winbox01 Privacy Policy

Your Privacy Matters: winbox01 is committed to protecting the personal data of all players. This Policy is written in plain, accessible language alongside the formal legal provisions to ensure every player, whether in Kuala Lumpur, Penang, Johor Bahru, or elsewhere in Malaysia, fully understands how their information is used.

1.Introduction

1.1 This Privacy Policy ("Policy") describes how winbox01 ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player") who access or use the winbox01 platform at winbox01.org and all associated services.

1.2 By registering an account on the winbox01 platform or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform.

1.3 This Policy should be read in conjunction with the winbox01 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions concerning the processing of personal data, this Policy shall prevail.

2.Data Controller

2.1 winbox01 acts as the data controller in respect of the personal data of its registered Players. As data controller, winbox01 determines the purposes and means by which personal data is processed.

2.2 Where winbox01 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification services, and fraud detection providers), such third parties act as data processors operating under binding contractual obligations consistent with this Policy.

3.Personal Data We Collect

3.1 winbox01 collects personal data in the following categories:

Registration & Identity Data:

• Full legal name, date of birth, and gender;
• Malaysian NRIC number or passport number and copy;
• Residential address and proof of address documentation;
• Email address and telephone number;
• Username and encrypted password credentials.

Financial & Transaction Data:

• Bank account details, Touch n Go eWallet account identifiers, and Boost account identifiers used for deposits and withdrawals;
• Transaction history including deposit amounts, withdrawal requests, dates, and payment method references;
• Winnings, losses, wager amounts, and game session records.

Technical & Usage Data:

• IP address, device type, operating system, and browser type;
• Login timestamps, session duration, and pages visited within the Platform;
• Geolocation data at the city level where permitted by your device settings.

Communication Data:

• Records of correspondence with the winbox01 support team, including Live Chat transcripts and email exchanges;
• Responses to optional surveys, feedback submissions, and promotional opt-ins.

4.How We Use Your Personal Data

4.1 winbox01 processes personal data for the following purposes:

• Account Management: To create, maintain, and administer your winbox01 player account, including identity verification and KYC compliance.
• Service Delivery: To provide access to casino games, sportsbook markets, live dealer tables, and all other Platform features.
• Financial Processing: To process deposits via Touch n Go eWallet, Boost, and Malaysian bank transfers, and to execute withdrawal requests to Maybank, CIMB, Public Bank, and other supported institutions.
• Legal & Regulatory Compliance: To comply with anti-money-laundering (AML) obligations, gaming licence conditions, and applicable Malaysian and international data protection laws.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, and other prohibited conduct.
• Responsible Gaming: To monitor account activity for indicators of problem gambling and to enforce self-exclusion, deposit limits, and other responsible gaming tools.
• Customer Support: To respond to account queries, complaints, and technical issues submitted through any support channel.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.
• Marketing Communications: To send promotional offers and updates to Players who have opted in to receive such communications. Players may withdraw consent at any time.

5.Legal Basis for Processing

5.1 winbox01 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the Terms & Conditions agreed to upon account registration, including delivering gaming services and processing financial transactions.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, gaming licence requirements, and tax reporting obligations.
• Legitimate Interests: Processing carried out for the purposes of fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and optional data uses, where your explicit consent has been obtained and is maintained.

6.Data Sharing & Third Parties

6.1 winbox01 does not sell, rent, or trade personal data. We share data only in the following limited circumstances:

• Payment Processors: Financial data is shared with payment service providers (including those supporting Touch n Go eWallet, Boost, and Malaysian bank transfer networks) solely to the extent necessary to process transactions.
• KYC & Identity Verification Providers: Identity documents and verification data may be processed by licensed third-party KYC providers under strict data processing agreements.
• Fraud & AML Compliance: Where required by law or our regulatory obligations, we may share data with financial intelligence units, law enforcement, or regulatory bodies.
• Gaming Platform Partners: Game providers and live dealer studio operators may receive session-level data necessary to operate their respective game products, but do not receive full player profiles.
• Professional Advisers: Legal, audit, and compliance advisers may access data on a strictly confidential basis where required for professional engagements.

