Privacy Policy Winbox – Data Protection Malaysian Users

Winbox is Malaysia's leading digital entertainment platform, providing Live Casino gaming, online slots, sports wagering, and a range of other interactive entertainment services. We understand that when you trust us with your personal information, it is a responsibility we take very seriously.

This Privacy Policy is designed to clearly and transparently explain how winbox collects, processes, uses, stores, and protects your personal data when you register, log in, or use any part of our platform — whether via the desktop website, mobile browser, or the downloadable winbox app.

This document also outlines your rights as a user regarding the personal data we hold, as well as how to contact us should you have any questions, concerns, or privacy-related requests.

Winbox collects various categories of personal data depending on how you interact with our platform. The following are the types of data we may collect:

Personal Identification Information

Contact Information

Financial Information

Technical & Usage Data

The data we collect is used solely for legitimate purposes directly related to the operation of the winbox platform and your user experience. We will not use your data for any other purpose without your prior consent.

• Processing account registration and verifying your identity (KYC) to ensure account security.
• Processing deposits, withdrawals and all financial transactions securely and accurately.
• Providing responsive and effective customer support services.
• Sending important notifications related to your account, transactions and relevant promotions.
• Detecting and preventing fraud, money laundering and other suspicious activities.
• Complying with legal obligations and the requirements of relevant regulatory authorities.
• Improving and enhancing platform features based on aggregated, non-identifiable usage patterns.
• Supporting responsible gaming initiatives, including detection of at-risk gaming patterns.

Winbox does not sell, rent, or trade your personal data to any third party for commercial purposes. However, under certain limited circumstances, we may share your data with the following parties:

• Payment Service Providers — to securely process deposits and withdrawals via licensed FPX, DuitNow, and e-wallet channels.
• Licensed Game Providers — account information required to access games from third-party software providers such as Pragmatic Play, Evolution, and others.
• Regulatory Authorities — when required by law, court order, or direction from a legitimate regulatory authority.
• KYC Verification Services — licensed third-party identity verification service providers that comply with strict security standards.
• Business Transfer — in the event of a merger, acquisition, or asset sale, where users will be notified in advance.

Winbox continuously invests in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL encryption protects all data transmitted between your device and winbox servers.
• Passwords are stored in hashed form using a robust cryptographic algorithm — we are unable to read your password ourselves.
• Strict access controls ensure that only authorised personnel can access user data, and only to the extent required for their role.
• Security audits and penetration testing are conducted periodically by independent parties.
• Real-time threat monitoring is active 24 hours a day, 7 days a week.
• Two-factor authentication (2FA) is available and strongly encouraged for all user accounts.
• Backup data is securely stored with full encryption at a separate location.

While no system can guarantee 100% absolute security, we continuously strive to apply the best available technologies and practices to minimise risk. In the event of any security breach affecting your data, winbox will notify you in a timely manner as required by applicable law.

Winbox uses cookies and similar tracking technologies to enhance platform functionality, understand how users interact with our website, and deliver more relevant content.

• Essential Cookies — required for core platform functions such as login sessions and security. Cannot be disabled.
• Performance Cookies — collects aggregated statistical usage data to help us understand which pages are most visited.
• Preference Cookies — stores user preferences such as language, theme, and other display settings.
• Marketing Cookies — used only with your consent to display relevant promotions based on your interests.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the winbox platform.

As a winbox platform user, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights without unnecessary barriers.

Winbox retains your personal data for as long as your account is active or as long as necessary to fulfil the purposes stated in this Privacy Policy. Retention periods are also influenced by legal obligations, accounting requirements, and potential dispute resolution.

• Active account data: Retained for as long as the account is active and for 5 years after account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements.
• Technical activity log: Retained for 90 days before being automatically deleted.
• KYC documents: Retained for 5 years from the date of verification or account closure.
• Marketing data (with consent): Retained until you withdraw your consent.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

The winbox platform is strictly limited to individuals aged 18 and above. We do not intentionally collect or store any personal data from minors.

Parents or guardians who believe their child may have registered a winbox account are advised to contact our support team immediately so that prompt action can be taken.

Winbox reserves the right to update or amend this Privacy Policy from time to time to reflect changes in operational practices, legal requirements, or platform improvements.

• The "Last Updated" date at the top of this document will change each time an amendment is made.
• Material changes will be communicated via in-app notifications or your registered email.
• Continued use of the platform after any amendment takes effect constitutes acceptance of the new terms.
• Previous versions of the Privacy Policy are available upon request from our support team for reference.

We encourage you to review this Privacy Policy periodically to ensure you are always informed of how we handle your information.

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data by winbox, our team is ready to assist you.

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom right corner of the platform.
• Typical response time: Within 24–48 business hours for all written enquiries.

For more information about the platform's terms of use, please refer to Terms and Conditions us. For responsible gaming guidance, visit the Responsible Gaming us.