max39 is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights available to you as a max39 account holder.
A plain-language summary of our key privacy commitments. The full legal policy below governs in all cases.
We collect registration details, identity verification documents, transaction records, gameplay data, and device/browser information necessary to operate your max39 account and comply with our licensing obligations.
All data transmitted to and from max39 is protected by 256-bit SSL encryption. Personal data at rest is stored in access-controlled, encrypted environments. We conduct regular security reviews and restrict internal data access on a need-to-know basis.
We do not sell your personal data. We share data only with regulated third parties required to deliver our services — payment processors, identity verification providers, game suppliers, and regulatory authorities where legally required.
You have the right to access, correct, and in certain circumstances request deletion of the personal data max39 holds about you. You may also withdraw consent for marketing communications at any time via your account settings.
max39 uses cookies and similar tracking technologies to maintain your session, remember preferences, and analyse platform usage. You can manage cookie preferences via your browser settings, though disabling certain cookies may affect platform functionality.
With your consent, max39 may send you promotional communications about bonuses, new games, and platform updates. You can opt out at any time. We do not send unsolicited marketing and will never share your contact details with third-party marketers.
This Privacy Policy ("Policy") describes how max39 ("max39", "we", "us", "our") collects, uses, stores, and discloses personal data in connection with the online gaming platform operated at max39.asia (the "Platform"). It applies to all individuals who register an account, visit the Platform, or otherwise interact with max39's services, including Malaysian players accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and elsewhere in Malaysia.
By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.
This Policy should be read in conjunction with the max39 Terms and Conditions, available at /terms-conditions.
For the purposes of applicable data protection legislation, max39 is the data controller in respect of personal data processed through the Platform. max39 operates under international gaming licensing, which imposes data protection obligations as a condition of that licence. All data processing activities are conducted in compliance with those obligations.
Contact details for data-related queries are set out in Section 16 of this Policy.
When you register a max39 account, we collect: full legal name, date of birth, residential address, nationality, email address, and a chosen username. As part of our Know Your Customer (KYC) and age verification processes, we may also collect copies of government-issued identity documents such as a Malaysian identity card (MyKad) or passport.
We collect details of all financial transactions conducted through your max39 account, including deposit amounts, withdrawal requests, payment method identifiers (such as the masked number of a bank account or registered eWallet associated with Touch n Go or Boost), transaction timestamps, and account balance history. This data is retained for regulatory and anti-money laundering compliance purposes.
We collect records of all gaming activity on the Platform, including games played, wager amounts, game outcomes, session duration, and bonus usage history. This data is used for account management, dispute resolution, responsible gaming monitoring, and improvement of our products.
We automatically collect technical data when you access the Platform, including IP address, device type, operating system, browser type and version, and session timestamps. This information is used for security monitoring, fraud prevention, and platform performance analysis.
We retain records of communications between you and max39, including live chat transcripts, support ticket history, and any written correspondence submitted to [email protected]. These records are used for quality assurance and dispute resolution purposes.
max39 collects personal data through the following means:
max39 processes your personal data for the following purposes and under the following legal bases:
max39 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We disclose personal data only in the following circumstances:
Some of max39's service providers and infrastructure are located outside of Malaysia. Where personal data is transferred internationally, max39 ensures that appropriate safeguards are in place — including contractual protections equivalent to applicable data protection standards — to protect your data during and after transfer. If you have questions about specific international transfers involving your data, please contact us using the details in Section 16.
max39 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods imposed by our gaming licence and applicable law:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.
max39 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform. Cookies are used for:
You may configure your browser to refuse cookies or to alert you when cookies are being sent. Disabling essential cookies will impair your ability to use the Platform. max39 does not use third-party advertising cookies.
With your consent, max39 may contact you by email with information about promotions, new games, Platform updates, and other offers relevant to your account. You may withdraw your consent and opt out of marketing communications at any time by updating your notification preferences in your account settings, or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing prior to withdrawal.
max39 does not engage in unsolicited marketing and will never share your contact details with third-party marketing organisations.
Subject to applicable law and our licensing obligations, you have the following rights in respect of your personal data:
To exercise any of these rights, please contact us using the details in Section 16. We will respond to verified data requests within thirty (30) days.
The max39 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, the associated account will be immediately closed, data will be deleted except where retention is required by law, and the matter will be handled in accordance with our responsible gaming obligations. Age verification is a mandatory step in the max39 account registration process.
max39 implements industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, multi-factor authentication for administrative access to systems holding personal data, regular penetration testing and security audits, and staff training on data protection and information security.
No data transmission over the internet or electronic storage system can be guaranteed as completely secure. While we apply appropriate safeguards, we cannot provide an absolute guarantee of security. In the event of a data breach that poses a high risk to your rights, we will notify you in accordance with our obligations under applicable law.
The Platform may contain links to internal pages and game interfaces provided by licensed third-party game suppliers. max39 is not responsible for the privacy practices of those game suppliers, though all suppliers are contractually required to meet data protection standards equivalent to those set out in this Policy. The Platform does not contain links to external third-party websites.
max39 reserves the right to amend this Privacy Policy at any time to reflect changes in law, licensing requirements, or our data processing practices. Where changes are material, we will notify you via the Platform or by email to the address registered on your account. The updated Policy will take effect on the date indicated at the top of this document. Your continued use of the Platform following that date constitutes acceptance of the revised Policy.
For any privacy-related queries, data subject requests, or concerns about how max39 processes your personal data, please contact us:
We aim to acknowledge all privacy-related communications within two (2) business days and to provide a substantive response within thirty (30) days. For complex or high-volume data access requests, the response period may be extended by a further thirty (30) days with notification.
This Privacy Policy was last updated on 11 June 2026.
Questions about your personal data or account privacy? Our 24/7 support team is always available. Log in to manage your privacy settings directly.