Privacy Policy maha168 — Personal Data Protection for Malaysian Members

Maha168 is an online entertainment platform operating in Malaysia, fully committed to protecting the privacy of every user. This Privacy Policy sets out in detail the data collection and usage practices maha168 follows when handling your personal information.

This document has been prepared in compliance with Personal Data Protection Act 2010 (PDPA) Malaysia and the guidelines issued by the Department of Personal Data Protection Malaysia. We believe that transparency in data management is the foundation of the trust you place in maha168.

This Privacy Policy applies to all registered maha168 members, website visitors, and anyone who interacts with our services, including via live chat, support email, or any other communication channels we provide.

Maha168 collects various categories of personal data depending on how you interact with our platform. The following are the main categories of data we collect:

Maha168 does not collect sensitive data such as medical information, religious beliefs, or sexual orientation. We only collect data that is strictly necessary for the purposes stated in this policy.

Maha168 collects your personal data through several different channels. It is important that you understand each method of collection so you can make informed decisions about the information you share with us.

How maha168 collects your data:

• Account registration form: When you register a maha168 account, we collect your name, phone number, email, and other basic information you enter directly.
• Deposit & withdrawal process: When you make a financial transaction via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX, transaction details are recorded for financial record-keeping and security purposes.
• In-platform activity: maha168 systems automatically record your game history, betting preferences, and usage patterns for security and service improvement purposes.
• Support communications: When you contact the maha168 support team via live chat or email, those conversations may be recorded for quality control and training purposes.
• Cookies and tracking technologies: Our platform uses cookies and similar technologies to understand how you use our website and to personalise your experience.
• Third-party verification: In certain cases, we may receive your information from trusted third-party identity verification service providers.

Maha168 uses collected personal data solely for legitimate, stated purposes. We do not use your data for anything unrelated to the services we provide to you.

Primary purposes of data use at maha168:

• Account management: To create, verify, and maintain your maha168 account so that it functions properly and securely.
• Transaction processing: Processing deposits and withdrawals via your preferred payment method — including DuitNow, TnG, GrabPay, and FPX — quickly and accurately.
• Fraud prevention: To identify and prevent fraudulent activity, money laundering, or platform abuse that could compromise the security of other members.
• Customer support: Providing responsive technical support and customer service whenever you need assistance with your maha168 account or games.
• Platform improvement: Analysing usage patterns to develop new features, improve the interface, and enhance the overall maha168 platform experience.
• Service communications: Sending important notifications about your account, policy changes, or critical security information.
• Marketing communications: To send you information about relevant maha168 promotions, bonuses, and offers (with your consent, which may be withdrawn at any time).
• Legal compliance: To fulfil legal and regulatory obligations applicable to maha168 in Malaysia, including reporting requirements to the relevant authorities.

Maha168 takes the sharing of your personal data very seriously. We do not sell, rent, or transfer your personal data to third parties for marketing purposes without your explicit consent.

Circumstances in which maha168 may share your data:

• Payment service providers: To process your transactions via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX, the necessary transaction information is shared with these providers on a strictly need-to-know basis.
• Game service providers: Live casino and slots providers such as Evolution Gaming and Pragmatic Play may receive a limited amount of technical data necessary to run games live on the maha168 platform.
• Legal authorities: maha168 is required to disclose information to Malaysian authorities (such as the police, courts, or regulators) when legally compelled to do so by law or a valid court order.
• Technology partners: IT service providers that assist in running maha168's technical operations may have limited access to data for technical purposes only, subject to strict confidentiality agreements.

Maha168 invests seriously in security infrastructure to ensure your personal data is protected at all times. We employ a combination of technical and procedural measures to prevent unauthorised access, data loss, or misuse.

Security measures practised by maha168:

• 256-bit SSL encryption for all data communications between you and the maha168 platform.
• Passwords are encrypted using a one-way hashing algorithm — not even maha168 staff can read your password.
• Two-factor authentication (2FA) that can be enabled for additional account protection.
• An intrusion detection system (IDS) that continuously monitors network traffic 24/7.
• Role-based access control — only maha168 employees who require access to specific data are authorised to do so.
• Regular security audits conducted by independent third-party experts to identify and address vulnerabilities.
• A tested incident response plan to ensure swift action in the event of any security breach.

While we take all reasonable steps to protect your data, no online security system can be guaranteed 100% safe. You also play an important role in protecting your maha168 account by using a strong password and never sharing it with anyone.

Maha168 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements.

• Active account data: Retained for the duration your account is active and for a reasonable period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements.
• Support communication logs: Retained for 2 years for reference and quality control purposes.
• Technical and log data: Retained for 90 days for technical troubleshooting purposes.
• Marketing data (with consent): Retained until you withdraw your consent to receive marketing communications.

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with maha168's approved data deletion procedures.

As a data subject under Malaysia's PDPA, you have specific rights regarding the personal data collected by maha168. We respect and facilitate the exercise of these rights.

To exercise any of the above rights, please contact us at support@maha168.click with the subject line "Personal Data Rights Request". maha168 will process your request within 14 business days.

Maha168 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit our website.

Types of cookies used by maha168:

• Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance cookies: Collecting information on how you use the maha168 platform to help us improve functionality and performance.
• Functional cookies: Saving your preferences such as language and display settings to deliver a more personalised experience.
• Analytics cookies: Helping us understand aggregate visitor behaviour for the continuous improvement of the maha168 platform.

You can control and manage cookies through your browser settings. However, disabling essential cookies may affect your ability to use certain features on maha168.

The maha168 platform may contain links or integrations to third-party services, including game providers such as Evolution Gaming and Pragmatic Play Live, as well as payment providers such as Touch 'n Go and DuitNow. maha168's Privacy Policy does not apply to those third-party websites or services.

Each third-party provider that works with maha168 is governed by its own privacy policy. maha168 recommends that you read the privacy policy of every third-party service you use, particularly payment providers that handle your financial transactions.

Maha168 is not responsible for the privacy practices or content of third-party websites. Your access to any such third-party services is entirely at your own risk.

Maha168 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. All amendments will be posted on this page with a new updated date.

For changes considered material — such as significant shifts in how we use your data — maha168 will endeavour to notify you via your registered email or a prominent in-platform notification at least 14 days before the changes take effect.

Your continued use of the maha168 platform following any amendments to this Privacy Policy constitutes your acceptance of the revised version. If you disagree with the changes, please stop using the platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding how maha168 handles your personal data, or if you wish to exercise any of the rights described in this policy, please contact us:

• Email: support@maha168.click (subject: "Privacy Enquiry")
• Live Chat: Available 24/7 on the maha168 platform
• Response Time: Within 14 business days for all privacy-related requests

If you are dissatisfied with how maha168 has handled your privacy complaint, you have the right to escalate the matter to Department of Personal Data Protection Malaysia which is the relevant regulatory authority.