's data processing takes place within controlled infrastructure with strict security measures in place. Cross-border transfers only occur when absolutely necessary and with adequate safeguards.

10
Changes to This Privacy Policy
How maxslot handles privacy policy updates

Maxslot reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or technological developments. When we make changes:

  • The "Updated" date at the top of this document will be revised
  • For significant changes that affect your privacy rights, we will send a notification to your registered email address at least 14 days before the changes take effect
  • A clear notice will be displayed on the platform when you next log in before the changes take effect

Continued use of the Maxslot platform after the effective date of any Privacy Policy changes constitutes acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account before the effective date.

Previous versions of this Privacy Policy are kept in our archives and can be requested via our support email for reference purposes.

11
Contact Us – Maxslot Privacy Officer
How to contact us for privacy-related enquiries, complaints, or requests

If you have any questions, concerns, or complaints regarding how maxslot handles your personal data, or if you wish to exercise any of your privacy rights, please contact our Privacy Officer through the following channels:

  • Email: support@maxslot.best – with the subject line "Privacy Enquiry" for prompt processing
  • Live Chat: Through the maxslot platform, available 24 hours a day, 7 days a week in Bahasa Malaysia
  • Response Time: We are committed to responding to all privacy enquiries within 5 business days, and formal privacy rights requests within 14 business days

If you are not satisfied with how we have handled your privacy complaint following our internal resolution process, you have the right to refer the matter to the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory authority.

maxslot takes all privacy complaints seriously and is committed to resolving every case thoroughly, fairly, and within a reasonable timeframe. Your trust is our priority.
Current Version of Privacy Policy

This document is the latest version of the maxslot Privacy Policy, effective from 1 January 2026. Previous versions are available upon request via our support email. Please check this page periodically for the latest information on how we protect your privacy.

FAQ – maxslot Privacy Policy

The most frequently asked questions from members regarding privacy and data protection on our platform.

No, absolutely not. Maxslot has never and will never sell, rent, or share your personal data with advertisers, data brokers, or any third party for marketing or commercial purposes. Your data is used solely for account operations, transaction processing, platform security, and legal compliance — as detailed in this Privacy Policy. This is a commitment we will never compromise on.

No. Maxslot does not store your eWallet login credentials (Touch 'n Go PIN, GrabPay password, etc.) and does not retain your full bank account number. When you make a deposit or withdrawal, you are redirected or connected to a certified third-party payment gateway – they handle all sensitive financial information securely on their end. Maxslot only receives confirmation that a transaction was successful or failed, along with the minimum necessary details such as the recipient name and transaction amount.

Yes, you can request the deletion of your personal data. However, such requests are subject to review, as certain data must be retained to fulfil legal obligations — for example, financial transaction records must be kept for 7 years under Malaysian law. If your account is still active, it must be closed before the request can be processed. Submit a written request to support@maxslot.best with the subject line "Data Deletion Request" and we will assess your request within 14 business days, informing you of which data can be deleted and which must be retained, along with the reasons.

Upon account closure, Maxslot retains your data for the period required by law – typically 5 to 7 years depending on the data type. This is a mandatory legal requirement related to anti-money laundering and financial record-keeping that cannot be avoided. Throughout this period, your data is archived under strict security measures and access is restricted to staff with a legitimate business need only. Once the mandatory retention period expires, your data will be securely deleted or anonymised.

maxslot is committed to notifying you within 72 hours in the event of a data security breach that may involve your personal information. Notifications will be sent to the email address registered on your account and via in-platform notifications (where applicable). The notification will include details of what occurred, the types of data potentially affected, the steps maxslot has taken to address the issue, and the steps you can take to protect yourself. In serious cases, we will also report the breach to the relevant authorities as required by law.

Yes. Under the right of access in Malaysia's PDPA, you are entitled to request a copy of the personal data Maxslot holds about you. Submit a written request to support@maxslot.best with the subject line "Data Access Request", along with your account number and a copy of your identification for verification. We will process your request within 14 business days and provide the data in a readable format (typically PDF or CSV). Data related to active fraud investigations or data involving third parties may be excluded in accordance with legal provisions.
RELATED TERMS & POLICIES

This Privacy Policy Is Part of maxslot's Protection Framework

This document should be read together with Terms & Conditions and Responsible Gaming Policy Maxslot. Together, these three documents form a comprehensive protection framework that ensures a safe, fair, and secure gaming experience for all members in Malaysia.

If you have any questions about how we protect your privacy or wish to exercise your privacy rights, do not hesitate to contact us at support@maxslot.best. Our Malaysian-speaking support team is available 24 hours a day.

Terms & Conditions Responsible Gaming
⚡ YOUR PRIVACY IS PROTECTED AT MAXSLOT

Play with Peace of Mind – Your Data is Safe with Maxslot

With AES-256 encryption, a transparent privacy policy, and our commitment to never selling your data, you can enjoy casino games, Sports Betting, and lottery at Maxslot with full confidence that your privacy is protected at all times.

Register for Free Now Already have an account? Log In
SSL & AES-256 Encryption No data sold Malaysia PDPA Compliance Aged 18 and above only
Bahasa Melayu