6.2 All third-party data processors engaged by winbox01 are required to implement technical and organisational security measures at least equivalent to those applied by winbox01 itself.

7.International Data Transfers

7.1 The winbox01 Platform serves Malaysian players from infrastructure that may include servers located outside Malaysia. Where personal data is transferred internationally, winbox01 ensures that appropriate safeguards are in place, including standard contractual clauses and data processing agreements with recipient entities.

7.2 winbox01 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate supplementary safeguards as required by applicable law.

8.Data Retention

8.1 winbox01 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements:

• Account & Identity Data: Retained for a minimum of five (5) years from account closure, in compliance with AML and gaming licence record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for a minimum of two (2) years from the date of the last communication.
• Technical & Log Data: Retained for up to twelve (12) months from the date of collection, unless extended retention is required for an ongoing investigation or legal proceeding.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual player.

9.Cookies & Tracking Technologies

9.1 winbox01 uses cookies and similar technologies (including web beacons and local storage) on the Platform for the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session management and security tokens. These cannot be disabled.
• Functional Cookies: Enable personalisation features such as language preferences, remembered login state (where opted in), and game lobby layout preferences.
• Analytics Cookies: Collect anonymised data on how Players navigate the Platform to help winbox01 improve usability and performance. No individual player is identified in analytics data.

9.2 You may control non-essential cookie categories through your browser settings. Disabling functional or analytics cookies will not prevent access to the Platform but may affect the personalisation of your experience.

10.Data Security

10.1 winbox01 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and winbox01 servers;
• Encryption at rest for sensitive data fields including payment information and identity documents;
• Role-based access controls limiting staff access to personal data to those with a documented operational need;
• Regular penetration testing and security audits by qualified independent parties;
• Automated monitoring systems for anomalous access patterns and potential data breach indicators.

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winbox01 will notify affected players without undue delay in accordance with applicable notification obligations.

11.Your Data Subject Rights

11.1 Subject to applicable law and regulatory limitations, you have the following rights in respect of your personal data held by winbox01:

• Right of Access: To request a copy of the personal data winbox01 holds about you;
• Right to Rectification: To request correction of inaccurate or incomplete personal data;
• Right to Erasure: To request deletion of personal data where retention is no longer legally required or justified;
• Right to Restrict Processing: To request that winbox01 limits the processing of your data in certain circumstances;
• Right to Data Portability: To receive your data in a structured, machine-readable format where technically feasible;
• Right to Object: To object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: To withdraw consent to any processing activity where consent was the legal basis, without affecting the lawfulness of processing carried out prior to withdrawal.

11.2 To exercise any of the above rights, contact the winbox01 Data Protection team at [email protected]. Requests will be acknowledged within five (5) business days and responded to within thirty (30) calendar days.

12.Minors & Age Restrictions

12.1 The winbox01 platform is strictly restricted to individuals aged 21 years and above. winbox01 does not knowingly collect or process personal data of individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

12.2 If you believe that winbox01 may hold data relating to a person under 21, please contact us immediately at [email protected].

13.Updates to This Privacy Policy

13.1 winbox01 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable laws, or regulatory requirements. Material updates will be notified to registered Players via the email address associated with their account and/or through a platform-wide notice.

13.2 The effective date of the current version of this Policy is displayed at the top of this page. Continued use of the winbox01 Platform following the effective date of any update constitutes your acceptance of the revised Policy.

14.Contact & Data Enquiries

14.1 For all privacy-related queries, data subject right requests, or complaints regarding winbox01's handling of personal data, please contact our Data Protection team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available within your account dashboard after login, 24 hours a day, 7 days a week.

14.2 If you are not satisfied with winbox01's response to a data privacy concern, you may escalate the matter to the data protection authority or regulator relevant to the jurisdiction under which winbox01 holds its gaming licence.