At max389, your privacy is a fundamental right, not a checkbox. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and the rights you have over your own information as a registered player on our platform.
Summary: max389 collects only the personal data that is strictly necessary to operate a safe, compliant, and high-quality betting platform for players in Indonesia. We do not sell your data to third parties. We do not use your data for purposes beyond those described in this Policy. You retain full rights to access, correct, and request deletion of your personal information at any time.
This Privacy Policy ("Policy") is issued by max389 ("the Company", "we", "us", "our") and applies to all personal data collected from individuals ("you", "your", "the Player") who access, register on, or otherwise interact with the max389 platform available at https://max389.cam and any associated mobile interfaces.
max389 is committed to handling personal data with the highest standards of care, transparency, and security. This Policy has been drafted in accordance with internationally recognized data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework and applicable privacy standards relevant to our operations serving players across Indonesia.
By registering an Account or using the max389 platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue your use of the platform immediately and contact our support team to close your Account.
The following definitions apply throughout this Privacy Policy:
max389 collects the following categories of personal data from registered players and platform visitors:
3.1 Registration Data
3.2 Identity Verification (KYC) Data
3.3 Financial Data
3.4 Behavioral and Usage Data
3.5 Technical Data
Note on Sensitive Data: max389 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond responsible gaming assessments), or biometric data for identification purposes beyond standard KYC photo verification.
max389 collects personal data through the following channels:
max389 processes your personal data only for the following defined purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration Data |
| Age and identity verification (KYC) | Registration Data, KYC Data |
| Processing deposits and withdrawals | Financial Data, Registration Data |
| Fraud prevention and anti-money laundering (AML) | Financial Data, Behavioral Data, Technical Data |
| Responsible gaming monitoring and intervention | Behavioral Data, Registration Data |
| Customer support and dispute resolution | All categories as relevant to the query |
| Platform security and abuse prevention | Technical Data, Behavioral Data |
| Regulatory compliance and record-keeping | Registration Data, Financial Data, KYC Data |
| Service improvement and analytics | Behavioral Data, Technical Data (anonymized where possible) |
| Promotional communications (opt-in only) | Registration Data (email, phone) |
max389 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
max389 does not sell, rent, or trade your personal data. We share your data only in the following strictly limited circumstances:
No Cross-Border Data Sales: max389 does not transfer or sell your personal data to unrelated third-party marketers, advertising networks, or data brokers — whether within Indonesia or internationally. Any international data transfer carried out for legitimate operational purposes (such as cloud infrastructure hosting) is governed by standard contractual clauses that provide a level of protection equivalent to the standards described in this Policy.
max389 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Registration Data | Duration of Account + 5 years post-closure | Legal obligation / AML compliance |
| KYC Documents | 5 years from date of submission | Legal obligation / AML compliance |
| Financial Transaction Records | 5 years from transaction date | Legal obligation / financial record-keeping |
| Betting and Game History | 3 years from Account closure | Legitimate interests / dispute resolution |
| Customer Support Logs | 2 years from last interaction | Legitimate interests / quality assurance |
| Cookie and Session Data | Up to 12 months | Consent / platform functionality |
| Marketing Preferences | Until consent is withdrawn | Consent |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any individual player.
max389 employs a layered, defense-in-depth approach to data security. The technical and organizational measures in place include:
Your Responsibility: While max389 implements robust technical safeguards, the security of your Account is a shared responsibility. You should use a strong, unique password, never share your login credentials with any third party, and notify support immediately at [email protected] if you suspect your Account has been compromised.
max389 uses cookies and similar tracking technologies to operate the platform, improve user experience, and analyze aggregate usage patterns. The following cookie categories are in use:
You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform. max389 does not use third-party advertising or retargeting cookies.
As a registered player on max389, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request":
You may request a copy of all personal data we hold about you. We will provide a structured summary within 30 days of a verified request.
If any personal data we hold is inaccurate or incomplete, you have the right to request its correction. Certain corrections may require re-verification of your identity.
You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.
You may request that we limit the processing of your data in specific circumstances — for example, while the accuracy of data you have contested is being verified.
Where processing is based on your consent or contractual necessity, you may request a machine-readable export of your personal data to transfer to another service.
You may object to processing based on legitimate interests, including profiling for responsible gaming purposes. We will assess your objection and respond within 30 days.
Response Timeframe: max389 will acknowledge all data rights requests within 72 hours and provide a substantive response within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 30 days with prior notice. All requests are handled in Western Indonesia Time (WIB, UTC+7).
The max389 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect or process personal data from individuals under the age of 21. Registration by a minor is a material breach of our Terms & Conditions and will result in immediate Account closure and forfeiture of any associated balances.
If you are a parent or guardian and have reason to believe that a minor has registered on the max389 platform using your details or their own, please contact us immediately at [email protected]. We will investigate and, if confirmed, permanently delete all associated personal data without undue delay.
max389 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. When we make material changes, we will notify registered players via the email address associated with their Account at least 7 days before the changes take effect, wherever reasonably practicable.
The updated Policy will be published on this page with a revised "Last Updated" date. We encourage you to review this page periodically. Your continued use of the platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way max389 handles your personal data, please reach out to our dedicated Data Protection team through the following channels:
For a full overview of your account rights and platform rules, please also refer to our Terms & Conditions and our Responsible Gaming page.
Privacy at max389 is built into the platform from the ground up — not bolted on as an afterthought.
All data in transit between your device and our servers is protected by TLS 1.2+ encryption. Sensitive fields stored in our database — including KYC documents and financial account details — are encrypted at rest using AES-256.
Identity verification protects both you and the platform. Our KYC process ensures no one can access or withdraw funds from your Account without passing through multi-step identity confirmation aligned with international AML standards.
max389 has a firm, unconditional policy against selling, renting, or trading your personal data with advertisers, brokers, or unrelated third parties — ever. Your data exists only to make your experience on max389 safe and seamless.
Every piece of data we collect has a documented purpose — as detailed in Section 5 of this Policy. We do not collect data speculatively or retain it longer than necessary. Our retention schedule is published and followed rigorously.
You can request access to your data, correct inaccuracies, restrict certain processing activities, or request full deletion at any time. Our support team is trained to handle all data rights requests within the 30-day statutory window.
Our Indonesian-speaking support agents are available around the clock — including during Ramadhan, Idul Fitri, and all national public holidays — to answer any privacy-related question or process a data rights request promptly.
Our support team is available 24/7 to address any data protection concern. You can also review our full Terms & Conditions, explore our FAQ, or return to the homepage.