Privacy Policy – Personal Data Protection for mxwin138 Members

Mxwin138 is an online entertainment platform built specifically for Malaysian players, and we understand that privacy is more than a legal requirement – it is the foundation of trust between you and us. This Privacy Policy sets out transparently how mxwin138 collects, processes, stores, and protects the personal data of all members who use our platform.

This document applies to all users of the mxwin138 platform, including website visitors, registered members, and anyone who interacts with our services through any channel. By registering an account with mxwin138 or continuing to use our platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our platform.

Mxwin138 operates on the principles of responsible data protection. We collect only the data strictly necessary to deliver our services, never sell your personal information to third parties for marketing purposes, and are committed to giving you full control over your own data.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy mxwin138 constitutes the entire agreement between you and our platform. The latest version of this Privacy Policy takes effect on 1 January 2026.

Mxwin138 collects your personal data in several ways – directly when you register and use the platform, automatically through web browser technology, and in some cases from trusted third parties. Below is a full breakdown of the types of data we collect:

Data You Provide Directly:

• Registration Information: Malaysian phone number, encrypted password, preferred username.
• Identity Verification Information: Full name, Malaysian identity card number (IC), date of birth – required for age verification and large withdrawal processing.
• Financial Information: E-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or Malaysian bank account details (Maybank2u, CIMB Clicks, and others) for deposit and withdrawal purposes.
• Communications: Any messages, complaints, or inquiries you send to the mxwin138 support team via live chat or email.

Automatically Collected Data:

• Technical Data: IP address, web browser type, device operating system, screen resolution, and device model.
• Usage Data: Pages visited, time spent on the platform, games played, bets placed, and complete transaction records.
• Location Data: Approximate location based on IP address for security and fraud prevention purposes only – we do not track your precise GPS location.
• Cookie Data: Session information, user preferences, and analytics data as described in Section 7.

Mxwin138 uses collected personal data solely for legitimate purposes necessary for platform operations. Below is a full table of data usage purposes and their applicable legal bases:

Mxwin138 does not use your personal data to make automated decisions that materially affect you without human involvement. All significant decisions, such as account closures or withdrawal holds, go through manual review by our team.

Mxwin138 does not sell, rent, or transfer member personal data to any third party for commercial marketing purposes. However, there are specific situations where mxwin138 may need to share data with trusted third parties for legitimate operational purposes:

• Payment Processors: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and Malaysian banks (Maybank, CIMB, and others) receive the transaction information necessary to process your deposits and withdrawals. All these payment processors are bound by strict data protection agreements.
• Game Providers: Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, and others receive the session data required to operate their games on the mxwin138 platform. Data shared is limited to session information and does not include full financial details.
• Security Services: Fraud prevention and identity verification service providers receive the data necessary to help mxwin138 detect and prevent fraudulent activity.
• Legal Authorities: mxwin138 may disclose data to the police, courts, or other Malaysian authorities where required by law or a valid court order.
• Technology Providers: The cloud computing, hosting, and technical infrastructure services used by mxwin138 may process data on servers governed by strict data processing agreements.

Mxwin138 does not share member data with advertising companies, data brokers, or any party not listed above. If this policy changes in the future, we will obtain your consent before any new sharing takes place.

Mxwin138 continuously invests in the latest security technologies and procedures to protect the personal data of all members in Malaysia. This goes beyond mere compliance — it is a core responsibility. Below are the security measures we have in place:

• 256-bit SSL Encryption: All communications between your browser or app and mxwin138's servers are encrypted using TLS 1.3 with 256-bit keys — the same standard used by Malaysia's leading banks.
• Encryption of Data at Rest: Sensitive data such as passwords and financial information is stored in encrypted form using bcrypt and AES-256 algorithms. Your password is never stored in plain text.
• Two-Factor Authentication (2FA): mxwin138 offers a 2FA option for members who wish to add an extra layer of security to their account via SMS OTP.
• Continuous Monitoring: The mxwin138 security system monitors suspicious activity around the clock using automated threat detection technology and manual reviews by our dedicated security team.
• Internal Access Controls: Only authorised mxwin138 staff with a legitimate need-to-know basis may access members' personal data. All access is logged and regularly audited.
• Periodic Security Testing: mxwin138 conducts regular penetration testing and security audits by independent cybersecurity firms to identify and address any vulnerabilities.

