Official Document

Winbox Privacy Policy – Your Personal Data Protection

Winbox is committed to protecting the privacy and data security of every member. This document clearly outlines how we collect, use, store, and protect your information in accordance with Malaysian law.

Updated: January 2026 English Malaysia

Six Pillars winbox Privacy Protection

The winbox Privacy Policy is more than a required document — it is our promise to every member that your data is handled with full responsibility and transparency.

Banking-Grade Encryption

All your personal data and financial transactions are protected with 256-bit SSL encryption — the same highest-grade security standard used by leading banking institutions in Malaysia. Your data is fully secure during transmission and storage.

No Data Sale

Winbox has never and will never sell, rent, or trade your personal information to third parties for marketing purposes. Your data belongs to you, and we respect your privacy completely without compromise.

Data Controls in Your Hands

You have the full right to access, correct, download, or request deletion of your personal data at any time. The process is straightforward and can be done directly through the winbox customer support team.

Secure Data Storage

Your data is stored on servers protected by strict access controls and continuous monitoring. Only authorised personnel may access sensitive information, and all access is logged and audited regularly.

Malaysian Legal Compliance

Winbox operates in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. We ensure that all our data management practices fully comply with applicable local legal requirements.

Immediate Breach Notification

Should any security incident occur that affects your data, winbox will notify you promptly in accordance with the reporting procedures required under Malaysian law, without any unnecessary delay.


Important: This Privacy Policy describes winbox's data collection and management practices. By using our platform, you agree to the terms set out in this document. Please read it carefully before registering or using any winbox services.

1. Introduction and Scope of This Policy

Winbox ("we", "our platform") takes your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the winbox online casino platform, including our official website and mobile app.

This policy applies to all winbox users in Malaysia and covers all your interactions with our platform — from account registration and gaming activity to financial transactions and communications with our customer support team. winbox operates in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and is committed to ensuring your personal data is managed with full integrity.

If you have any questions about this policy or how we manage your data, please contact our data protection team through the channels listed at the end of this document. We are always ready to provide clear and transparent explanations to every member.

Winbox is appointed as the responsible Data Controller under PDPA 2010. This means we are fully accountable for all decisions regarding the collection and use of your personal data, and you have legally protected rights.

2. Types of Personal Data We Collect

Winbox only collects data that is strictly necessary to provide a safe, seamless, and regulatory-compliant service. The following are the categories of data we collect:

Data Category Sample Information Requirements
Identity Information Full name, date of birth, identification card number Required (KYC)
Contact Information Email address, phone number, residential address Required
Financial Information Bank name, account number, transaction history Required (Payment)
Usage Data Game history, activity logs, session times Automatic
Device Data IP address, device type, operating system, browser Automatic
Communication Data Support chat records, emails, feedback Where Applicable

Your data is collected through several means: information you provide directly during registration and platform use, data collected automatically via cookies and tracking technologies, and information received from trusted third parties such as payment processors and identity verification providers.

3. How We Use Your Data

Winbox uses your personal data only for legitimate purposes directly related to the provision of platform services. We do not use your data for unrelated purposes without your consent. The primary purposes for data use are as follows:

  • Identity verification and KYC — to verify that every member meets the age requirement and regulatory criteria set out.
  • Transaction processing — to manage deposits, withdrawals, and all financial activities safely and accurately.
  • Gaming service provision — to ensure a smooth, personalised, and high-quality gaming experience for every member.
  • Fraud prevention — to detect and block suspicious activity that could compromise the security of your account and the platform as a whole.
  • Customer support — so our team can assist you more effectively whenever you need support.
  • Legal compliance — to fulfil reporting and compliance obligations set by relevant authorities in Malaysia.
  • Marketing communications — to send relevant promotional offers and updates, subject to your communication preferences which can be changed at any time.
Marketing Preference Right: You can opt out of marketing communications from winbox at any time by contacting our support team. Unsubscribing from marketing communications will not affect your core account services.

4. Sharing Data With Third Parties

Winbox does not sell or disclose your personal data to third parties for their own marketing purposes. However, there are specific situations where we need to share your data with selected parties in order to deliver our services fully:

  • Payment processors — required transaction information is shared with authorised payment gateways to process your deposits and withdrawals.
  • KYC service providers — identity information is shared with approved identity verification parties to meet regulatory requirements.
  • Game providers — basic game data is shared with game software providers to ensure games function correctly.
  • Legal authorities — we will disclose data when required by a court order, law, or relevant regulatory authority.
  • Analytics partners — anonymised and aggregated data that cannot identify individuals may be shared for platform usage analysis purposes.

All third parties we work with are required to comply with strict data protection standards and may only use your data for agreed purposes. We conduct regular transparency reviews of all our data processing partners.

Warning: winbox is not responsible for the privacy practices of third-party websites or platforms that you may access via external links. Please review their privacy policies separately.

5. Data Security Measures

Winbox invests seriously in data security infrastructure to ensure your personal information is always protected. We employ a combination of the latest security technologies and strict operational procedures to achieve a level of protection on par with major financial institutions.

