Winbox Privacy Policy

Effective Date: 1 Oct 2024
Last Updated: 14 August 2025
Applies To: https://www.winboxmys.co

Introduction

At Winbox Malaysia ("Winbox", "we", "our", or "us"), your privacy is of paramount importance. As the primary brand representing Winbox in Malaysia, this Privacy Policy explains how we collect, use, store, and protect your personal data when you access our website, mobile app, or services.

By using our platform, you acknowledge and agree to the data practices outlined in this Privacy Policy. We strongly encourage you to carefully review this policy to fully understand how we handle and safeguard your information.

1. Legal Compliance

Winboxmys.co is operated solely for users in Malaysia and adheres strictly to the Personal Data Protection Act 2010 (PDPA).

We are committed to safeguarding your personal data in accordance with Malaysian law. In compliance with Sections 6 and 7 of the PDPA, we only collect personal data with your consent and use it for legitimate purposes. Our processes for collecting, using, storing, and disclosing information are built to meet PDPA standards, ensuring transparency, security, and accountability at every level.

Please note that we do not offer services in jurisdictions outside Malaysia. If you are accessing this platform from another country, you do so at your own discretion and acknowledge that our data policies are governed entirely by Malaysian regulations.

2. Information Collection

When you visit our platform, the following types of personal information may be collected:

a. Personal Identifiers: This encompasses your complete name, email address, contact number, and payment information (e.g., Touch 'n Go, FPX), which are essential for identification and communication purposes.

b. Account Credentials: Including your User ID (UID), password, and associated transaction history, facilitating account management and ensuring precise record maintenance.

c. Technical Specifications: Details pertaining to your IP address, browser type, operating system, and device specifications, which aid in optimizing site performance and ensuring cross-platform compatibility.

d. Usage Data: Information on your interaction with our website, such as pages visited, duration of stay, and actions undertaken. This data is instrumental in enhancing user experience and customizing our offerings.

e. Communication Archives: Documentation of all correspondences with our team, whether via support requests, emails, or other communication mediums. Maintaining these records allows us to effectively respond to your queries and elevate our customer support services.

3. Purpose of Data Collection

The data we collect is utilized for several critical purposes:

Service Provision: The information gathered enables us to register your account, verify your identity, facilitate secure transaction processing, and deliver dependable customer support as required.
User Experience Enhancement: We analyse user interactions to understand player behavior for platform performance, detect app bugs, and recommend games or offers tailored to your interests. This information also guides improvements to our website’s functionality and the introduction of new features to enhance your overall experience.
Communication: Your contact information allows us to keep you updated on significant service modifications, new feature releases, promotional activities, and any revisions to our policies or terms of service.
Security Assurance: By monitoring login activities, detecting unusual behavior, and employing advanced security protocols, we ensure the protection of your account, prevent unauthorized access, and uphold the integrity and safety of our platform. Data may also be used for fraud prevention and bonus abuse monitoring, as detailed in the “Anti-Fraud & Bonus Abuse Monitoring” section below.
Regulatory Reporting: To comply with regulatory or licensing obligations required by gaming authorities in Malaysia or other applicable jurisdictions.

4. Anti-Fraud & Bonus Abuse Monitoring

To maintain a fair and secure environment for all players, we actively monitor activities that may indicate fraudulent behaviour or bonus abuse. This may include, but is not limited to:

Abuse of promotions or free credits
Engaging in unusual or suspicious transaction patterns

Accounts found to be in breach of our rules may be suspended, restricted, or permanently closed. If you believe your account has been flagged in error, you may contact our customer support team for review.

5. Marketing & Promotions

With your consent, we may send you marketing communications, which may include:

Free credit offers, promotions, tournaments
New game launches or features updates
VIP or loyalty rewards

You may opt-out at any time by:

Clicking the "unsubscribe" link in our email
Contacting our support team

Opting out will not affect the delivery of essential service-related notifications.

6. Cookies & Tracking

Our site uses cookies and similar technologies (such as web beacons and local storage) to:

Remember your login and maintain your session
Analyse site usage and user behaviour for performance improvements
Deliver personalized content and targeted advertisements

Where required by law, we will obtain your consent before placing non-essential cookies on your device.

