Privacy Policy

Learn how max386 collects, uses, protects, and manages your personal information. Your privacy and data security are our top priorities.

Last Updated: January 1, 2026 | Effective Date: January 1, 2026

1. Introduction

This Privacy Policy explains how max386 ("we," "us," "our," or the "Company") collects, uses, processes, stores, shares, and protects the personal information of users ("you," "your," or "User") who access our online gaming platform, including our website located at https://max386.cam and all associated services (collectively, the "Services"). This Privacy Policy applies to all Indonesian residents and users accessing max386 from within Indonesian territory.

At max386, we are committed to protecting your privacy and handling your personal data with transparency, security, and respect. We recognize that when you choose to provide us with information about yourself, you trust us to act responsibly. This Privacy Policy describes the types of information we collect, how we use that information, with whom we share it, how we protect it, and the choices available to you regarding our use of your data.

By creating an account, accessing our website, using our Services, or providing your personal information to max386, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any aspect of this Privacy Policy, you must immediately discontinue use of our Services and refrain from providing any personal information.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together govern your use of max386 Services.

Your Data Rights

You have the right to access, correct, delete, or restrict the processing of your personal data at any time. Contact our Data Protection Officer at [email protected] to exercise these rights. We will respond to all requests within 30 days.

2. Information Controller

max386 is the data controller responsible for your personal information collected through our Services. For any questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact us at:

  • Email: [email protected]
  • Data Protection Officer: Available via email for privacy-specific inquiries
  • Response Time: We aim to respond to all privacy inquiries within 2-5 business days

3. Information We Collect

max386 collects several categories of personal information to provide, maintain, improve, and secure our Services. The types of information we collect include:

3.1 Information You Provide Directly

When you register for a max386 account or use our Services, you voluntarily provide the following information:

  • Account Registration Data: Full legal name, date of birth, gender, residential address in Indonesia, email address, mobile phone number, username, and password
  • Identity Verification (KYC) Documents: Government-issued identification (Indonesian National Identity Card / KTP, passport, or driving license), proof of address documents (utility bills, bank statements), selfie photographs holding identification documents, and payment method verification documents
  • Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay account identifiers), deposit and withdrawal transaction records, and payment method ownership verification
  • Communication Data: Customer support inquiries, live chat transcripts, email correspondence, feedback submissions, survey responses, and any other information you choose to provide when contacting us
  • Responsible Gaming Preferences: Self-imposed deposit limits, loss limits, session time restrictions, self-exclusion requests, and reality-check preferences

3.2 Information Collected Automatically

When you access max386, we automatically collect certain technical and usage information:

  • Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, mobile network information
  • Log Data: IP address, access dates and times, pages viewed, time spent on pages, referring URLs, exit pages, search queries entered on our website
  • Gaming Activity: Games played, bet amounts, win/loss records, game session durations, betting patterns, bonus claims and usage, tournament participation, loyalty program activity
  • Location Data: Approximate geographic location derived from IP address to verify you are accessing Services from within Indonesia
  • Cookies and Similar Technologies: We use cookies, web beacons, pixels, and similar tracking technologies to enhance user experience, remember preferences, analyze site traffic, and deliver targeted content. See Section 8 for detailed information about our cookie practices.

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

  • Payment Processors: Transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers to confirm deposit and withdrawal authenticity
  • Identity Verification Services: Age verification, identity authentication, and fraud prevention data from specialized KYC service providers
  • Affiliate Partners: Referral source information if you accessed max386 through an affiliate marketing link
  • Publicly Available Sources: Information available in public databases or regulatory watchlists for compliance and fraud prevention purposes

4. How We Use Your Information

max386 uses your personal information for the following purposes, all of which are necessary to provide our Services, comply with legal obligations, or pursue our legitimate business interests:

4.1 Service Provision and Account Management

  • Create and manage your max386 user account
  • Authenticate your identity and verify your eligibility to use our Services
  • Process deposits, withdrawals, and other financial transactions
  • Enable gameplay across casino games, sports betting, live dealer games, and other gambling products
  • Track your bets, winnings, losses, and account balance
  • Apply bonuses, promotions, and loyalty rewards to your account
  • Manage responsible gaming tools including deposit limits, self-exclusion, and session controls

4.2 Customer Support and Communication

  • Respond to your inquiries, questions, and support requests via live chat, email, or phone
  • Send important account notifications including transaction confirmations, security alerts, and policy updates
  • Provide updates about new games, features, and platform improvements
  • Conduct customer satisfaction surveys to improve service quality

