1. Introduction and Scope of This Policy
This Privacy Policy is issued by winnbox ("we", "company" or "platform") and applies to all users who register, log in or use the services provided through the winnbox.org website. By using the winnbox platform, you agree that your personal information is collected and used in accordance with the provisions stated in this document.
This policy describes the types of information we collect, the purposes for that collection, the parties that may have access to such information, your rights as a user, and the security measures we take to protect your data. Please read this document carefully. If you do not agree with any part of this policy, you are advised not to use winnbox services.
2. Information We Collect
2.1 Information You Provide Directly
When you register or use the winnbox platform, we collect information you voluntarily provide, which includes:
- Full name as stated on your identity card (MyKad) or passport
- An active email address
- Mobile phone number
- Date of birth (for age verification of 21 years and above)
- Payment method details such as e-wallet number, bank account or crypto wallet address
- Information you provide when contacting customer service
2.2 Automatically Collected Information
Each time you browse or use the winnbox platform, our systems automatically record certain technical information for security and service improvement purposes:
- Your device's IP address
- Type and version of web browser used
- Device type (computer, mobile phone, tablet)
- Device operating system
- Access log data including date, time and pages visited
- Cookie data and session identifiers
2.3 Transaction-Related Information
To meet regulatory requirements and ensure the security of financial transactions, we maintain complete records of financial activity in your account, including deposits, withdrawals, bets and bonus payments. These records are retained for the period prescribed by the relevant regulatory authority.
3. Purposes for Using Your Information
winnbox uses your personal information for the following purposes only:
- Account management: Creating, verifying and maintaining your user account
- Payment processing: Processing deposits and withdrawals using methods such as Touch 'n Go eWallet, DuitNow, FPX, Boost, ShopeePay and cryptocurrency
- Identity verification: Complying with KYC (Know Your Customer) requirements set by regulatory bodies to prevent money laundering
- Security: Detecting and preventing fraudulent activity, money laundering and account misuse
- Customer service: Responding to enquiries and resolving issues you report to the support team
- Service improvement: Analysing usage patterns to improve platform quality and user experience
- Communications: Sending important notices related to your account, policy changes or promotional offers you have opted in to receive
- Legal compliance: Fulfilling legal obligations and requirements of relevant regulatory bodies
4. Sharing and Disclosure of Information
winnbox does not sell or transfer your personal information to external parties for commercial purposes. However, in certain circumstances, your information may be shared with the following parties:
4.1 Third-Party Service Providers
We engage trusted third-party service providers to help us operate platform functions, including payment processors, cloud service providers and customer support platforms. These providers are bound by strict confidentiality agreements and are only permitted to use your data for the purposes we specify.
4.2 Legal Requirements
winnbox may be required to disclose your personal information to competent authorities when mandated by law, court order or official request from law enforcement agencies. In such cases, we will endeavour to notify you in advance as long as this is not prohibited by law.
4.3 Business Transfers
In the event of a merger, acquisition or transfer of winnbox business assets, user information may be transferred as part of those assets. In such situations, we will ensure that an equivalent or stronger privacy policy is adopted by the receiving entity.
5. Data Security
Protecting your information is a priority for winnbox. We use a combination of technical and organisational measures to protect your data from unauthorised access, alteration, disclosure or destruction:
- 256-bit SSL encryption for all data communications between your browser and our servers
- Encryption at rest for sensitive information
- Role-based access controls that restrict who can view user data
- Regular security audits and penetration testing by independent third parties
- 24/7 system monitoring to detect suspicious activity
- Network segregation for systems that store sensitive data
While we take all reasonable steps to protect your data, no security system can be guaranteed to be perfect. You are also responsible for keeping your account password confidential and not sharing your login credentials with anyone.
6. Cookies and Tracking Technologies
The winnbox platform uses cookies and similar technologies such as server-based sessions and local storage to improve user experience and ensure session security. The cookies we use fall into several categories:
- Session cookies: Required to allow you to log in and navigate the platform smoothly. These cookies are automatically deleted when you close your browser.
- Preference cookies: Store your chosen settings such as language and display configuration.
- Security cookies: Used to detect suspicious login attempts and protect your account.
- Analytics cookies: Help us understand how users interact with the platform for improvement purposes.
You can manage or block cookies through your web browser settings. However, please note that blocking certain cookies may affect the functionality of the winnbox platform.
7. Your Rights as a User
As a winnbox user, you have the following rights regarding your personal information:
- Right of access: You have the right to request a copy of the personal information we hold about you.
- Right of correction: You can request that we correct any information that is inaccurate or incomplete.
- Right of deletion: In certain circumstances, you may request the deletion of your personal information, subject to our legal obligations to retain certain records.
- Right to object: You can object to the processing of your information for direct marketing purposes.
- Right to data portability: You have the right to receive your data in a machine-readable format.
- Right to withdraw consent: You may withdraw consent previously given at any time, without affecting the validity of processing carried out before the withdrawal.
To exercise any of the above rights, please contact the winnbox customer service team via live chat or email at [email protected]. We will endeavour to respond to your request within a reasonable time.
8. Data Retention Period
winnbox retains your personal information for as long as your account is active or as long as necessary to provide the service. After account closure, some records may be kept for an additional period to meet regulatory requirements, resolve any outstanding disputes, or comply with legal obligations.
Financial transaction records, identity verification records, and security-related communications are kept for the period required by applicable laws and licensing regulations. Once the retention period ends, data will be securely deleted or anonymised.
9. International Data Transfers
As winnbox operates under an international licence, some of your data may be processed or stored on servers located outside Malaysia. In such cases, we ensure that adequate safeguards are in place to protect your data in accordance with accepted international standards, including the use of appropriate data protection clauses in agreements with service providers.
10. Protection of Underage Users
winnbox services are exclusively for individuals aged 21 and above. We do not knowingly collect personal information from any individual under the age of 21. If we find that we have collected personal information from an underage individual, the account in question will be closed immediately and the information will be deleted.
All new users are required to submit age verification documents during the KYC process. winnbox uses a strict verification process to ensure that no underage individuals are using this platform.
11. Changes to the Privacy Policy
winnbox reserves the right to modify or update this Privacy Policy at any time. Any changes will take effect as soon as the latest version is published on this website with a new "Updated" date. For material and significant changes, we will send a notice to registered users via email or display a clear notice on the platform before the changes take effect.
Continued use of winnbox services after changes take effect will be considered as your acceptance of the updated Privacy Policy.
12. Contact Us Regarding Privacy
If you have any questions, concerns, or complaints regarding how we handle your personal information, we encourage you to contact us directly:
- Email: [email protected]
- Live chat: Available 24/7 via the winnbox website in Malay and English
The winnbox customer service team, available around the clock, will ensure that your privacy-related enquiries are handled with care and professionalism.