max368 Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how max368 ("we," "us," or "our") collects, uses, discloses, and protects the personal information of users ("you" or "your") who access or use our online gaming platform located at max368.cam. This policy applies to all personal data processed by max368 in connection with our services, including sports betting, live casino games, slot machines, and togel (Indonesia's traditional numbers lottery).

By creating an account with max368 or using our services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you must immediately discontinue use of max368 services.

max368 is committed to protecting your privacy and maintaining the security of your personal information in accordance with international data protection standards. We recognize that when you entrust us with your personal data, you expect transparency about how we use it and confidence that we will safeguard it appropriately.

2. Information We Collect

max368 collects several categories of personal information to provide, maintain, and improve our gaming services, ensure account security, comply with legal obligations, and prevent fraud.

2.1 Information You Provide Directly

When you register for a max368 account, you voluntarily provide the following information:

• Identity Information: Full legal name, date of birth, gender, and government-issued identification number (KTP number for Indonesian residents)
• Contact Information: Email address, mobile phone number, residential address (including city, province, and postal code)
• Account Credentials: Username, password, and security questions/answers
• Financial Information: Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, or e-wallet account information for OVO, DANA, GoPay, ShopeePay
• Verification Documents: Copies of government-issued photo identification (KTP, passport, driver's license), proof of address (utility bills, bank statements), and proof of payment method ownership as part of our Know Your Customer (KYC) procedures

2.2 Information Collected Automatically

When you access or use max368 services, we automatically collect certain technical and usage information:

• Device Information: IP address, device type, operating system, browser type and version, device identifiers, screen resolution
• Usage Data: Pages viewed, games played, bets placed, deposit and withdrawal history, time spent on platform, click patterns, referral sources
• Location Data: Approximate geographic location derived from your IP address (country, region, city level) to ensure service availability and comply with jurisdictional restrictions
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to remember your preferences, authenticate your sessions, analyze platform performance, and improve user experience (see Section 8 for detailed cookie policy)

2.3 Information from Third Parties

In limited circumstances, max368 may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation, payment method verification, and fraud detection signals from our banking and e-wallet partners
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from third-party verification providers
• Affiliate Partners: Referral information if you accessed max368 through a marketing partner or affiliate link

3. How We Use Your Information

max368 processes your personal information for the following legitimate purposes:

3.1 Service Delivery and Account Management

• Create and maintain your max368 account
• Authenticate your identity and verify your age (21+ requirement)
• Process deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other supported payment methods
• Process withdrawal requests and transfer winnings to your registered bank account or e-wallet
• Provide customer support and respond to your inquiries via live chat, email, or WhatsApp
• Enable gameplay, process bets, calculate winnings, and update account balances in real-time
• Administer bonuses, promotions, and VIP rewards programs

3.2 Security, Fraud Prevention, and Compliance

• Verify your identity through KYC procedures to prevent underage gambling, identity theft, and account fraud
• Detect and prevent fraudulent transactions, money laundering, collusion, bonus abuse, and other prohibited activities
• Monitor gameplay patterns to identify problem gambling behaviors and enforce responsible gaming limits
• Comply with anti-money laundering (AML) regulations, financial transaction reporting requirements, and gaming license obligations
• Investigate disputes, resolve complaints, and enforce our Terms & Conditions
• Maintain logs and records as required by applicable laws and regulations

3.3 Platform Improvement and Communication

• Analyze usage patterns to improve platform functionality, user interface, and game selection
• Personalize your gaming experience based on preferences and playing history
• Send transactional notifications (deposit confirmations, withdrawal approvals, bonus activations)
• Communicate important account updates, security alerts, policy changes, and responsible gaming reminders
• Send promotional communications about new games, special offers, and tournaments (with your consent, and you may opt out at any time)
• Conduct market research and gather feedback to enhance max368 services

4. Legal Basis for Processing

max368 processes your personal data under the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services, processing transactions, maintaining your account)
• Legal Obligation: Processing is required to comply with applicable laws, including age verification, AML regulations, tax reporting, and gaming license conditions
• Legitimate Interests: Processing is necessary for our legitimate business interests in preventing fraud, ensuring platform security, improving services, and conducting marketing (balanced against your privacy rights)
• Consent: Where required by law, we obtain your explicit consent before processing certain categories of data (such as marketing communications)

5. How We Share Your Information

max368 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality obligations:

5.1 Service Providers

We share necessary personal information with trusted third-party service providers who assist us in operating max368 platform:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) process deposits and withdrawals on our behalf
• Identity Verification Services: Third-party KYC providers verify your identity, age, and address to comply with regulatory requirements
• Cloud Hosting Providers: Secure cloud infrastructure providers host our servers and databases
• Customer Support Tools: Live chat, email, and ticketing systems used by our 24/7 Indonesian-speaking support team
• Analytics Providers: Website analytics and performance monitoring services (with anonymized or pseudonymized data where possible)

All service providers are contractually obligated to use your personal information only for the specific services they provide to max368 and to implement appropriate security measures.