You may disable cookies through your browser settings; however, some features of the site may not function properly without them. Certain cookies may be provided by third-party service providers for analytics or advertising purposes.

For guidance on managing cookies in your browser, you may refer to the following official guides:

7. Sharing of Information

We are committed to protecting your privacy and will not sell or lease your personal data to third parties. However, under specific conditions, we may share your information with trusted entities, including:

Third-Party Service Providers: We collaborate with reputable service providers who assist in our operations, such as payment processors (e.g. EZPAY, FPX), web hosting services & analytics services, support providers and customer support systems.
Legal Obligations: In compliance with legal requirements or in response to lawful requests, we may disclose necessary information to adhere to regulations or to defend our legal rights.
Affiliated Companies: With your explicit consent, we may share certain information with our affiliated partner (e.g. Winbox77) to improve your user experience, offer tailored promotions, VIP tracking or integrate services across our network.

8. Safeguarding Your Data

We implement rigorous security measures to protect your personal information, including advanced encryption, secure server infrastructure, and strict access controls. These measures are designed to maintain the integrity and confidentiality of your data.

While we take all reasonable steps to safeguard your information, no digital platform can guarantee absolute security. We encourage you to protect your account credentials and notify us immediately if you suspect any suspected access or security breach.

We use industry-standard measures to safeguard your data:

SSL encryption for all transactions
Secure data centers with firewalls and DDoS protection
Strict access control to user information
Daily malware scans and routine backups

9. Retention of Data

We retain your personal information only for the duration necessary to achieve the purposes outlined in this policy. Upon the expiration of this period, or upon your request, we will securely erase or anonymize your data in accordance with legal standards and industry best practices.

We retain your data only for as long as necessary:

To comply with legal, regulatory, or accounting requirements
For fraud prevention and Know Your Customer (KYC) audit trails
To support your access to game history, transaction records, or VIP benefits

If you choose to close your account, we will securely erase or anonymize your data unless law requires retention.

10. Your Rights and Choices

Under PDPA and applicable laws, we are committed to upholding your rights concerning your personal data:

Access: Request a copy of the personal data we hold about you
Amend: Correct or update any inaccurate or incomplete information
Deletion: Request deletion of your personal data (subject to legal or regulatory retention requirements)
Consent withdrawal: Withdraw consent to receive marketing
Restriction/Objection: Restrict or object to the processing of your personal data for specific purposes

Additionally, you may seek further details regarding the processing of your data or lodge objections to specific uses thereof. Should you wish to exercise any of these rights or have any inquiries related to privacy, please do not hesitate to contact our customer service team (see section below).

11. Privacy for Individuals Under 18

Winbox is strictly for players aged 18 and above. We do not knowingly collect personal information from individuals under the age of 18. If we determine that a player is under 18, their account will be suspended and their personal data will be securely deleted.

Parents or legal guardians who believe a minor has registered or provided personal information without consent should contact us immediately so that we can take appropriate action.

Key points:

Platform access is restricted to players aged 18 and above
We do not knowingly collect data from minors
Accounts of underage players will be suspended and their data deleted
Parents/guardians may contact us to report suspected underage registration

12. Amendments to the Privacy Policy

We may update this Privacy Policy to reflect:

New legal or regulatory requirements
Platform changes (e.g. new payment systems or features)
Security improvements or user rights updates

The latest version will always be available at our Privacy Policy page, along with the “Last Updated” date.

We encourage you to review this policy periodically to stay informed about how we handle your personal data. Where a change is deemed significant, for example, one that materially affects your rights or the way we process your data, we will notify you via email, in-app message, or other appropriate communication channels.

13. Contact & Data Protection Officer

If you have any questions regarding this Privacy Policy, wish to exercise your data protection rights, or require assistance with any privacy-related matter, please contact our Data Protection Officer (DPO) or dedicated customer service team.

Winbox MY
Email: privacy@winboxmys.co
Support Hours: 24/7 via Live Chat

14. Final Disclaimer

By using Winbox, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy, including the collection, use, and processing of your personal data as described herein. We are steadfast in our commitment to ensuring that your data is managed with the highest level of responsibility and security at all times.