In the event of a data breach affecting your personal data, mxwin138 is committed to notifying you within 72 hours of becoming aware of the incident, in line with international best practices for data protection. Notification will be sent via the phone number or email address registered to your account.

Mxwin138 does not retain your personal data longer than necessary for the purposes for which it was collected. The table below outlines the key data retention periods:

Once the retention period has expired, data will be securely deleted or anonymised in accordance with established procedures. Anonymised data cannot be linked back to your identity and may be used for aggregate analytics purposes without a time limit.

Mxwin138 uses cookies – small text files stored on your device by your web browser – to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

• Essential Cookies (Required): Required for core mxwin138 platform functions – session authentication, login security, and language preferences. These cookies cannot be disabled as they are essential for the platform to operate properly.
• Performance Cookies: Collects information about how you use the platform (pages visited, time spent, errors encountered) in a form that does not identify you personally. This information helps us improve platform speed and reliability.
• Functional Cookies: Remembering your preferences and settings, such as language, default bet size, and display options, so you do not have to reconfigure them every time you log in.
• Analytics Cookies: mxwin138 uses reputable third-party analytics tools to understand aggregate platform usage patterns. This data is not linked to individual identities and is used solely for service improvement purposes.

You can control and manage cookies through your web browser settings. Disabling essential cookies may affect the functionality of the mxwin138 platform. For more information on managing cookies in your browser (Chrome, Safari, Firefox, or others), please refer to the relevant browser's help documentation.

Mxwin138 takes the protection of minors very seriously. Our platform is strictly for individuals aged 18 and above, and we do not knowingly collect or process personal data from anyone below that age.

Steps we take to protect children:

• All registrations require verification of a valid Malaysian phone number.
• Age verification is carried out during the registration process and prior to large withdrawals.
• We maintain a zero-tolerance policy toward any account suspected of being owned or used by individuals under 18 – such accounts will be closed immediately and all balances frozen pending investigation.

If you believe that a minor under the age of 18 has registered an account on mxwin138, please contact us immediately at support@mxwin138.click with the relevant account details. We will investigate and take prompt action.

Parents and guardians are encouraged to use parental control tools available on devices and web browsers to prevent minors from accessing platforms such as mxwin138.

Mxwin138 respects your right to control your personal data. To exercise any of the rights set out in Section 2 of this document, you may:

• Direct Contact: Send an email request to support@mxwin138.click clearly stating the right you wish to exercise and your account information (registered phone number). We will verify your identity before processing the request.
• Via Live Chat: Our Bahasa Melayu-speaking support agents are available to help you initiate a data request via live chat on the mxwin138 platform, 24 hours a day.
• Account Settings: Certain rights – such as updating your profile information, managing communication preferences, and setting gaming limits – can be exercised directly through your account settings on the platform.

Response Time: mxwin138 will acknowledge receipt of your request within 3 business days and complete it within 14 business days. For complex requests, this period may be extended to 30 days, with prior notification to you.

No Charges: Exercising your privacy rights is free of charge. mxwin138 does not impose any fees for processing reasonable data requests.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way mxwin138 handles your personal data, please contact us via:

• Email: support@mxwin138.click – we aim to respond to all privacy-related enquiries within 4 hours.
• Live Chat: Available on the mxwin138 platform, 24 hours a day, 7 days a week in Bahasa Melayu.

Privacy Policy Amendments: mxwin138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in platform operations, technology, or legal requirements. When significant changes occur, we will:

• Displaying a clear notice on the mxwin138 homepage at least 7 days before changes take effect.
• Sends notifications to all active members via their registered phone number or email.
• For changes that require new consent, we will obtain your explicit agreement before any new data processing begins.

The "Updated" date at the top of this document always reflects the date of the most recent amendment. You are encouraged to review this page periodically. Continued use of the mxwin138 platform following any amendments constitutes your acceptance of the updated terms.