winbox Privacy Policy

1. Introduction

Welcome to winbox. This Privacy Policy ("Policy") applies to all users of the winbox platform, accessible at winbox.lat, including its website, mobile-optimised pages, and associated services (collectively, the "Platform"). The Policy governs how winbox collects, processes, stores, and protects personal data provided by users located in Malaysia and elsewhere.

By accessing or using the winbox Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

This Policy applies to all aspects of your engagement with winbox, including account registration, deposits and withdrawals, sports betting, live casino gaming, slot games, fishing games, customer support interactions, and marketing communications.

2. Data We Collect

winbox collects personal data through several channels during the course of your use of the Platform. The categories of data we may collect include:

• Identity Data: Full name, date of birth, nationality, and identification document details (e.g., Malaysian IC or passport number) collected during account registration and Know Your Customer (KYC) verification.
• Contact Data: Email address, mobile phone number, and residential address (city, state, postcode) within Malaysia or elsewhere.
• Account Data: Username, encrypted password, account preferences, communication language settings, and responsible gaming limits you have set.
• Financial Data: Bank account numbers (e.g., Maybank, CIMB, Public Bank), e-wallet identifiers (e.g., Touch 'n Go eWallet, Boost, GrabPay), DuitNow details, transaction history, deposit amounts, withdrawal records, and MYR balance information.
• Usage Data: Pages visited on the Platform, game sessions accessed, bet histories, login timestamps, session durations, features interacted with, and in-platform search queries.
• Device & Technical Data: IP address, browser type and version, operating system, device type (desktop, smartphone, tablet), screen resolution, referring URLs, and cookie identifiers.
• Communication Data: Records of messages exchanged with our customer support team via live chat, email, or other channels, including chat transcripts.
• Marketing Preferences: Your stated preferences regarding receiving promotional communications from winbox by email, SMS, or in-platform notification.

We collect data directly from you when you register an account, complete KYC verification, make or receive payments, contact our support team, or interact with the Platform. We may also collect data automatically through cookies and similar tracking technologies as described in Section 7.

3. How We Use Your Data

winbox processes your personal data for the following lawful purposes:

• Account Management: To create and administer your winbox account, verify your identity, process your registration, and maintain accurate account records.
• Service Delivery: To provide you with access to sports betting, live casino, slots, fishing games, cricket betting, and all other Platform services you choose to use.
• Payment Processing: To process deposits, withdrawals, and internal transfers accurately and securely in MYR via supported local payment methods including FPX, DuitNow, and major Malaysian banks.
• Regulatory Compliance & AML: To fulfil our obligations under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) regulations, including KYC checks and suspicious activity reporting.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other malicious activities.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and improve our service quality.
• Personalisation: To customise your experience on the Platform based on your preferences, betting history, and usage patterns.
• Marketing Communications: To send you relevant promotions, bonuses, and updates about new games or features — but only where you have given your consent or where permitted under applicable law. You may opt out at any time.
• Platform Improvement: To analyse aggregate usage trends, conduct research, and improve the design, performance, and functionality of the Platform.

4. Sharing Your Data

winbox does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data with the following categories of recipients only to the extent necessary and on a need-to-know basis:

• Payment Service Providers: Licensed payment processors and e-wallet operators (including FPX-connected banks, Touch'n Go, Boost, GrabPay, DuitNow) that facilitate deposits and withdrawals on your behalf.
• Identity Verification Partners: Third-party KYC and age verification service providers who assist us in confirming your identity and ensuring Platform users meet the 21+ age requirement.
• Fraud Prevention & Security Services: Specialist providers that help us detect suspicious activity, prevent account takeovers, and protect the integrity of transactions on the Platform.
• Regulatory Authorities: Government agencies, law enforcement bodies, or regulatory authorities in Malaysia where we are legally required to disclose information — for example, in response to a court order, statutory obligation, or investigation into financial crime.
• Group Companies: Affiliated entities within the winbox group that assist in delivering Platform services, subject to equivalent data protection obligations.
• IT and Hosting Providers: Cloud infrastructure, data centre, and technology service providers that store and process data on our behalf under strict contractual confidentiality terms.
• Professional Advisers: Lawyers, auditors, accountants, and consultants engaged by winbox who are bound by professional confidentiality obligations.

All third parties with whom winbox shares personal data are required to implement appropriate technical and organisational security measures and to use the data solely for the specified purposes.

5. Data Retention

winbox retains your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, unless a longer retention period is required or permitted by applicable law.

