Winbox88 Privacy Policy

1 Introduction

Winbox88 ("we", "us", "our", "the Operator", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our website atwinbox88.cam

Winbox88 serves an online casino and sports betting platform primarily targeting players in Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations across the country. The Platform is operated under an international online gaming licence. Our data processing activities are governed by the data protection standards required under that licensing framework and applicable international best practices.

By registering an account, accessing the Platform, or otherwise engaging with our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must cease using the Platform. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings ascribed below:

• "Personal Data" means any information that relates to an identified or identifiable natural person. This includes, but is not limited to, your name, date of birth, identification number, email address, telephone number, IP address, payment details, and account activity records.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — in the context of this Policy, primarily registered Players and website visitors.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, the Data Controller is the Operator of the Winbox88 platform.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller, pursuant to the Data Controller's instructions and under contractual obligations.
• "KYC" means Know Your Customer — the identity verification process required under our licensing obligations and responsible gambling commitments prior to processing withdrawals or approving elevated deposit thresholds.
• "Cookies" means small text files stored on your device by a website for the purposes described in Section 11 of this Policy.
• "Services" means the full suite of products and features offered through the Winbox88 platform, including casino games, sports betting markets, payment processing, promotions, and customer support.

3 Data Controller

The Data Controller responsible for the Personal Data processed in connection with the Winbox88 platform is the Operator of the Platform, operating under international online gaming licensing. Contact details for the Data Controller are set out in Section 16 of this Policy.

Where Winbox88 engages third-party Data Processors — such as payment service providers, KYC verification platforms, and customer support tooling providers — those processors act under written data processing agreements that require them to implement appropriate security measures and process Personal Data only on our documented instructions.

4 Personal Data We Collect

Winbox88 collects the following categories of Personal Data from Players and website visitors. We collect only what is necessary for the purposes described in Section 7 of this Policy.

Data Category	Specific Data Points	Collection Purpose
Identity Data	Full legal name, date of birth, nationality, NRIC/MyKad number or passport number, gender	Account registration, KYC verification, age verification (21+ enforcement)
Contact Data	Email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru)	Account management, support communications, transaction notifications
Financial Data	Payment method identifiers (e-wallet IDs for GrabPay, Touch 'n Go, Boost; bank account details for Maybank, CIMB, Public Bank, Hong Leong, DuitNow FPX; cryptocurrency wallet addresses for BTC, ETH, USDT TRC20, BNB), transaction history, deposit and withdrawal amounts in MYR	Payment processing, fraud prevention, KYC/AML compliance
Technical Data	IP address, device type, browser type and version, operating system, session timestamps, login history	Platform security, fraud detection, session management, platform optimisation
Usage Data	Games played, bets placed (markets, stakes, outcomes), sports betting history (e.g., EPL, Liga Super Malaysia, UFC wagers), bonus participation, platform navigation patterns	Account management, responsible gambling monitoring, personalised service improvement
Communications Data	Live chat transcripts, email correspondence content, support ticket records	Customer support delivery, dispute resolution, quality assurance
Document Data	Copies of government-issued identification (MyKad, passport), proof of address documents, payment method verification documents	KYC verification, AML compliance, withdrawal authorisation

5 How We Collect Your Data

Winbox88 collects Personal Data through the following means:

5.1 Direct Collection

• Account registration forms — when you provide your name, date of birth, contact details, and create login credentials.
• KYC submission — when you upload identity documents and proof of address documents to verify your account.
• Deposit and withdrawal requests — when you provide or confirm payment method details through the Cashier section of your account.
• Customer support interactions — when you contact our support team via live chat or email.
• Responsible gambling tool settings — when you configure deposit limits, session limits, or request self-exclusion.

5.2 Automated Collection

• Cookies and similar tracking technologies placed on your device when you visit or use the Platform (see Section 11).
• Server logs that automatically record your IP address, device information, and Platform access events.
• Game and betting system logs that record each wager, game round, and transaction associated with your account.

5.3 Third-Party Sources

• Payment service providers (such as GrabPay, Touch 'n Go eWallet, Boost, Maybank, CIMB, DuitNow FPX operators) who may confirm transaction status and payment method validity.
• KYC and identity verification service providers who assist in verifying the authenticity of identity documents.
• Fraud detection and anti-money laundering screening services, which may cross-reference your details against relevant databases as required under our licensing obligations.

