PRIVACY POLICY • WINBOX 2026

Winbox 2026 Privacy Policy – Our Commitment to Protecting Your Personal Data

Your personal data is a trust we take seriously. The Winbox 2026 Privacy Policy transparently explains how we collect, use, and protect your information as a member of our platform.

Updated: 1 January 2026  |  Bahasa Melayu (ms-MY)
256-bit SSL Encryption
No Data Selling
Full Member Access Rights
PDPA Compliance
Six Ways Winbox 2026 Protects Your Privacy

Privacy here is not an empty promise — it is a policy we uphold every day, without exception.

Advanced Data Encryption

All data transmitted between your device and Winbox 2026 servers is protected by 256-bit SSL encryption — the same security technology used by leading banking institutions in Malaysia.

Your Data is Never Sold

Winbox 2026 will never sell, rent, or trade members' personal data to any third party for marketing purposes. Your information is used solely for the purposes to which you have given consent.

Your Privacy, Your Control

You have the right to access, correct, download, or request deletion of your personal data at any time. The process is straightforward and can be done directly through your account or by contacting our support team.

Secure Data Storage

Your data is stored on servers protected by strict physical and digital access controls. Only authorised personnel with a legitimate business need are permitted to access member information.

Compliance with Malaysia's PDPA

Winbox 2026 operates in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. We ensure that all data collection and processing practices comply with applicable local legal requirements.

Marketing Communication Controls

You have full control over whether to opt in or out of Winbox 2026 marketing communications at any time. We respect your preferences and will not send you unwanted communications.

1

Introduction & Scope of This Privacy Policy

Winbox 2026 values the privacy of every member and user on our platform. This Privacy Policy explains in detail how Winbox 2026 collects, stores, processes, shares, and protects your personal information when you use our platform — including the website, mobile app, and all related services.

By registering an account, using the platform, or providing personal information to Winbox 2026 in any manner, you are deemed to have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us for further assistance.

Note: This Privacy Policy should be read in conjunction with Terms & Conditions Winbox 2026 constitutes the entire agreement between you and our platform.

2

Types of Personal Data We Collect

Winbox 2026 collects various types of personal information depending on how you interact with our platform. The following are the categories of data that may be collected:

A. Information You Provide Directly:

  • Full name as stated in your official identification document.
  • An active Malaysian mobile phone number.
  • A valid and active email address.
  • Date of birth for age verification purposes.
  • MyKad number or other identity document for the KYC process.
  • Bank account number or e-wallet details (Touch 'n Go, GrabPay, DuitNow) for deposit and withdrawal processing.
  • Passwords in encrypted form — we do not store passwords in plain text.

B. Information Collected Automatically:

  • IP address and associated geographical location information.
  • Device type, operating system, and web browser version used.
  • Gaming activity data including bets placed, winnings, and losses.
  • Complete records of all deposit and withdrawal transactions.
  • Login session data, including the time and duration of each session.
  • Cookie information and similar tracking technologies.
Data Type Purpose of Collection Mandatory / Optional
Full Name Registration KYC Withdrawal Mandatory
Phone Number Verification 2FA Support Mandatory
Email Address Login Notifications Password Reset Mandatory
Payment Details Deposit Withdrawal Mandatory
Device / IP Data Security Fraud Analytics Automatic
Marketing Cookies Marketing User Experience Optional
3

How Winbox 2026 Uses Your Data

Winbox 2026 uses your personal data only for lawful and necessary purposes. The following are the primary purposes for which your data is used:

  • Processing and verifying new account registrations and KYC identity verification.
  • Enabling secure login and smooth platform operations on a daily basis.
  • Processing deposit transactions via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals of winnings to your account.
  • Sending important account notifications such as deposit confirmations, successful withdrawals, and security alerts.
  • Analysing gaming behaviour to identify signs of problem gambling and providing appropriate assistance through our responsible gaming programme.
  • Improving the platform experience based on aggregated, anonymised real usage data.
  • Complying with legal obligations, including reporting requirements mandated by the relevant regulatory authorities.
  • Sending marketing communications to members who have given their consent — you may opt out at any time.

Winbox 2026 will not use your personal data to make automated decisions that materially affect you without human oversight, except in cases of real-time fraud detection that require immediate action.

