Privacy Policy maha168 — We Take Care of Your Data

Welcome to the Privacy Policy maha168. This document clearly and transparently explains how the platform maha168 — accessible via our website and mobile platform — collects, processes, stores, and protects your personal information.

This policy applies to all users who interact with the maha168, including unregistered visitors, registered members, and anyone who communicates with us through customer support channels. It covers all services we offer, including Live Casino games, slots, Sports Betting such as Malaysia Super League and EPL football, badminton, e-sports, table games, and all other platform features.

We take your privacy seriously because we understand that your trust is the foundation of the relationship between you and maha168. As such, we fully comply with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia and international standards in personal data management.

maha168 only collects information that is strictly necessary to deliver high-quality services, process financial transactions securely, and comply with applicable legal requirements. We do not collect excessive or irrelevant data.

For payments and financial transactions, maha168 only processes information related to recognised Malaysian payment methods, including Touch 'n Go eWallet, DuitNow, FPX (Maybank2u, CIMB Clicks), GrabPay, Boost, and ShopeePay. All transactions are conducted in MYR (RM). We do not store credit card details or bank account numbers directly in our systems — all transactions are processed through licensed, secure third-party payment providers.

Every piece of information we collect is used for a specific, legitimate purpose. Here is how maha168 uses your data:

• Account Management: Creating and maintaining your account, processing registration, verifying identity, and managing account settings
• Service Delivery: Enables you to access all games and platform features, including Live Casino, slots, table games, and Sports Betting
• Financial Processing: Securely processing deposits and withdrawals in MYR via Malaysian e-wallets and online banking
• Security & Fraud Prevention: Detecting and preventing suspicious activity, unauthorised use, and attempted fraud on your account
• Service Communications: To send important notifications related to your account, transactions, changes to terms, and security updates
• Marketing (with consent): Keeping you informed about maha168's latest promotions, bonuses, and offers — only for users who have opted in to receive marketing communications
• Legal Compliance: Fulfilling statutory obligations, responding to lawful regulatory requirements, and exercising our legal rights
• Platform Improvement: Analysing usage patterns to improve user experience, technical performance, and game variety

maha168 will not use your data for any purpose beyond those stated above without first obtaining your additional consent, unless required to do so by law.

In compliance with Malaysia's PDPA 2010, maha168 only processes your personal data on one or more of the following lawful bases:

• Contract Performance: Processing required to deliver the services you have requested — including account registration, processing deposits in MYR, and paying out winnings
• Legal Compliance: Our obligation to comply with statutory regulations such as Anti-Money Laundering (AML) requirements and identity verification (KYC)
• Legitimate Interests: Platform security, fraud prevention, and service improvement purposes that do not infringe on your fundamental rights
• Your Consent: For optional activities such as receiving marketing communications and promotional notifications — you may withdraw this consent at any time

Your privacy is our responsibility. maha168 upholds the principle that your data is never sold, rented, or shared for commercial purposes with any external party.

However, in the following limited circumstances, we may need to share certain data with third parties:

• Licensed Payment Providers: Transaction data is shared with payment processors such as e-wallet providers and Malaysian online banking services to process your deposits and withdrawals. All such providers maintain their own privacy policies and are bound by confidentiality agreements with us.
• Game Software Providers: Certain game session information is shared with game providers to ensure a seamless gaming experience and the resolution of any technical disputes.
• Statutory Authorities: Where required by Malaysian law, court order, or a lawful request from a law enforcement agency, we may be required to disclose the relevant data.
• Auditors & Professional Advisors: In the context of operational and compliance audits, certain data may be shared with independent auditors who are bound by strict confidentiality obligations.

Protecting your data is something that maha168 takes this very seriously. We implement multiple layers of technical and operational security measures to ensure your data is always protected from unauthorised access, loss, or misuse:

• Data Encryption in Transit: All communications between your device and maha168's servers are protected by TLS/SSL 256-bit protocols — the same level of security used by leading Malaysian banking institutions.
• Encryption of Stored Data: Sensitive data stored in our databases is encrypted using the latest industry standards, ensuring it remains unreadable even in the event of unauthorised access.
• Internal Access Controls: Only staff who require access to specific data to carry out their duties are permitted to do so — based on the need-to-know principle.
• Two-Factor Authentication (2FA): Two-factor authentication options are available for all maha168 accounts to provide an additional layer of security.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect unusual activity and security threats in real time.
• Regular Security Audits: Independent security assessments are conducted regularly by third-party specialists to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. In the event of any data security incident that affects you, maha168 is committed to notifying you promptly in accordance with applicable legal requirements.

maha168 does not retain your personal data longer than necessary. Retention periods are determined by the purpose of collection and applicable legal requirements:

• Active Account Data: Retained for the duration of your active account plus any additional period required for legal compliance following account closure
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with Malaysia's tax legislation and AML requirements
• Security Logs: Retained for 2 years for security incident investigation and fraud purposes
• Support Communication Data: Retained for 3 years for quality control and dispute resolution purposes
• Cookie Data: Session cookies are deleted when the browser is closed; persistent cookies are deleted after a set period or when you manually remove them

When data is no longer needed and there is no legal obligation to retain it, maha168 will securely delete or anonymise such information using industry-recognised methods.

As a data subject under Malaysia's PDPA 2010, you have important rights regarding your personal information held by maha168. We respect and facilitate the exercise of these rights:

maha168 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance & Analytics Cookies: Helps us understand how users interact with the platform for improvement purposes. Data is collected anonymously.
• Functional Cookies: Saves your preferences such as language, theme, and game settings for a more convenient returning experience.
• Marketing Cookies (with consent): Used to display advertisements relevant to your interests — activated only with your consent.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the platform maha168.

maha168 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this document
• Sending email notifications to all registered members at least 14 days before the changes take effect
• Displaying a clear notice on the platform's main page during the notice period

Continued use of the platform maha168 after the effective date of the changes will be deemed as your acceptance of the updated Privacy Policy. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how maha168 handles your personal data, we encourage you to reach out to us directly. Our Malay-speaking team is ready to assist:

• Privacy Email: support@maha168.ws (subject: "Privacy Enquiry")
• Live Chat: Available 24/7 within the maha168 platform — the fastest way to get a response
• WhatsApp: Number available in your account after logging in

We are committed to addressing every privacy-related enquiry with care and thoroughness. Responses are typically provided within 5 to 7 business days for written enquiries, and near-instantly via Live Chat.