🔒 Data Protection & Privacy
Maha303 is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains precisely what data we collect, how we use it, who we may share it with, and the rights you hold as a data subject under applicable privacy law. Please read this document in full before registering an account.
Our Privacy Commitments
Every data processing decision at Maha303 is measured against these foundational principles. They are not just policy — they are how we operate, day to day.
We collect personal data for specific, clearly stated purposes only — account management, KYC verification, payment processing, fraud prevention, and regulatory compliance. We do not use your data for unrelated secondary purposes without your explicit consent.
We collect only what is strictly necessary. If a piece of information is not required to operate your Maha303 account safely and legally, we do not ask for it. This includes personal identity data, payment information, and communications history.
All personal data processed by Maha303 is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to player data is restricted to authorised personnel only, with role-based access controls enforced across all internal systems.
We take reasonable steps to ensure the data we hold about you is accurate and up to date. You may update your account information at any time via your account settings, and you can request a copy of the data we hold about you at any time.
We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Inactive account data is reviewed periodically and securely deleted in accordance with our data retention schedule.
You have enforceable rights over your personal data — including the right to access, correct, delete, and restrict processing. We treat these rights as genuine obligations, not optional commitments. Requests are typically fulfilled within 30 days of receipt.
Section 01
This Privacy Policy (hereinafter referred to as "the Policy", "this Notice", or "Privacy Policy") is issued by Maha303 (hereinafter referred to as "Maha303", "the Platform", "we", "us", or "our") and describes how we collect, use, store, share, and protect the personal information of individuals who access and use the Maha303 website located at maha303.cam and all associated services, features, and functionality (collectively referred to as "the Platform" or "the Services").
This Policy applies to all registered players, visitors to the Maha303 website, and any other individuals whose personal data is processed by Maha303 in connection with the provision of the Services. It should be read together with our Terms & Conditions, which govern your overall use of the platform.
Malaysian Players: Maha303 serves players primarily located in Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations across the country. The processing of your personal data in connection with the platform is conducted in accordance with applicable privacy legislation. We are committed to ensuring that our data practices meet the standards expected by Malaysian players and applicable regulatory frameworks.
By registering an account on the Maha303 platform or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood the contents of this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must cease using the platform and contact our support team to close your account.
Section 02
For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that relates to an identified or identifiable natural person — including name, identification number, contact details, financial information, online identifiers, and device data. |
| "Data Subject" | The identified or identifiable natural person to whom personal data relates — in the context of this Policy, primarily registered Maha303 players and website visitors. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, Maha303 acts as the Data Controller in respect of all player personal data. |
| "Third Party" | Any natural or legal person other than the Data Subject and Maha303, including service providers, payment processors, identity verification partners, and regulatory authorities. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a stated purpose. |
| "KYC" | Know Your Customer — the identity and age verification process conducted by Maha303 prior to authorising withdrawals from a player's account. |
| "Cookie" | A small text file placed on a user's device by a website server, used to store information about the user's preferences, session data, and browsing behaviour on the platform. |
Section 03
Maha303 collects the following categories of personal data from players and website visitors in the course of providing the Services:
Note on Sensitive Data: Maha303 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, or health data, except where directly relevant to responsible gambling obligations (for example, where a player self-identifies as experiencing gambling-related difficulties).
Section 04
Maha303 collects personal data through the following channels and mechanisms:
Section 05
Maha303 processes personal data only where a valid legal basis exists under applicable privacy legislation. The primary legal bases we rely upon are as follows:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Account registration, deposit and withdrawal processing, game participation, KYC verification, and the provision of all platform services necessary to fulfil the agreement between Maha303 and the Player. |
| Legal Obligation | Anti-money laundering (AML) compliance, identity verification under Know Your Customer (KYC) obligations, age verification, record retention as required by applicable law, and cooperation with regulatory and law enforcement authorities. |
| Legitimate Interests | Fraud detection and prevention, platform security monitoring, responsible gambling monitoring, system optimisation, and internal analytics to improve the platform experience for Malaysian players. |
| Consent | Optional marketing communications (email newsletters, promotional offers). Consent can be withdrawn at any time by updating your communication preferences in your account settings or by contacting our support team. |
Section 06
Maha303 uses the personal data it collects for the following purposes:
Marketing Opt-Out: You can withdraw your consent to receive marketing communications at any time by updating your preferences in your account settings or by contacting our support team at [email protected]. Withdrawal of marketing consent does not affect the processing of data for other lawful purposes.
Section 07
Maha303 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. We may, however, share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:
Maha303 engages third-party service providers to assist with the operation of the platform. These include payment processors (DuitNow, FPX network participants, e-wallet providers), identity verification and KYC service providers, cloud hosting and infrastructure providers, fraud detection and risk monitoring services, and customer support platform operators. All such providers are bound by data processing agreements that restrict their use of player data to the specific services they provide on Maha303's behalf.
Maha303 may disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies where required to do so by applicable law, court order, or legitimate regulatory request. Such disclosures are made strictly in accordance with our legal obligations and only to the extent required by the relevant authority.
In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being subject to a different privacy policy.