4

Sharing Data with Third Parties

Winbox 2026 does not sell or trade members' personal data to any party. However, in certain limited circumstances, we may need to share your information with the following third parties:

  • Payment service providers: Includes Touch 'n Go, GrabPay, DuitNow, FPX, and other payment gateway providers that process your financial transactions. Only the information necessary to complete a transaction is shared.
  • Game providers: Providers such as Pragmatic Play, NetEnt, and others may receive game session data necessary to operate the games. They do not receive financial information or full identity details.
  • Regulatory authorities and law enforcement agencies: When required by Malaysian law or a valid court order.
  • Fraud prevention services: Security analytics platforms that help us detect and prevent fraudulent activity and money laundering.

All third parties we work with are bound by strict confidentiality agreements and are required to uphold data protection standards equivalent to or exceeding our own.

5

Data Security Measures

Winbox 2026 continually invests in robust security infrastructure to safeguard the personal data of all our members. Key security measures we have in place include:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
  • Passwords are stored using a strong one-way hashing algorithm — we are unable to view your password.
  • Two-factor authentication (2FA) available for all member accounts.
  • Round-the-clock platform monitoring, 24/7, by our dedicated cybersecurity team.
  • Periodic security audits conducted by independent third parties with no affiliation to Winbox 2026.
  • Tiered access control — only staff with a legitimate business need may access member data.
  • A comprehensive incident response plan in the event of any data breach.

In the event of a serious data breach affecting your personal information, Winbox 2026 will notify you within 72 hours of the breach being detected, in accordance with international data protection best practices.

6

Cookies & Tracking Technologies

Winbox 2026 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website or use our app.

We use several types of cookies:

  • Essential Cookies (Required): Required for core platform functions such as login, game sessions, and security. Cannot be disabled without affecting platform functionality.
  • Preference Cookies: Saving your preferences — such as language, theme, and display settings — so you don't have to reconfigure them each time you visit.
  • Analytics Cookies: Helps us understand how members use the platform for ongoing improvements. Data is collected in aggregate and anonymised form.
  • Marketing Cookies: Used to display relevant advertisements and offers. You may decline the use of these cookies through your browser settings.

You can manage your cookie preferences through your web browser. Please note, however, that disabling essential cookies may affect certain functions on the Winbox 2026 platform.

7

Your Personal Data Rights

As a data subject, you have the following rights regarding your personal data held by Winbox 2026. We are committed to honouring all valid requests within 30 business days:

Right of Access

You have the right to request a copy of all personal data we hold about you in a readable format.

Right to Rectification

You have the right to request correction of any inaccurate or outdated personal data we hold about you.

Right to Erasure

You may request deletion of your data, subject to any legally required retention obligations.

Right to Restriction

You may request that we restrict the processing of your data while any dispute is being resolved.

Right to Portability

You have the right to receive your data in a structured, portable format that can be used across platforms.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

8

Data Retention Period

Winbox 2026 retains your personal data only for as long as necessary to fulfil the original purpose for which it was collected, or as required under Malaysian law. The following are our general data retention guidelines:

  • Active account data: Retained for as long as your account remains active on Winbox 2026.
  • Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysian accounting and tax legal requirements.
  • KYC identity verification data: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering requirements.
  • Customer support communication data: Retained for three (3) years for dispute resolution and service improvement purposes.
  • Cookie and analytics data: Generally not exceeding 24 months, depending on the cookie type.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

9

Children's Privacy & Age Restrictions

The Winbox 2026 platform is strictly for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21.

Should we discover that personal data belonging to someone below the required age has been inadvertently collected, we will take immediate steps to delete the information and close the associated account. Parents or guardians who become aware of such a situation are encouraged to contact us promptly at support@winbox2026.ws.

10

Amendments to This Privacy Policy

Winbox 2026 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When significant changes occur, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Sending notifications to members via their registered email address or through in-platform alerts.
  • In the event of significant material changes, we may seek fresh consent from members where required.

Your continued use of the Winbox 2026 platform following any amendments constitutes your acceptance of the updated policy.

11

Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your personal data rights at Winbox 2026, please reach out to us through the channels below. We will respond within 5 business days for general enquiries and within 30 business days for formal data rights requests:

  • Privacy Email: privacy@winbox2026.ws
  • Support Email: support@winbox2026.ws
  • Live Chat: Available on the platform after login, 24/7
  • Frequently Asked Questions: Visit our FAQ page for answers to frequently asked questions

For formal data deletion or portability requests, please submit your request via email with the subject line "Data Rights Request — [Your Full Name]" and include a copy of your identification document for identity verification.

Your Privacy is Protected. Play with Confidence at Winbox 2026!

With our high-standard data protection and unwavering commitment to privacy, you can enjoy everything Winbox 2026 has to offer with complete confidence.

For individuals aged 21 and above only • Responsible Gaming

Bahasa Melayu