Privacy Policy

1 Introduction

This Privacy Policy ("Policy") sets out the basis on which tmax88 ("tmax88", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data in connection with the operation of the tmax88 online casino and sports betting platform, accessible at https://tmax88.cam.

tmax88 serves players across Malaysia, including those located in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and across the country. We are committed to handling your personal data with transparency, integrity, and in compliance with applicable data protection principles. This Policy explains what data we hold, why we hold it, how long we keep it, and what rights you have over it.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which form part of the overall agreement between you and tmax88.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings ascribed to them below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, location data, online identifiers, or factors specific to the physical, physiological, or economic identity of that person.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means tmax88, the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Subject" means any registered Member or visitor to the tmax88 platform whose personal data is processed.
• "Third Party" means any natural or legal person other than tmax88 and the Data Subject.
• "Cookie" means a small text file stored on a user's device by a website, used to retain session state and user preferences.
• "KYC" means Know Your Customer — the identity and age verification process required before financial transactions can be fully processed.
• "AML" means Anti-Money Laundering — regulatory obligations requiring tmax88 to monitor and report suspicious financial activity.

3 Data We Collect

tmax88 collects personal data that is necessary and proportionate to the purposes for which it is processed. The categories of personal data we may hold about you include:

4 How We Collect Your Data

tmax88 collects your personal data through the following channels and methods:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, submit a support request, or update your account settings, you provide data directly to tmax88.
• Automated technical collection: When you access the platform, our servers automatically collect technical data including your IP address, device fingerprint, browser configuration, and session activity. This data is collected through server logs, cookies, and similar tracking technologies.
• Payment processing partners: When you initiate a financial transaction through Maybank2u, CIMB Clicks, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency networks, relevant transaction confirmation data is shared with tmax88 by the payment intermediary.
• Identity verification services: Where automated document verification tools are employed during KYC processing, these services may share verification outcomes and extracted data fields with tmax88.
• Responsible gambling tools: Information you provide when activating deposit limits, self-exclusion, or other responsible gambling features is recorded and forms part of your account profile.

5 Data Processing & Use

tmax88 processes your personal data for the following specific purposes:

1. Account Management: Creating, maintaining, and administering your tmax88 account, including authentication, password resets, and communication of account-level notifications.
2. Transaction Processing: Facilitating deposits and withdrawals in MYR and supported cryptocurrencies, verifying payment methods, and maintaining accurate financial records.
3. Identity and Age Verification (KYC): Confirming that you meet the minimum age requirement of 21 years and that you are who you claim to be, in accordance with our obligations to prevent underage gambling and fraud.
4. Anti-Money Laundering (AML) Compliance: Monitoring transaction patterns, detecting suspicious activity, and fulfilling reporting obligations to relevant financial intelligence authorities.
5. Fraud Prevention and Platform Security: Detecting and preventing unauthorised access, multi-accounting, collusion, bonus abuse, and other prohibited activities.
6. Customer Support: Responding to your queries, resolving disputes, and processing complaints submitted through live chat or email.
7. Responsible Gambling: Monitoring your account usage for indicators of problem gambling and administering self-exclusion, deposit limit, and cooling-off tools you have activated.
8. Legal and Regulatory Compliance: Retaining records as required by applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms & Conditions.
9. Platform Improvement: Analysing aggregated and anonymised usage data to identify technical issues, improve game performance, and enhance the overall player experience.
10. Marketing Communications: Where you have provided explicit consent, sending you promotional offers, bonuses, and product updates relevant to your gaming interests. You may withdraw consent at any time by contacting support.

6 Legal Basis for Processing

tmax88 processes your personal data only where there is a legitimate legal basis to do so. The primary legal bases on which we rely are:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered Member — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws — including KYC/AML obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing undertaken to protect the security and integrity of the platform, prevent fraud, and improve our services, where these interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and certain non-essential cookies, where you have given your explicit and informed consent. Consent can be withdrawn at any time without affecting the lawfulness of processing that took place before withdrawal.

7 Data Sharing & Disclosure

tmax88 does not sell, rent, or trade your personal data to any third party. However, in the course of providing our services, we may share your data with the following categories of recipients, under appropriate confidentiality and data processing obligations:

• Payment processors and financial institutions: Banks, e-wallet providers (including Touch 'n Go eWallet, Boost, and GrabPay), FPX payment network operators, and cryptocurrency gateway providers, to process deposits and withdrawals.
• Identity verification service providers: Third-party KYC/AML verification platforms used to authenticate your identity documents and screen against sanctions and PEP (Politically Exposed Person) lists.
• Game software providers: Licensed casino game studios and sportsbook data providers whose software powers the games and betting markets available on tmax88. These providers may receive aggregated, non-identifying session data for technical integration purposes.
• IT infrastructure and cloud service providers: Hosting, server management, cybersecurity, and analytics service providers engaged to operate and maintain the tmax88 platform.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, courts, or regulatory bodies where disclosure is required by law or in response to a valid legal order.
• Professional advisers: Lawyers, auditors, and compliance consultants, where disclosure is necessary for the provision of professional services to tmax88, under obligations of professional confidentiality.

8 Data Retention

tmax88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your active account and for a period of up to seven (7) years following account closure, in accordance with AML record-keeping obligations.
• Transaction records: Retained for a minimum of seven (7) years from the date of each transaction, as required for financial compliance purposes.
• KYC and verification documents: Retained for the duration of your account and for up to seven (7) years post-closure, consistent with AML regulatory requirements.
• Customer support communications: Retained for up to three (3) years following the closure of each support ticket, to support dispute resolution and quality assurance.
• Marketing consent records: Retained for as long as the consent remains active and for a reasonable period thereafter to demonstrate compliance.
• Technical and usage data (server logs): Typically retained for up to twelve (12) months for security monitoring purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where deletion is not technically feasible in the short term (e.g., backup archives), the data will be isolated and protected from further processing until deletion is practicable.