Maha303 may disclose personal data where we believe, in good faith, that such disclosure is necessary to protect the rights, property, or safety of Maha303, our players, or the general public — for example, in the investigation of fraud, money laundering, or other criminal activity.
⚠️ Third-Party Links: The Maha303 platform may contain references to third-party services. Maha303 is not responsible for the privacy practices of any third-party services and this Policy does not apply to data collected by entities other than Maha303.
Section 08
The Maha303 website uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience for players across Malaysia. The following categories of cookies are used on the platform:
| Cookie Type | Purpose | Basis |
|---|---|---|
| Strictly Necessary | Essential for platform operation — authentication, session management, security tokens, and fraud prevention. Cannot be disabled without affecting core platform functionality. | Contractual necessity / legitimate interests |
| Functional | Remember user preferences such as language selection, preferred payment method, and display settings to personalise the platform experience. | Legitimate interests / consent |
| Analytical | Collect aggregated information on how players navigate and use the platform — used to identify performance issues and improve the user experience. No personally identifiable data is included in analytical reports. | Legitimate interests / consent |
| Marketing | Track interactions with promotional materials and measure the effectiveness of our marketing communications. Only used where the player has provided consent. | Consent only |
Most web browsers allow you to manage cookie preferences through browser settings. You may choose to block or delete cookies; however, doing so may affect the functionality of the Maha303 platform and prevent you from accessing certain features, including your account login and payment processing.
Section 09
Maha303 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data retention and disposal procedures. Anonymised data that can no longer be linked to an identifiable individual may be retained indefinitely for analytical and statistical purposes.
Section 10
In the course of providing our Services, personal data may be transferred to and processed in countries outside Malaysia. This may occur in connection with the use of cloud hosting infrastructure, identity verification services, or other technology providers whose servers are located in jurisdictions other than Malaysia.
Where personal data is transferred internationally, Maha303 ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to that applicable in Malaysia. Such safeguards include contractual obligations binding the receiving entity to process data only for specified purposes and in accordance with data protection standards consistent with this Policy.
Players who have questions about international data transfers or who wish to obtain more information about the specific safeguards in place may contact our support team at [email protected].
Section 11
Maha303 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
Your Role in Security: While Maha303 takes extensive measures to protect your data, you are also responsible for maintaining the security of your account. Do not share your login credentials with anyone, use a strong and unique password, and enable two-factor authentication where offered. If you suspect your account has been compromised, contact our support team immediately.
Section 12
The Maha303 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the relevant account, void any transactions associated with it, and securely delete the data from our systems.
If you are a parent or guardian and believe that a minor in your care has accessed the Maha303 platform or submitted personal data to us, please contact our support team at [email protected] immediately so that we can take appropriate action.
⚠️ 21+ Strictly Enforced: Maha303 operates a zero-tolerance policy on underage gambling. KYC age verification is mandatory for all accounts prior to withdrawal processing. Accounts that cannot verify the age of the registered player will be suspended.
Section 13
Maha303 reserves the right to amend, update, or replace this Privacy Policy at any time. When material changes are made to the Policy, we will notify registered players by email and/or by a prominent notice on the platform homepage, with reasonable advance notice where practicable. The effective date of the most recent revision is stated at the top of this document.
Your continued use of the Maha303 platform following the publication of any amendment to this Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree with any amendment, you should cease using the platform and request account closure by contacting our support team.
We encourage you to review this Policy periodically to remain informed of how Maha303 collects, uses, and protects your personal data.
Section 14
If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by Maha303, please contact us using the following methods. All data subject requests will be acknowledged within five (5) business days and fulfilled within thirty (30) calendar days of receipt:
Data Enquiries & Requests:
Email: [email protected] (plain text — not a clickable link)
Live Chat: Available 24/7 via the platform interface — select "Privacy / Data Request" from the support menu
WhatsApp Support: Available 24/7 — contact via the platform's support section
Response Languages: Bahasa Melayu, Mandarin Chinese, and English
You may submit the following types of requests to our support team in connection with your personal data:
Maha303 will not charge a fee for exercising any of the above rights in ordinary circumstances. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee or decline the request, with written reasons provided to the requesting party.
Your Data Rights
Under applicable privacy law, you hold the following rights in respect of your personal data. These rights are genuine and enforceable — contact our support team to exercise any of them.
Request a full copy of the personal data Maha303 holds about you, along with information on how it is used and with whom it is shared.
Request correction of any personal data that is inaccurate, incomplete, or out of date. You may also update most information directly through your account settings.
Request deletion of your personal data where it is no longer required for the purposes it was collected, subject to applicable legal retention obligations.
Request that Maha303 restrict processing of your data — for example, while a complaint or data accuracy query is being investigated by our team.
Request a structured, machine-readable export of your personal data for the purpose of transferring it to another service provider, where technically feasible.
Object to the processing of your personal data based on legitimate interests — including the right to opt out of all marketing communications at any time, with immediate effect.
To exercise any of the above rights, contact our support team at [email protected] or via live chat. Requests will be acknowledged within 5 business days and fulfilled within 30 calendar days.
Privacy Understood
Your personal data is in safe hands at Maha303. Read our full Terms & Conditions or visit our Responsible Gambling page to learn more about how we keep Malaysian players protected. For players aged 21 and above only.