As a general guide:

• Account and Identity Data is retained for the duration of your active account relationship with winbox, plus a minimum of five (5) years following account closure, to comply with AML and regulatory record-keeping obligations.
• Transaction and Financial Data is retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements applicable in Malaysia.
• Customer Support Records are retained for a period of three (3) years from the date of each interaction.
• Marketing Preferences and Consent Records are retained for as long as you hold an account with winbox, or until you withdraw consent, whichever is earlier.
• Technical and Usage Data derived from cookies and analytics tools is typically retained for a period of up to twenty-four (24) months before being anonymised or deleted.

When personal data is no longer required, winbox will securely delete or anonymise it in a manner that prevents reconstruction or re-identification.

6. Data Security

winbox implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data in transit between your device and winbox servers.
• Encryption of sensitive data at rest, including financial records and identity documents.
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access specific categories of personal data.
• Regular independent security audits and penetration testing of the Platform infrastructure.
• Secure password hashing and multi-factor authentication (MFA) options for user accounts.
• Continuous monitoring systems to detect and respond to security incidents in real time.
• Staff training on data protection, privacy obligations, and secure data handling practices.

While winbox takes all reasonable precautions, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, winbox will notify affected users and relevant authorities in accordance with applicable legal requirements.

7. Cookies & Tracking Technologies

winbox uses cookies and similar technologies (such as web beacons and local storage) to enhance your experience on the Platform. Cookies are small text files placed on your device when you visit the Platform.

The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without affecting core Platform functionality.
• Performance & Analytics Cookies: Help us understand how users navigate the Platform, which pages are most visited, and where errors occur. Data collected is aggregated and anonymised.
• Functional Cookies: Remember your preferences such as language setting, preferred game category, and display options to personalise your session.
• Marketing & Targeting Cookies: Used to deliver relevant promotional content and measure the effectiveness of winbox marketing campaigns. These are only activated where you have provided consent.

You can manage or disable non-essential cookies through your browser settings. Please note that restricting certain cookies may affect the performance or personalisation features of the Platform. Detailed cookie management instructions for popular browsers (Chrome, Safari, Firefox, Edge) are available from each browser's official support pages.

8. Your Rights

As a user of the winbox Platform, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data winbox holds about you, along with information about how it is processed.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or update it promptly.
• Right to Erasure: In certain circumstances, you may request that winbox delete your personal data — for example, where the data is no longer necessary for the original purpose, or where you withdraw consent and no other legal basis applies. Note that deletion requests may be subject to our regulatory retention obligations.
• Right to Restrict Processing: You may request that we limit how we use your data in specific situations, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, subject to our demonstrating compelling grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact the winbox Privacy Team via our 24/7 live chat support or by writing to us at the email address listed in Section 12. We will respond to verified requests within a reasonable timeframe and in accordance with applicable law.

winbox will not discriminate against you for exercising your data protection rights. We may, however, need to verify your identity before processing certain requests to prevent unauthorised access to account data.

9. Minors & Age Verification

The winbox Platform is strictly intended for adults. You must be at least 21 years of age to register an account, place bets, or participate in any gaming activity on the Platform.

winbox does not knowingly collect or process personal data from individuals under the age of 21. During the registration process, users are required to confirm their date of birth, and winbox conducts identity verification checks to validate age eligibility. Where we discover that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has created a winbox account or provided personal information to us, please contact our support team immediately so we can investigate and take appropriate action.

10. Cross-Border Data Transfers

winbox operates primarily in Malaysia and stores data on servers located in the region. However, in the course of delivering Platform services — particularly in relation to fraud prevention, payment processing, and cloud infrastructure — your personal data may be transferred to and processed in countries outside of Malaysia.

Where cross-border transfers occur, winbox ensures appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Malaysia. These safeguards may include contractual data protection clauses, the use of service providers in jurisdictions with recognised adequate levels of data protection, or other legally recognised transfer mechanisms.

By using the winbox Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject at all times to the protections outlined in this Policy.

11. Changes to This Policy

winbox reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. When we make material changes to this Policy, we will notify registered users via in-platform notification or email prior to the changes taking effect, and update the "Last Updated" date shown at the top of this page.

We encourage you to review this Policy periodically to stay informed about how winbox protects your personal data. Your continued use of the Platform after any amendments become effective constitutes your acceptance of the revised Policy.

Previous versions of this Policy are available upon request by contacting our support team.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way winbox handles your personal data, please do not hesitate to get in touch with us:

• Live Chat: Available 24/7 through your winbox account dashboard — typical response time is 3–5 minutes.
• Email (plain text — not a link): [email protected]
• Language Support: Our team responds in English, Bahasa Melayu, and Mandarin.

winbox is committed to resolving privacy-related queries fairly and transparently. We aim to acknowledge all written enquiries within two (2) business days and provide a full response within fourteen (14) days, or sooner where possible.

Should you remain unsatisfied with our response to a privacy concern, you may have the right to escalate the matter to the relevant data protection authority or regulatory body applicable in your jurisdiction.