6 Lawful Basis for Processing

Winbox88 processes your Personal Data only where a lawful basis for that processing exists. The applicable lawful bases for each category of processing are as follows:

• Contractual necessity: Processing necessary to deliver the Services you have requested under ourTerms & Conditions — including account management, payment processing, game delivery, and withdrawal facilitation.
• Legal obligation: Processing required to comply with our licensing obligations, including KYC/AML verification, age verification (21+ enforcement), and record-keeping requirements imposed by our licensing authority.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and customer support delivery — provided those interests are not overridden by your privacy rights.
• Consent: Processing for purposes where you have provided explicit, specific, and freely given consent — including optional marketing communications (where you have opted in) and non-essential cookie placement. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 How We Use Your Data

Winbox88 uses your Personal Data for the following specific purposes:

1. Account creation and management: Registering your account, maintaining your profile, and administering your relationship with the Platform.
2. Identity verification (KYC): Verifying your identity, age (21+ minimum), and payment methods before processing withdrawals and at applicable deposit thresholds, as required by our licensing obligations.
3. Payment processing: Facilitating deposits and withdrawals via your chosen payment methods — including GrabPay, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, Hong Leong, DuitNow FPX, and cryptocurrency.
4. Delivering the Services: Providing access to casino games, sports betting markets (including EPL, Liga Super Malaysia, UFC, and other events), live dealer tables, promotions, and all other Platform features.
5. Fraud prevention and platform security: Detecting and investigating suspicious activity, preventing unauthorised account access, and protecting against money laundering and bonus abuse.
6. Responsible gambling: Monitoring account activity to identify potential problem gambling patterns, applying responsible gambling limits configured by the Player, and enforcing self-exclusion where applicable.
7. Customer support: Responding to your enquiries, complaints, and support requests via live chat and email.
8. Legal and regulatory compliance: Meeting our obligations under applicable laws and our international gaming licence conditions, including mandatory record retention.
9. Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and game/product offerings.
10. Marketing communications (with consent only): Sending promotional offers, bonus notifications, and news updates to Players who have explicitly opted in to receive such communications. You may withdraw consent at any time.

8 Data Sharing & Third Parties

Winbox88 does not sell, rent, or trade your Personal Data to third parties for their own independent commercial use. We may share your Personal Data with third parties only in the following circumstances and to the extent strictly necessary:

8.1 Service Providers (Data Processors)

We engage reputable third-party service providers to assist in operating the Platform. These include payment processing partners (GrabPay, Touch 'n Go eWallet network providers, Boost, Malaysian banking FPX/DuitNow network operators, cryptocurrency infrastructure providers), KYC and identity verification providers, customer support platform vendors, fraud detection and AML screening services, and cloud hosting infrastructure providers. All such providers act under written contracts that restrict their use of your data to service delivery purposes only and require implementation of appropriate security safeguards.

8.2 Regulatory and Legal Disclosure

Winbox88 may disclose your Personal Data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, our licensing conditions, or a valid legal order. In such cases, we disclose only the minimum data necessary to satisfy the legal requirement.

8.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the Operator's business, your Personal Data may be transferred to the successor entity as part of that transaction, subject to equivalent data protection commitments. You will be notified of any such transfer via email or a prominent notice on the Platform.

8.4 Consent-Based Sharing

We will not share your Personal Data with any other third party without your explicit prior consent. Where we intend to share data for a new purpose not covered by this Policy, we will seek your consent before doing so.

9 International Data Transfers

As an internationally operated online gaming platform, Winbox88 may process or store your Personal Data in countries outside Malaysia. Where Personal Data is transferred to jurisdictions that may have different data protection standards, the Operator implements appropriate safeguards to ensure your data is protected to a standard at least equivalent to that described in this Policy. These safeguards may include contractual data protection clauses with receiving entities and the implementation of technical security measures.

By using the Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Malaysia, including the jurisdiction in which our international gaming licence is held.