4.3 Legal Compliance and Security

  • Verify your age to enforce our 21+ requirement and prevent underage gambling
  • Comply with Know Your Customer (KYC) and anti-money laundering (AML) regulations
  • Detect, prevent, and investigate fraud, money laundering, collusion, bonus abuse, and other prohibited activities
  • Enforce our Terms and Conditions and protect the integrity of our platform
  • Respond to legal requests, court orders, and regulatory inquiries from governmental authorities
  • Maintain audit logs and transaction records as required by gaming regulations

4.4 Platform Improvement and Analytics

  • Analyze user behavior and preferences to improve website design, navigation, and user experience
  • Monitor platform performance, identify technical issues, and optimize system reliability
  • Conduct internal research and statistical analysis to understand gaming trends and player preferences
  • Test new features, games, and functionality before public release
  • Generate aggregated, anonymized reports for business intelligence purposes

4.5 Marketing and Promotions (With Your Consent)

  • Send promotional emails about bonuses, new games, tournaments, and special offers (only if you have opted in)
  • Display personalized game recommendations based on your playing history and preferences
  • Notify you about exclusive VIP program benefits and tier upgrades
  • Deliver targeted content relevant to Indonesian players, including promotions aligned with Indonesian holidays and cultural events

You may opt out of marketing communications at any time by clicking the unsubscribe link in promotional emails, adjusting your account preferences, or contacting customer support. Opting out of marketing does not affect essential service communications.

5. Legal Bases for Processing

max386 processes your personal information based on the following legal grounds:

  • Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services, processing transactions, managing your account) under our Terms and Conditions
  • Legal Obligation: Processing is required to comply with legal and regulatory obligations including age verification, KYC/AML requirements, tax reporting, and response to law enforcement requests
  • Legitimate Interests: Processing is necessary for our legitimate business interests including fraud prevention, platform security, service improvement, customer support, and business analytics, provided such interests do not override your fundamental rights
  • Consent: For marketing communications and non-essential data processing, we obtain your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing based on consent before withdrawal

6. Information Sharing and Disclosure

max386 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following limited circumstances:

6.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist us in operating our platform:

  • Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay, ShopeePay), and payment gateways that facilitate deposits and withdrawals
  • Game Providers: Software developers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and others who power our casino games, live dealer tables, and sports betting platform
  • Identity Verification Services: Specialized KYC/AML providers that verify your identity, age, and address
  • Cloud Hosting and IT Infrastructure: Secure server hosting, data storage, backup, and cybersecurity services
  • Customer Support Tools: Live chat platforms, email services, and CRM systems that enable us to respond to your inquiries
  • Analytics Providers: Web analytics and business intelligence tools that help us understand platform usage (these typically use anonymized or aggregated data)

All third-party service providers are contractually obligated to protect your data, use it only for the specified purposes, and comply with applicable data protection laws. We conduct due diligence to ensure our partners maintain adequate security standards.

6.2 Legal and Regulatory Authorities

We may disclose your information to governmental bodies, regulatory agencies, law enforcement, or courts when legally required or when we believe in good faith that disclosure is necessary to:

  • Comply with legal obligations, court orders, subpoenas, or regulatory requests
  • Enforce our Terms and Conditions or other legal rights
  • Protect the safety, rights, or property of max386, our users, or the public
  • Investigate and prevent fraud, money laundering, or other illegal activities
  • Respond to emergency situations involving potential harm to individuals

6.3 Business Transfers

In the event max386 undergoes a merger, acquisition, bankruptcy, dissolution, reorganization, or sale of assets, your personal information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our website before your information becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information with third parties for purposes not described in this Privacy Policy if we obtain your explicit consent to do so.

7. Data Security Measures

max386 takes the security of your personal information extremely seriously. We implement industry-standard technical, administrative, and physical safeguards to protect your data from unauthorized access, disclosure, alteration, and destruction:

  • Encryption: All sensitive data transmissions between your device and our servers are encrypted using 256-bit SSL/TLS technology, the same standard used by online banking institutions
  • Secure Storage: Personal information is stored on secure servers with restricted access, located in protected data centers with 24/7 monitoring, redundant power supplies, and environmental controls
  • Access Controls: We enforce strict role-based access controls ensuring only authorized personnel with legitimate business needs can access personal data. All access is logged and audited.
  • Password Security: User passwords are hashed using strong cryptographic algorithms and are never stored in plain text
  • Regular Security Audits: Our systems undergo periodic penetration testing, vulnerability assessments, and security audits by independent third-party experts
  • Employee Training: All max386 staff receive regular data protection and cybersecurity training and are bound by strict confidentiality obligations
  • Incident Response: We maintain a comprehensive data breach response plan to rapidly detect, contain, and mitigate any security incidents

While we employ robust security measures, no method of transmission over the internet or electronic storage is 100% secure. You also play a role in protecting your information by using a strong, unique password, not sharing your account credentials, logging out after sessions, and contacting us immediately if you suspect unauthorized account access.

