Your Privacy Matters to Us
This Privacy Policy describes how Winbox App ("we", "platform") manages personal data relating to information you ("User", "Member", "Player") provide or that we collect when you use our services. By using winbox app, you agree to this Privacy Policy. If you do not agree, please discontinue use of the platform.
01
Winbox app's Introduction & Commitment to Privacy
Winbox app operates on the belief that player trust is our most valuable asset. That trust cannot be built without full transparency about how we manage your personal information. That is why we have prepared this Privacy Policy in clear, plain language – so every Malaysian player can make informed decisions about their use of the winbox app platform.
We operate in compliance with Malaysia Personal Data Protection Act (PDPA) 2010, which requires that personal data be processed responsibly, transparently, and for legitimate purposes. This Policy applies to all data collected through the winbox app website, mobile application, email communications, and any related platforms or communication channels we operate.
Data Protection Officer: winbox app has appointed an internal Data Protection Officer (DPO) responsible for ensuring compliance with PDPA and all applicable privacy regulations. Any privacy-related enquiries may be directed to privacy@winboxapp.bet.
02
Personal Data We Collect
Winbox app collects various categories of personal data depending on how you interact with our platform. We only collect data that is genuinely necessary to provide the services you request.
| Data Category |
Specific Examples |
How It Is Collected |
| Identity Information |
Full name, MyKad/passport number, date of birth, gender |
Registration form, KYC |
| Contact Information |
Email address, phone number, residential address |
Account registration, profile |
| Financial Data |
Payment methods (TnG, GrabPay, DuitNow, FPX), deposit/withdrawal records |
Platform transactions |
| Game Data |
Betting history, games played, wins/losses, session duration |
In-platform activity |
| Technical Data |
IP address, device type, operating system, web browser, screen resolution |
Automatic server logs |
| Usage Data |
Pages visited, time spent on the platform, features used, clicks and interactions |
Platform analytics, cookies |
| Communications |
Records of customer support conversations, emails, and feedback |
Support interactions |
Winbox app not collects credit/debit card information directly. All payments are processed through licensed payment service providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) via secure payment networks.
03
How Winbox App Uses Your Personal Data
Winbox app processes your personal data on valid legal grounds under Malaysia's PDPA. Each use of data has a clear and lawful purpose:
- Account Management: Creating, verifying, and managing your winbox app account, including the mandatory KYC (Know Your Customer) process.
- Service Provision: Make deposits using Touch 'n Go eWallet, GrabPay, DuitNow, or other available methods; place sports bets on Malaysia Super League, EPL, and other international leagues; play live casino games; and manage your winnings withdrawals.
- Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, money laundering, and other unlawful activities that could compromise your account or our platform.
- Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance in your preferred language.
- Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to members who may need help or support.
- Marketing Communications: Sending information about relevant promotions, bonuses, and special offers — only where you have given your consent to receive such communications. You may unsubscribe at any time.
- Analytics & Improvement: Understanding how players use the winbox app platform to improve the user experience, enhance performance, and introduce useful new features.
- Legal Compliance: Fulfilling legal obligations, including reporting requirements to relevant authorities where mandated by Malaysian law.
04
Data Sharing with Third Parties
Winbox app does not sell your personal data to any third party for their own marketing purposes. We only share your data in limited, necessary situations:
- Payment Service Providers: Required transaction information is shared with licensed payment providers (such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX) to process your deposits and withdrawals.
- Game Providers: Minimum necessary game data is shared with licensed game providers to enable access to our casino, slots, and live dealer games.
- KYC Services: Identity information is shared with licensed identity verification service providers to meet KYC and anti-money laundering requirements.
- Authority: Winbox app will disclose your data to Malaysian authorities when required by law or a valid court order.
- Business Partners: In the event of a merger, acquisition, or sale of business assets, user data may be transferred as part of that process, with reasonable notice provided to you.
All third parties who receive your data are required to sign data processing agreements obligating them to protect your information to a standard equal to or exceeding our own.
All third-party service providers we work with are licensed and recognised entities in Malaysia or under recognised jurisdictions. We conduct periodic due diligence checks to ensure their ongoing compliance with established privacy standards.
05
Data Security Measures at Winbox App
Winbox app continually invests in the latest security technologies and procedures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The security measures we employ include:
- 256-bit SSL/TLS Encryption: All data transmitted between your browser and winbox app servers is encrypted using 256-bit SSL/TLS protocol – the same standard used by Malaysia's leading financial institutions.
- Stored Data Encryption: Sensitive data stored in our databases is encrypted using robust encryption algorithms, meaning that even in the event of a data breach, your information remains unreadable.