Key security measures we have implemented include:

  • 256-bit SSL encryption for all data transmitted between your device and our servers.
  • Passwords are stored using one-way hashing algorithms that cannot be decrypted.
  • Round-the-clock security monitoring by a dedicated cybersecurity team, 24/7.
  • Regular penetration testing conducted by independent security experts.
  • Strict internal access controls — only authorized staff can access sensitive member data.
  • Encrypted data backups stored across multiple locations to ensure service continuity.

While we take all reasonable precautions, no system can be guaranteed one hundred percent free from cyber threats. You also play an important role by keeping your winbox account password and login credentials confidential.

6. Cookies and Tracking Technologies

Winbox uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website or use our app.

We use several types of cookies for different purposes:

  • Essential Cookies — required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Performance Cookies — helps us understand how users interact with the platform for continuous improvement purposes.
  • Functional Cookies — saves your preferences such as language and display settings so you do not need to reconfigure them each time you log in.
  • Analytics Cookies — used to analyse platform traffic and usage patterns for overall product improvement.

You can control and manage cookie settings through your internet browser settings. However, disabling certain cookies may affect the functionality and user experience of the winbox platform.

7. Your Rights Regarding Personal Data

Under the Personal Data Protection Act 2010 of Malaysia, you have the following rights regarding your personal data held by winbox. We are committed to respecting and facilitating the exercise of these rights:

1
Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 business days.

2
Right to Rectification

If you find that your data is inaccurate or incomplete, you have the right to request an immediate correction and we will update it promptly.

3
Right to Withdraw Consent

You may withdraw consent for data processing at any time, particularly for marketing purposes, without affecting core account services.

4
Right to Restrict Processing

You may request that the processing of your data be restricted in certain situations, such as while a dispute regarding data accuracy is being investigated.

5
Right to Erasure

You may request deletion of your personal data when it is no longer needed, subject to applicable legal data retention obligations.

6
Right to Lodge a Complaint

You have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your privacy rights have been violated by winbox.

To exercise any of the above rights, please contact the winbox support team via the platform's live chat or our official email. We will process your request within the timeframe required by Malaysian law.

8. Data Retention Period

Winbox retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable laws and regulations in Malaysia.

In general, data retention periods are as follows:

  • Active account data — retained for the duration that your account remains active on the winbox platform.
  • Financial transaction data — retained for a minimum of seven years in accordance with Malaysian accounting and tax legal requirements.
  • KYC records and identity verification — retained for five years after account closure to comply with anti-money laundering (AML) requirements.
  • Support communication logs — retained for three years for reference and dispute resolution purposes.
  • Anonymised analytics data — may be retained for a longer period as it cannot be used to identify individuals.

Upon the expiry of the defined retention period, your data will be securely deleted or anonymized using procedures approved by industry standards.

9. Third-Party Links and Services

The winbox platform may contain links or integrations with third-party services such as payment processors and game providers. When you access these third-party services, their own privacy policies apply and not the winbox privacy policy.

Winbox is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to read and understand the privacy policy of each third-party service you use in connection with the winbox platform.

Note: All payment processors and service providers working with winbox have undergone rigorous security and compliance evaluation. We only work with partners who meet data protection standards equal to or higher than our own.

10. Children's Privacy

The winbox platform is strictly for adults aged 18 and above. We do not intentionally collect any personal data from individuals under the age of 18. If you believe a child has provided personal data to us without parental or guardian consent, please contact us immediately.

Should we discover that a child's personal data has been collected unintentionally, we will take immediate steps to delete that information from our records and close the account in question without any refund, as it constitutes a clear violation of the platform's terms of use.

11. Changes to This Privacy Policy

Winbox reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new technologies, updated legal requirements, or other operational reasons. The latest update date will always be displayed at the top of this document.

For significant and material changes, winbox will notify you by email or in-platform notification at least 14 days before the changes take effect. Your continued use of the winbox platform after the effective date of such changes constitutes your acceptance of the updated policy.

We recommend reviewing this Privacy Policy page periodically. If you disagree with any changes made, you have the right to close your account and request deletion of your personal data in accordance with the rights stated in Section 7.

12. Contact Our Data Protection Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how winbox handles your personal data, our Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following channels:

  • Live chat within the winbox platform — available 24 hours a day, 7 days a week for immediate responses.
  • Our official data protection email at [email protected] — we will respond within 48 business hours.

For formal complaints regarding data protection, you may also contact the Department of Personal Data Protection (JPDP) Malaysia directly. Contact details for JPDP are available on the official website of the Ministry of Communications and Digital Malaysia.

For more information on how we protect your transactions and privacy, please also refer to our Terms and Conditions and Responsible Gaming us.


Your Data Is Safe With Us

Play With Peace of Mind at The Trusted winbox Platform

Now you know how winbox protects your privacy. Join over 500,000 Malaysian members who have trusted winbox as their online gaming platform of choice — safe, fair, and transparent.

PDPA Compliant SSL 256-bit 24/7 Support Secure KYC

Bahasa Melayu