8. Cookies and Tracking Technologies

max386 uses cookies, web beacons, pixels, and similar tracking technologies to enhance your browsing experience, analyze site usage, and deliver personalized content. Cookies are small text files stored on your device that allow our website to recognize you and remember your preferences.

Types of Cookies We Use:

Cookie Type Purpose Duration
Essential Cookies Required for basic website functionality including login, account access, transaction processing, and security features Session or up to 1 year
Performance Cookies Collect information about how you use our website to improve performance and user experience Up to 2 years
Functionality Cookies Remember your preferences such as language, currency display, and customized settings Up to 1 year
Analytics Cookies Help us understand visitor behavior through aggregated statistics (typically anonymized) Up to 2 years
Marketing Cookies Track your browsing to deliver relevant promotional content (only with your consent) Up to 1 year

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may impair your ability to use certain features of max386. Disabling non-essential cookies will not affect core functionality.

9. Data Retention

max386 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, enforce our agreements, and maintain business records.

Specific retention periods include:

  • Active Accounts: We retain all account information and transaction records for the duration your account remains open and active
  • Closed Accounts: After voluntary account closure, we retain personal information for a minimum of 7 years to comply with financial regulations, anti-money laundering laws, and tax reporting requirements
  • Transaction Records: Deposit and withdrawal records are retained for 10 years as required by Indonesian financial regulations
  • KYC Documentation: Identity verification documents are retained for 7 years following account closure
  • Communication Records: Customer support inquiries and correspondence are retained for 3 years
  • Marketing Data: If you opt out of marketing, your contact information is retained only to honor your opt-out preference

After applicable retention periods expire, we securely delete or anonymize your personal information. Some aggregated, anonymized data may be retained indefinitely for statistical and research purposes.

10. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

  • Right to Access: You may request a copy of the personal information we hold about you
  • Right to Rectification: You may request correction of inaccurate or incomplete personal information
  • Right to Erasure: You may request deletion of your personal information, subject to legal retention obligations
  • Right to Restriction: You may request that we limit the processing of your personal information in certain circumstances
  • Right to Data Portability: You may request a copy of your personal information in a structured, machine-readable format
  • Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your request. We will respond within 30 days. You may be required to verify your identity before we process your request. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

11. International Data Transfers

max386 primarily serves Indonesian residents and stores data within secure data centers. However, some of our service providers and business partners may be located outside Indonesia. When we transfer your personal information internationally, we ensure adequate safeguards are in place including standard contractual clauses, data processing agreements, and security certifications to protect your data in accordance with this Privacy Policy.

12. Children's Privacy

max386 strictly prohibits use of our Services by individuals under 21 years of age. We do not knowingly collect personal information from minors. Our age verification procedures are designed to prevent underage access. If we become aware that a user is under 21, we will immediately terminate the account and delete all associated personal information. Parents or guardians who believe a minor has provided information to max386 should contact us immediately at [email protected].

13. Changes to This Privacy Policy

max386 reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. We will post the revised Privacy Policy on this page with an updated "Last Updated" date. Material changes will be communicated via email to your registered email address or through prominent notice on our website. Your continued use of our Services following such notification constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about our privacy practices.

14. Contact Us

If you have questions, concerns, complaints, or requests regarding this Privacy Policy or max386's data protection practices, please contact us:

  • Email: [email protected]
  • Subject Line: "Privacy Inquiry" or "Data Protection Request"
  • Data Protection Officer: Available via email for privacy-specific matters
  • Response Time: We aim to respond to all privacy inquiries within 2-5 business days

We take all privacy concerns seriously and will investigate and respond to your inquiry promptly and thoroughly.

Our Privacy Principles

Transparency

We are clear and open about what data we collect, why we collect it, and how we use it. No hidden practices or unclear terms.

Security First

Your data is protected with bank-grade 256-bit encryption, secure storage, strict access controls, and regular security audits.

User Control

You have full control over your data. Access, correct, delete, or restrict processing anytime by contacting our support team.

Purpose Limitation

We collect only the data necessary to provide our services and comply with legal obligations. No excessive or unnecessary collection.

Data Minimization

We retain your information only as long as legally required or necessary for service provision, then securely delete it.

No Data Selling

We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data is not a commodity.

Questions About Your Privacy?

Our Data Protection team is available 24/7 to address your privacy concerns and data protection questions.

Visit FAQ Return to Homepage