10 Data Retention

Winbox88 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing conditions. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with our AML/KYC record-keeping obligations under our licensing framework.
• Transaction records: Retained for a minimum of five (5) years following each transaction, as required under applicable financial regulations and licensing conditions.
• Betting and gaming history: Retained for a minimum of three (3) years following account closure for dispute resolution and responsible gambling monitoring purposes.
• Customer support communications: Retained for a minimum of two (2) years following the closure of each support case for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained until consent is withdrawn plus one (1) year to demonstrate compliance.
• Technical and log data: Retained for up to twelve (12) months for security, fraud prevention, and platform performance analysis purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be used to identify you.

11 Cookies & Tracking Technologies

Winbox88 uses cookies and similar technologies (collectively, "Cookies") on the Platform. Cookies are small text files stored on your device when you access a website. They allow the Platform to recognise your device and maintain certain session data.

11.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Performance Cookies: Collect anonymised data about how visitors use the Platform — pages visited, error messages, and navigation paths — to help us improve performance. No personally identifiable information is collected by these cookies.
• Functionality Cookies: Remember your preferences such as language settings, responsible gambling limits display, and last-viewed game categories to provide a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and suspicious patterns that may indicate account compromise.

11.2 Cookie Management

You may control non-essential Cookies through your browser settings. Most modern browsers allow you to view, manage, and delete Cookies. Disabling strictly necessary Cookies may impair your ability to use the Platform, including logging in or completing transactions. For instructions on managing Cookies in your specific browser, refer to your browser's help documentation.

Winbox88 does not currently use third-party advertising or behavioural profiling Cookies. If we introduce such Cookies in the future, we will update this Policy and seek your consent before doing so.

12 Your Rights as a Data Subject

Subject to applicable law and our legal retention obligations, you have the following rights in respect of your Personal Data held by Winbox88. To exercise any of these rights, please contact us using the details in Section 16.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, together with information about how that data is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data subject to mandatory AML/KYC retention periods cannot be erased until those periods expire.
• Right to Restriction: You have the right to request that we restrict processing of your Personal Data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive your Personal Data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

Winbox88 will respond to all valid data subject requests within thirty (30) calendar days. Where a request is complex or involves a large volume of data, we may extend this period by an additional thirty (30) days, of which we will notify you.

13 Data Security

Winbox88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmission between your device and our servers.
• Encryption at rest for all sensitive Personal Data and payment information stored on our systems.
• Access controls and role-based permissions limiting internal access to Personal Data to authorised personnel who require that access to deliver their functions.
• Regular security audits and penetration testing conducted by qualified independent security professionals.
• Multi-factor authentication requirements for privileged internal system access.
• Incident response procedures ensuring prompt detection, containment, and notification in the event of a personal data breach.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials and for notifying Winbox88 immediately if you suspect that your account has been accessed without your authorisation. Winbox88 will never ask for your password via email, live chat, or any other channel.

14 Children & Minors

The Winbox88 platform is strictly intended for individuals aged21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we discover that a registered account belongs to a person under the age of 21, we will immediately suspend the account, notify the account holder, delete any data collected from them to the extent permitted by our legal obligations, and return any deposited funds after completing required verification.

If you believe that a minor has registered an account on Winbox88, please contact us immediately using the details in Section 16 so that we may take appropriate action without delay.

15 Changes to This Privacy Policy

Winbox88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or licensing conditions. Where changes are material — for example, the introduction of new categories of data collection or new purposes for processing — we will notify you by email to your registered address and/or by a prominent notice on the Platform at least fourteen (14) days before the changes take effect, where practicable.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the Platform after any such revision constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

16 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of your data subject rights set out in Section 12, please contact the Winbox88 Data Protection team using the details below. All contact details are for support and privacy enquiry purposes only and must not be used for unsolicited communications.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available24 hours a day, 7 days a week via the Winbox88 platform
• Subject Line (for email requests): Please include "Privacy Request" or "Data Subject Request" in the subject line to ensure prompt routing to the correct team.
• Response Time: We aim to acknowledge all privacy requests within 5 business days and resolve them within 30 calendar days.
• Support Hours: Operating on Malaysia Standard Time (MYT / GMT+8)

When submitting a data subject request, please provide sufficient information to allow us to verify your identity before processing the request. This is to protect your data from unauthorised disclosure. We may request a copy of your identity documentation for verification purposes.