At maha68, your privacy is not merely a legal obligation — it is our commitment to every member. This document transparently explains how we collect, use and protect your personal information at every stage of your platform experience.
This Privacy Policy applies to all users of the maha68 platform, including website visitors, registered members and users of our mobile app. By using maha68 services, you agree to the data collection and processing practices described below.
Maha68 takes the responsibility of protecting your privacy extremely seriously. As an online gaming platform operating in Malaysia, we are subject to Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international standards in personal data management.
We believe that user trust is our most valuable asset. Every decision involving your personal data is made with care and accountability. We never sell, rent, or trade your personal information to third parties for commercial purposes without your explicit consent.
This policy is written in plain language because we want you to truly understand what happens with your data — not just to meet legal requirements. If any section is unclear, our support team is available to assist you at any time.
We only collect information that is strictly necessary to provide you with a safe, seamless, and personalised service. The following are the categories of information we collect:
| Data Category | Example Information | Primary Purposes |
|---|---|---|
| Identity Information | Full name, MyKad/passport number, date of birth | KYC verification & fraud prevention |
| Contact Information | Email address, phone number, residential address | Account communications & customer support |
| Financial Information | Bank account number, transaction records, payment methods | Deposit & withdrawal processing |
| Usage Data | Game history, betting habits, active hours | Personalised experience & responsible gaming |
| Technical Data | IP address, device type, web browser, general location | Account security & fraud detection |
| Communication Data | Support chat records, feedback, complaints | Service improvement & issue resolution |
We never collect sensitive information such as passwords in plain text, full credit card details (CVV numbers are stored separately with additional encryption), or medical information without a specific need and your consent.
Every piece of information we collect has a clear purpose. We do not process your data arbitrarily. The following are the primary purposes for which your personal data is used at maha68:
We will not use your data for purposes not stated above without obtaining your consent first. If we wish to use your data for a new purpose, you will be informed and given the option to accept or decline.
Maha68 does not sell or disclose your personal information to third parties for marketing purposes. However, there are specific situations where data sharing is necessary to ensure our services function properly:
All our third-party partners are required to comply with data protection standards equal to or higher than maha68's own standards. They are only permitted to use your data for the agreed service purposes, and are strictly prohibited from using it for any other purpose.
Maha68 continuously invests in robust security infrastructure to ensure your data is always protected against cyber threats, unauthorised access, and data breaches.
The technical protection layers we employ include:
While we take all reasonable security measures, no system is 100% immune. You also play an important role — please use a strong password, enable 2FA, and never share your login credentials with anyone.
Maha68 uses cookies and similar tracking technologies to enhance your browsing experience, understand platform usage patterns, and deliver more relevant content.
Types of cookies we use:
You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the maha68 platform. By continuing to use our platform after being informed of our cookie use, you are deemed to have consented to our cookie policy.
Maha68 does not retain your personal data longer than necessary. Data retention periods are determined based on service requirements, legal obligations, and our legitimate interests.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account information | Throughout the active account period | Service operational requirements |
| Financial transaction records | 7 years after transaction | Malaysia legal & tax requirements |
| KYC Documents | 5 years after account closure | AML compliance & regulatory requirements |
| Security logs | 2 years | Security incident investigation |
| Support communication records | 3 years | Service reference & dispute resolution |
| Marketing data (with consent) | Until consent is withdrawn | Relevant promotional communications |
Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be personally associated with you.
Under Malaysia's Personal Data Protection Act 2010 and maha68 policies, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:
To exercise any of the rights below, please contact our privacy team at [email protected]. We will process your request within 14 working days and may require identity verification before responding.
Maha68 is a gaming platform that exclusively for individuals aged 18 and above. We do not intentionally collect, process or store personal information from children or minors under the age of 18.
Steps we take to prevent underage access:
If we determine that we have collected information from someone under the age of 18, we will take immediate action to delete that data and close the relevant account. Parents or guardians who believe their child may have registered a maha68 account without permission are encouraged to contact us immediately.
Maha68 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or evolving industry standards.
How we notify you of changes:
Continued use of the maha68 platform after any amendments to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the amendments, you have the right to close your account before the changes take effect.
If you have any questions, concerns, or wish to exercise your rights in relation to this Privacy Policy, please contact us through the following channels:
We welcome any feedback regarding our Privacy Policy. Your trust is the foundation of our service, and we are committed to being increasingly transparent and responsible in managing your personal data.
Under Malaysia's PDPA and our privacy policy, you have full control over your personal data.
You have the right to know what personal data we hold about you and to request a full copy at any time.
If your information is inaccurate or outdated, you have the right to request that we correct or update it promptly.
You may request that we delete your personal data, subject to applicable legal retention obligations.
You may object to the processing of your data for direct marketing or certain other purposes at any time.
You have the right to receive your personal data in a machine-readable format for transfer to another platform.
In certain circumstances, you may request that we restrict the processing of your data while your request is being resolved.
Six layers of data protection ensuring your privacy is maintained at every stage of your platform experience.
All communications between your device and maha68 servers are encrypted using the latest TLS 1.3 protocol — the same security technology used by Malaysia's leading banks to protect online transactions.
An additional security layer that requires verification via your trusted device each time you log in from a new location or device, ensuring only you can access your account.
Certified independent cybersecurity firms conduct regular penetration testing and comprehensive audits to ensure our data protection systems consistently meet the latest international standards.
Your data is stored in certified data centres with multi-layered physical and digital security controls, including the isolation of sensitive data in environments fully separated from public-facing systems.
Our security team monitors platform activity 24 hours a day, 7 days a week using an AI-based threat detection system capable of identifying and blocking unauthorised access attempts in real time.
Maha68 operates in full compliance with Malaysia's Personal Data Protection Act 2010, ensuring that your rights as a data subject are always respected and protected under local law.
With bank-grade data protection and a full commitment to your privacy, join over 500,000 maha68 members who play with complete confidence today.