- Strict Access Controls: Only winbox app staff with a legitimate business need are permitted to access players' personal data, and all access is logged and audited.
- Two-Factor Authentication (2FA): We offer and encourage the use of 2FA on player accounts as an additional layer of security.
- 24/7 Security Monitoring: Our systems are continuously monitored to detect any suspicious activity or intrusion attempts.
- Regular Security Testing: We conduct regular penetration testing and security audits through independent third parties.
Report a Security Incident: If you suspect that your winbox app account has been compromised or notice any suspicious activity, please contact our support team immediately via live chat or email security@winboxapp.bet. We will respond within 2 hours.
06
Cookies & Tracking Technologies
Winbox app uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:
| Cookie Type | Purpose | Duration |
| Essential Cookies |
Required for the platform to function – login, session security, language preferences |
Session / Persistent |
| Performance Cookies |
Collecting anonymous usage data to improve platform performance |
Up to 2 years |
| Functional Cookies |
Saving your preferences such as theme, favourite table limits, and language settings |
Up to 1 year |
| Analytics Cookies |
Helping us understand how players use the winbox app platform |
Up to 2 years |
You can manage your cookie preferences through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the winbox app platform. Essential cookies cannot be disabled as they are required for the platform's security and core operations.
07
Data Storage & Cross-Border Transfer
Your personal data is stored on servers located in licensed data centres. winbox app takes the following measures regarding data storage and transfer:
- Retention Period: Active account data is retained for as long as your account remains active. Following account closure, data is kept for a minimum of 7 years to meet legal compliance and financial audit requirements.
- International Transfers: Where data needs to be transferred outside Malaysia for specific service purposes, we ensure that the receiving party upholds a level of protection equivalent to Malaysia's PDPA.
- Data Deletion: When data is no longer required for any legitimate legal or business purpose, it will be securely deleted or anonymised in accordance with our established data deletion procedures.
08
Your Rights as a Data Subject Under PDPA
Under the Malaysian Personal Data Protection Act 2010, you have the following rights regarding your personal data held by us:
🔍
Right of Access
Request a copy of the personal data we hold about you.
✏️
Right to Rectification
Request the correction of inaccurate or outdated data.
🚫
Right to Object
Objecting to the processing of your data for direct marketing purposes.
🔒
Right to Withdraw Consent
Withdrawing consent for specific processing at any time.
📋
Right to Know
Knowing the purpose of processing and the parties who receive your data.
📞
Right to Lodge a Complaint
Lodge a complaint with the Personal Data Protection Commissioner of Malaysia.
To exercise any of these rights, submit a written request to privacy@winboxapp.bet stating the right you wish to exercise and the identification details required to verify your identity. We will respond within 21 working days in compliance with PDPA requirements.
Certain data deletion requests may not be fully fulfilled where the data in question is required to meet legal obligations (such as financial record-keeping requirements), prevent fraud, or resolve outstanding disputes.
09
Protection of Children's Data
Winbox app does not provide services to individuals under the age of 18. Our platform is intended exclusively for adult Malaysian players. We take the following steps to protect minors:
- The registration process includes an age verification step. Applicants under the age of 18 will not be permitted to register.
- The KYC (Know Your Customer) process requires official identity verification, which confirms the applicant's age.
- If we discover that a child's data has been collected inadvertently, that data will be deleted immediately and the associated account will be closed.
If you have reason to believe that a minor has registered for or is using the winbox app platform, please contact us immediately at privacy@winboxapp.bet.
10
Links to Third-Party Sites or Services
The winbox app platform may contain links to or integrations with third-party services such as game providers or payment providers. Please note that:
- This Privacy Policy applies only to the winbox app platform and does not cover third-party websites or services that you may access through our platform.
- Winbox app is not responsible for the privacy practices or content of third-party websites. We encourage you to read their privacy policies before submitting any personal information.
- Integration with payment providers (Touch 'n Go, GrabPay, DuitNow, etc.) is governed by each respective provider's privacy policy.
11
Amendments to This Privacy Policy
Winbox app reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When material changes are made:
- We will update the "Last updated" date at the top of this page.
- For significant changes, we will notify you via an in-platform notification or an email to the address registered on your account.
- Continued use of the winbox app platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.
We encourage you to review this page periodically to stay informed about how winbox app protects your information.
12
Contact the winbox app Privacy Officer
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please reach out to us through the following channels:
Privacy Officer Email
privacy@winboxapp.bet
Live Chat
Available 24/7 within the platform
Response Time
Within 21 business days
Support Languages
Bahasa Melayu & English
For related information, please also refer to Terms & Conditions and page Responsible Gaming us.