5.2 Legal and Regulatory Authorities

max368 may disclose your personal information to law enforcement, regulatory bodies, courts, or government authorities when required by law or when we believe disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or regulatory request
• Enforce our Terms & Conditions or investigate suspected violations
• Protect the rights, property, or safety of max368, our players, or the public
• Detect, prevent, or address fraud, security issues, or illegal activities
• Respond to claims that content violates third-party rights

5.3 Business Transfers

In the event that max368 undergoes a business transition such as a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity as part of the transaction. You will be notified of any such change via email or prominent notice on our website.

6. Data Security Measures

max368 implements robust technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and max368 servers is encrypted using industry-standard 256-bit SSL/TLS encryption
• Secure Storage: Personal data is stored in encrypted databases with access restricted to authorized personnel only
• Access Controls: Role-based access controls, multi-factor authentication, and regular access audits limit who can view or modify your data
• Firewalls and Monitoring: Advanced firewalls, intrusion detection systems, and 24/7 security monitoring protect our infrastructure
• Regular Security Audits: Independent security assessments and penetration testing identify and address vulnerabilities
• Employee Training: All max368 staff undergo mandatory data protection and security awareness training
• Incident Response: We maintain a documented incident response plan to quickly address any security breaches

While we strive to protect your personal information using industry best practices, no method of electronic transmission or storage is 100% secure. You also have a responsibility to protect your account by choosing a strong password, never sharing your login credentials, and logging out after each session, especially on shared devices.

7. Data Retention

max368 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with legal, accounting, and regulatory obligations.

Data Category	Retention Period	Rationale
Account Information	Duration of account + 7 years after closure	Legal, tax, and regulatory compliance requirements
Transaction History	7 years after transaction date	Financial record-keeping and AML compliance
KYC Documents	7 years after account closure	Regulatory obligations and fraud prevention
Gameplay Records	5 years after gameplay	Dispute resolution and gaming license requirements
Marketing Preferences	Until you opt out or close account	Consent-based marketing communications
Support Communications	3 years after last contact	Quality assurance and dispute resolution

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data retention schedule. Anonymized data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

8. Cookies and Tracking Technologies

max368 uses cookies, web beacons, pixel tags, and similar technologies to enhance your experience, analyze platform usage, and deliver personalized content.

8.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality, including session management, authentication, and security features. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences (language, currency, display settings) to provide a more personalized experience.
• Analytics Cookies: Collect information about how you use max368 (pages visited, time spent, click patterns) to help us improve platform performance.
• Marketing Cookies: Track your browsing behavior across websites to deliver targeted advertisements and measure campaign effectiveness (used only with your consent).

8.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, though this may impact platform functionality. Note that essential cookies cannot be disabled as they are necessary for max368 services to operate.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal data max368 holds about you
• Right to Rectification: Correct inaccurate or incomplete personal information
• Right to Erasure: Request deletion of your personal data (subject to legal retention obligations)
• Right to Restrict Processing: Limit how max368 uses your personal information in certain circumstances
• Right to Data Portability: Receive your personal data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests, including direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time (without affecting lawfulness of prior processing)

To exercise any of these rights, please contact our Data Protection Officer at [email protected] or via 24/7 live chat. We will respond to your request within 30 days and may require verification of your identity before processing certain requests.

10. International Data Transfers

max368 primarily serves Indonesian residents, and your personal data is processed and stored on servers located in secure data centers. In some cases, your information may be transferred to service providers located outside Indonesia. When such transfers occur, max368 ensures appropriate safeguards are in place, including data processing agreements, encryption standards, and compliance with international data protection frameworks.

11. Children's Privacy

max368 services are strictly intended for individuals aged 21 years or older, in accordance with Indonesian legal standards for online gambling. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected data from a minor, we will immediately delete such information and terminate the associated account. Parents or guardians who believe their child has provided personal information to max368 should contact us immediately at [email protected].

12. Changes to This Privacy Policy

max368 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by email (to the address associated with your account) and/or by posting a prominent notice on our website at least 30 days before the changes take effect. Your continued use of max368 services after the effective date of the revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this policy indicates when it was most recently revised.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or max368's data practices, please contact us:

• Email: [email protected] (plain text, not a clickable link)
• Live Chat: Available 24/7 through the max368 website
• WhatsApp: +62 812 3456 7890 (plain text, not a clickable link)
• Data Protection Officer: For specific privacy inquiries, contact our Data Protection Officer at [email protected]

We are committed to addressing your privacy concerns promptly and transparently. Our Indonesian-speaking support team is available around the clock to assist you with any questions about how max368 collects, uses, and protects your personal information.