Privacy Policy Maxwin — Your Personal Data Protection

1Personal Information We Collect

Maxwin collects your personal information for defined and legitimate purposes. We only collect information that is genuinely necessary to provide you with a quality and secure service as a member of our platform.

There are two main categories of information we collect:

All mandatory information is collected during the registration or KYC verification process. Automatic information is collected passively while you use our platform for security and service improvement purposes.

2How We Use Your Information

The data we collect is used solely for legitimate purposes directly related to delivering Maxwin's services. We do not use your data for unrelated purposes without your consent.

• Account management: Identity and contact information is used to verify your identity, manage your account, and allow you to log in securely.
• Transaction processing: Financial information is used to process deposits and withdrawals accurately and securely.
• KYC verification: Identity documents are required to comply with anti-money laundering and fraud prevention legal requirements.
• Platform security: Technical data and activity logs are used to detect and prevent unauthorised access, fraud, and account misuse.
• Service communications: Email address and phone number are used to send transaction notifications, security updates, and important account information.
• Platform improvement: Aggregated usage data helps us understand player needs and improve the user experience over time.
• Responsible gaming: Gaming activity patterns are monitored to help us identify players who may need support with responsible gaming practices.

3Information Sharing with Third Parties

Maxwin does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is our absolute commitment to all members.

There are limited situations where we may share your information with certain parties, and this is done only for legitimate purposes:

• Payment service provider: Required transaction information is shared with approved payment gateways to facilitate deposit and withdrawal processing.
• KYC service provider: Identity documents are shared with trusted verification partners for identity verification purposes only.
• Legal authorities: We fully comply with lawful information requests from government authorities, courts, or enforcement bodies when required by law.
• Technology service provider: Cloud infrastructure providers and technical service providers that support our platform operations may process your data as third-party data processors, all bound by strict data protection agreements.

All third parties handling Maxwin member data are required to comply with data protection standards equal to or exceeding our own.

4Security & Data Protection

Maxwin continuously invests in the latest cybersecurity infrastructure to ensure your personal data and financial information remain protected against both external and internal threats.

• All data transmitted between your device and Maxwin servers is protected with 256-bit SSL encryption, ensuring no third party can intercept or eavesdrop on that data.
• Data stored in our databases is protected with database-level encryption using the latest industry-recognised algorithms.
• Access to members' personal data within Maxwin staff is restricted to those who genuinely require it to perform their duties — a strict minimum access privilege principle is enforced.
• Our threat monitoring system operates 24 hours a day, 7 days a week to detect and respond to any suspicious activity in real time.
• Penetration testing and security audits are conducted regularly by independent third parties to ensure no vulnerabilities go undetected.
• In the rare event of a data breach, Maxwin is committed to notifying all affected members within the timeframe required by applicable law.

5Cookies, Tracking & Similar Technologies

Maxwin uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and maintain the security of your login session.

There are three categories of cookies we use:

• Essential cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled without affecting platform functionality.
• Analytics cookies: Helps us understand how members use the platform, which pages are visited most frequently, and where improvements are needed. This data is analysed in aggregate and anonymised form.
• Functional cookies: Stores your preferences such as preferred language and display settings to deliver a more personalised experience.

You can manage your cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of parts of the platform.

6Your Rights Over Personal Data

As a Maxwin member, you have certain rights regarding your personal data that we fully respect and support. To exercise any of the following rights, please contact our support team.

• Right of access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to rectification: If any information we hold about you is inaccurate or outdated, you have the right to request immediate correction.
• Right to erasure: Under certain circumstances, you have the right to request that we delete your personal data, subject to applicable legal record-keeping requirements.
• Right to restriction of processing: You may request that we restrict how we use your data while any dispute or review is in progress.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to data portability: You may request a copy of your data in a machine-readable format for transfer to another service provider.

7Special Protection for Minors

The Maxwin platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that information and close the relevant account. If you believe someone under the age of 18 has registered a Maxwin account, please contact our support team immediately.

8Cross-Border Data Transfers

In the course of platform operations, your personal data may be processed or stored on servers located outside your country. Maxwin ensures that any such data transfers are carried out with adequate safeguards in place.

• All cross-border data transfers are conducted in accordance with valid data transfer agreements and recognised protection mechanisms.
• Our overseas data processing partners are required to comply with data protection standards equivalent to local standards.
• We use recognised standard contractual clauses to protect your rights when data is transferred across borders.

9Data Retention Period

Maxwin retains your personal data for as long as your account is active or as long as required to provide services to you. After account closure, we retain certain data for an additional period to meet legal obligations.

• Financial transaction records and KYC documents are retained for a minimum of 7 years after account closure to meet anti-money laundering legal requirements.
• Communication logs with the support team are retained for 3 years for reference and dispute resolution purposes.
• Technical data and system logs are retained for 12 months before being automatically deleted.
• Once the applicable retention period has expired, your data will be securely deleted or anonymised so it can no longer be associated with you.

10Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is here to help.

You may contact the Maxwin Data Protection Officer by email at [email protected] with the subject "Privacy Inquiry". We are committed to responding to all privacy-related inquiries within 5 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. For more information about your rights, please also refer to Terms and Conditions and page Responsible Gaming ours.