9 Cookies & Tracking Technologies

tmax88 uses cookies and similar tracking technologies to operate the platform effectively, maintain your session, and protect against fraud. Cookies are small text files stored on your device when you visit the platform.

The cookies used by tmax88 fall into the following categories:

• Strictly necessary cookies: Essential for the basic operation of the platform — including maintaining your logged-in session, processing transactions, and preserving your language and display preferences. These cookies cannot be disabled without affecting core platform functionality.
• Security cookies: Used to detect and prevent fraudulent activity, multi-accounting, and bot access. These cookies collect device fingerprint information and session behaviour patterns for risk scoring purposes.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the platform — including pages visited, features used, and time spent in session. This data helps us improve platform performance and user experience. Where possible, analytics are processed without identifying individual users.
• Preference cookies: Used to remember your settings and preferences across sessions, such as your preferred language, deposit limits you have set, and game display options.

tmax88 does not use cookies to serve third-party advertising, track you across unrelated websites, or build advertising profiles linked to your identity.

10 Data Security

tmax88 implements a layered approach to data security, combining technical, organisational, and procedural measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction.

Our key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and tmax88 servers.
• Encrypted storage of passwords, payment credentials, and sensitive account data at rest, using industry-standard hashing and encryption algorithms.
• Access controls restricting access to personal data to authorised personnel whose roles require it, governed by role-based access management policies.
• Regular security assessments including penetration testing, vulnerability scanning, and code review of the platform infrastructure.
• Incident response procedures enabling rapid detection, containment, and notification in the event of a suspected data breach.
• Staff training on data protection obligations, secure data handling, and phishing/social engineering awareness.

11 Your Rights

As a Data Subject whose personal data is processed by tmax88, you hold the following rights with respect to your personal information. Requests to exercise any of these rights should be submitted in writing to [email protected] with sufficient information to verify your identity.

1. Right of Access: You have the right to request a copy of the personal data tmax88 holds about you, together with information about how it is used. We will respond to verified access requests within 30 days.
2. Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., contact number or email address) can be made directly within your account settings.
3. Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where: (a) it is no longer necessary for the purpose it was collected; (b) you withdraw consent and no other legal basis exists; or (c) you object to processing and we have no overriding legitimate interest. Note that this right is subject to our legal retention obligations — data required for AML, KYC, or dispute resolution purposes cannot be deleted within mandatory retention periods.
4. Right to Restriction of Processing: You may request that tmax88 suspend active processing of your personal data in certain circumstances — for example, while the accuracy of data is contested, or while an objection to processing is assessed.
5. Right to Data Portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
6. Right to Object: You have the right to object to processing based on legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes, which we will honour immediately upon receipt of your request.
7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

12 Minors & Age Restriction

tmax88 is strictly an adults-only platform. Our services are intended exclusively for persons aged 21 years and above. We do not knowingly collect personal data from any person below the age of 21.

During account registration, all applicants are required to confirm their date of birth and agree that they meet the minimum age requirement. tmax88 reserves the right to request age verification documents at any time, and will immediately suspend any account where the holder is found or suspected to be below 21 years of age. Any personal data collected in connection with an account subsequently found to belong to a minor will be deleted as soon as practicable following discovery.

13 International Data Transfers

In the course of providing our services, some of your personal data may be transferred to and processed in countries outside of Malaysia. This may occur where tmax88 engages service providers — such as cloud hosting platforms, KYC verification services, or game software providers — that operate internationally.

Where personal data is transferred internationally, tmax88 takes steps to ensure that appropriate safeguards are in place to protect your data, including contractual obligations on recipients that meet standards consistent with applicable data protection principles. We do not transfer data to parties that cannot demonstrate adequate data protection standards.

14 Third-Party Services

The tmax88 platform may incorporate third-party software components — including game engines from licensed studios, payment gateway interfaces, and live streaming technology from professional casino studio operators. These third-party components operate within the tmax88 environment but are governed in part by the privacy practices of the respective providers.

tmax88 is not responsible for the privacy practices of third-party content providers whose software is embedded within the platform. We encourage you to review the privacy documentation of any third-party services you interact with, particularly in the context of live casino games streamed from external studio environments.

This Policy does not extend to any website or service that is independently operated and accessible via any link outside of the tmax88 domain. tmax88's navigation and footer contain only internal links — no outbound links to third-party websites appear on this platform.

15 Policy Amendments

tmax88 reserves the right to update or amend this Privacy Policy at any time. Material changes to the Policy — particularly those that affect the scope of data collected, the purposes for which data is used, or your rights as a Data Subject — will be communicated to registered Members via platform notification or email prior to the changes taking effect.

The "Last Updated" date at the top of this page will be revised on each occasion this Policy is amended. Your continued use of the tmax88 platform following notification of any amendment constitutes your acceptance of the revised Policy.

We recommend that you review this Policy periodically to remain informed of how tmax88 handles your personal data. If you have concerns about any amendment, please contact our support team before continuing to use the platform.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tmax88 handles your personal data, please contact us through the following channels:

When submitting a data rights request, please include your registered account username, the nature of your request (e.g., access, correction, deletion), and any relevant context. Identity verification may be required before we can action your request.