Winbox Web Privacy Policy – Our Commitment to Protecting Malaysian Users' Personal Data

Introduction & Scope of This Policy

Winbox web ("we", "Platform") values the privacy of every user of our online entertainment platform. This Privacy Policy ("Policy") explains in detail how we manage your personal information from the moment you register until you stop using our services.

This document applies to all winbox web users regardless of how they access the platform — whether via the website, mobile app, or any other digital channel we provide. The scope of this Policy covers all data we collect directly from you as well as data collected automatically while you use the platform.

We are committed to being transparent about our data management practices. If anything remains unclear after reading this document, our support team is ready to answer your every enquiry promptly.

Types of Personal Data We Collect

Winbox web collects your personal data through two primary methods — directly when you provide the information, and automatically as you use our platform.

Data You Provide Directly

• Identity Information: Full name, MyKad or passport number, date of birth and gender
• Contact Information: Email address, mobile number and residential address
• Account Information: Username, encryption-processed password, security questions
• Financial Information: Bank account number (not stored in full), digital wallet details for KYC processing
• Verification Documents: MyKad copy, bank statement or proof of address for KYC purposes

Automatically Collected Data

• Device Data: Device type, operating system, model and unique device identifier
• Network Data: IP address, internet service provider (ISP) name and approximate location
• Usage Data: Pages visited, time spent on the platform, games played and actions taken
• Cookie Data: Session cookies, preference cookies and tracking identifiers for internal analytics
• Transaction Data: Complete deposit, withdrawal, wagering and game history records

Data Category	Example	Retention Period
Identity & KYC	Name, MyKad, selfie photo	5 years after account closure
Finance	Deposit & withdrawal records	7 years (legal requirement)
Game Logs	Wagering history, wins	3 years after last activity
Communication	Support tickets, live chat	2 years after resolution
Technical	IP logs, device data	12 rolling months

How We Use Your Personal Data

Every piece of data we collect has a specific and legitimate purpose. winbox web does not use your data for purposes beyond the scope stated below without obtaining your additional consent.

Primary Purposes of Data Use

• Account Management: Creating, verifying and maintaining your account on the winbox web platform
• Identity Verification (KYC): Meeting anti-money laundering (AML) legal compliance requirements
• Transaction Processing: Verifying and securely processing deposits and fund withdrawals
• Platform Security: Detecting and preventing fraud, unauthorised access and illegal activity
• Customer Support: Answering enquiries, resolving complaints and providing technical assistance
• Service Improvement: Analysing usage patterns to improve the platform experience
• Service Communications: Sending important notifications relating to your account, transactions and security
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling

Data Sharing with Third Parties

Winbox web does not sell your personal data to any party. However, in certain limited situations, we need to share specific information with carefully selected third parties to enable our services to function properly.

Third Parties That May Receive Limited Data

• Payment Providers: Payment gateways such as FPX, DuitNow and approved digital wallets — receiving only the data necessary to process transactions
• Game Providers: Third-party gaming software providers supplying slot and casino games on our platform — receive unique identifiers only, with no real names
• KYC Services: Trusted third-party identity verification providers to process verification documents
• Authorities: Law enforcement agencies or regulatory bodies when required by Malaysian law
• Analytics Services: Analytics tools that process anonymised data for platform performance reports

Our Data Security Measures

Protecting your personal data is a technical and organisational priority for winbox web. We continually invest in the latest security infrastructure to ensure your data remains safe from increasingly sophisticated cyber threats.

Technical Measures

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers
• AES-256 encryption for sensitive data stored in our database
• Passwords are stored in hashed form using the bcrypt algorithm — we ourselves cannot read your password
• Two-factor authentication (2FA) is available and encouraged for all accounts
• 24/7 monitoring by automated threat detection systems
• Regular penetration testing by independent cybersecurity firms

Organisational Measures

• Access to user data is granted only to staff who require it to perform their duties
• All staff undergo data protection training during onboarding and annually thereafter
• Clear incident response procedures to address any data breaches
• Notification to affected users within 72 hours in the event of a significant security incident

Cookies & Tracking Technologies

Winbox web uses cookies and similar tracking technologies to enhance the user experience, ensure platform security and analyse usage patterns. Below is a full explanation of the types of cookies we use.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, session management and security. These cookies cannot be disabled as the platform will not function without them.
• Preference Cookies: Saving your preferred settings such as language, time zone and display preferences. Helping us deliver a more personalised experience.
• Analytics Cookies: Collecting information about how you use the platform to help us understand areas that need improvement. This data is collected anonymously.
• Security Cookies: Used to detect unusual activity, prevent fraud and protect your account from unauthorised access.

You can manage your cookie settings through your internet browser. Please note that disabling essential cookies may affect platform functionality. For analytics and preference cookies, you may opt out without affecting the core functions of winbox web.

Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by winbox web. We fully respect and support the exercise of these rights.

User Rights List

• Right of Access: You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.
• Right to Rectification: If any information about you is inaccurate or outdated, you have the right to request that we correct it promptly.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data, subject to our legal obligations to retain certain records.
• Right to Object: You may object to the processing of your data for marketing purposes at any time without penalty.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: You may withdraw consent for consent-based data processing at any time, without affecting the validity of prior processing.

Children's Data Protection

Winbox web is an adult entertainment platform intended solely for individuals aged 18 and above. We do not knowingly collect, store or process the personal data of anyone under the age of 18.

If we discover that personal data of a child has been collected without our knowledge, we will take immediate action to delete that data and close the associated account. Parents or guardians who suspect their child has registered on this platform are requested to contact us immediately through the available support channels.

Amendments to This Privacy Policy

Winbox web reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or security enhancements. The effective date at the top of this document will be updated whenever changes are made.

For significant changes that affect your privacy rights, we will notify you via in-platform notifications and your registered email at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Older versions of the Privacy Policy are kept in our archive and can be requested through the support team.

Contact Us About Your Privacy

If you have any questions, concerns, or wish to submit a request regarding your privacy and personal data, the winbox web data protection team is ready to assist through the following channels:

• Live Chat 24/7: Fastest option — directly on the winbox web platform, response in under 3 minutes
• Privacy Email: [email protected] — for official PDPA rights requests, response within 2 business days
• Support Email: [email protected] — for general account and privacy enquiries

This Privacy Policy is written in Bahasa Melayu as the official version. In the event of any conflict between the Bahasa Melayu version and a translation in another language, the Bahasa Melayu version shall prevail. This Policy is governed by Malaysian law and the Personal Data Protection Act 2010 (PDPA).