winbox88 Privacy Policy

1. Introduction & Data Controller Identity

This Privacy Policy ("Policy") describes how winbox88 ("winbox88", "we", "us", "our"), the operator of the online gaming platform accessible at winbox88.club, collects, processes, stores, and discloses personal data relating to players, prospective players, and visitors to our platform ("you", "your").

winbox88 acts as the data controller with respect to personal data collected through the winbox88 platform. As data controller, winbox88 is responsible for ensuring that your personal data is processed lawfully, fairly, and transparently in accordance with this Policy and applicable data protection legislation.

2. Information We Collect

winbox88 collects personal data in the following categories:

2.1 Registration & Identity Data

• Full legal name as it appears on government-issued identification;
• Date of birth (for mandatory 21+ age verification);
• Malaysian mobile phone number;
• Email address;
• Residential address;
• Username selected during account creation.

2.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (MyKad, passport, or equivalent);
• Proof of address documentation where required;
• Source of funds documentation for high-value accounts as required under anti-money laundering obligations.

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method details (e.g., Touch n Go eWallet account reference, bank account number suffix);
• Transaction history and account balance movements;
• Bonus claim and wagering activity records.

2.4 Gaming Activity Data

• Game session logs including games played, bets placed, outcomes, and timestamps;
• Sportsbook bet history covering football, Malaysia Super League, EPL, UFC, and other covered markets;
• Responsible gaming settings, including any limits or self-exclusion periods applied to your account.

2.5 Technical & Device Data

• IP address and approximate geolocation at the time of login;
• Device type, operating system, and browser version;
• Session duration and navigation patterns within the winbox88 platform;
• Cookie identifiers (see Section 7).

2.6 Communications Data

• Records of your interactions with winbox88 customer support via live chat;
• Email correspondence sent to and received from winbox88;
• Any information you voluntarily provide when submitting a support request or completing a verification process.

3. How We Use Your Information

winbox88 uses your personal data for the following purposes:

• Account management: Creating, verifying, maintaining, and closing your winbox88 player account;
• Age verification: Confirming that all players are 21 years of age or older before granting access to real-money gaming;
• Payment processing: Facilitating MYR deposits and withdrawals via your chosen payment method, including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank;
• Fraud prevention & AML compliance: Detecting, investigating, and preventing fraudulent activity, money laundering, and other financial crimes in fulfilment of our regulatory obligations;
• Customer support: Responding to your enquiries and resolving account-related issues through our 24/7 live chat and email support channels;
• Platform personalisation: Tailoring the winbox88 interface, game recommendations, and promotional offers to your demonstrated preferences and gaming history;
• Responsible gaming: Monitoring gaming patterns for indicators of problem gambling and administering any responsible gaming tools you have activated on your account;
• Legal & regulatory compliance: Fulfilling our obligations under our international gaming authority licence, applicable anti-money laundering regulations, and any lawful order from a competent authority.

4. Legal Basis for Processing

winbox88 processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to provide the winbox88 gaming service to you under the Terms & Conditions you accepted upon registration;
• Legal obligation: Processing required to comply with anti-money laundering legislation, gaming licence conditions, tax reporting obligations, and any lawful regulatory or judicial order;
• Legitimate interests: Processing necessary for fraud detection, platform security, abuse prevention, and improving our services, where such interests are not overridden by your fundamental rights;
• Consent: Where we process your data for direct marketing communications, we rely on your explicit consent, which you may withdraw at any time by contacting our support team.

5. Sharing of Personal Data

winbox88 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Game providers and platform suppliers: Licensed third-party studios and technology providers whose games and services are integrated into the winbox88 platform, solely for the purpose of delivering the contracted service;
• Payment service providers: Financial institutions and e-wallet operators (including Touch n Go, Boost, GrabPay, Maybank, CIMB, and Public Bank) necessary to process your deposits and withdrawals;
• Identity verification services: Third-party KYC and AML screening providers used to verify player identity and screen for sanctions list matches;
• Regulatory authorities: Gaming licence authorities, financial intelligence units, and law enforcement agencies where winbox88 is legally required to disclose information;
• Professional advisors: Legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations.

All third-party service providers engaged by winbox88 are contractually required to process your personal data only on winbox88's documented instructions and to maintain appropriate technical and organisational security measures.

6. International Data Transfers

Some of winbox88's service providers and game studios are located outside Malaysia. Where personal data is transferred to recipients in countries that do not provide an equivalent level of data protection, winbox88 implements appropriate safeguards — including standard contractual clauses or equivalent transfer mechanisms — to ensure that your data receives a consistent level of protection regardless of where it is processed.

7. Cookies & Tracking Technologies

winbox88 uses cookies and similar tracking technologies on the winbox88.club platform for the following purposes:

• Strictly necessary cookies: Required for basic platform functionality including session authentication, security tokens, and load balancing. These cannot be disabled without impairing your ability to use the platform;
• Functional cookies: Store your preferences such as language settings, remembered username (if enabled), and last-visited game category to improve your experience;
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the winbox88 platform to help us improve performance and usability. No personally identifiable information is transmitted via analytics cookies;
• Session integrity cookies: Detect and prevent cross-site request forgery and other session-based security attacks.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your winbox88 account.

8. Data Retention

winbox88 retains personal data for the following periods:

• Active account data: Retained for the duration of your account and for five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements;
• KYC and identity verification documents: Retained for five (5) years from the date of verification or account closure, whichever is later;
• Transaction records: Retained for seven (7) years for tax and financial compliance purposes;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Technical logs (IP, session data): Retained for ninety (90) days unless a specific investigation requires longer retention, in which case the relevant records will be preserved until the matter is resolved.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

9. Your Rights

Subject to applicable law, you have the following rights with respect to your personal data held by winbox88:

• Right of access: Request a copy of the personal data winbox88 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where winbox88 has no continuing legal basis to retain it;
• Right to restriction: Request that we restrict processing of your data pending resolution of a dispute about its accuracy or our right to process it;
• Right to data portability: Receive a machine-readable copy of the personal data you provided to winbox88, where technically feasible;
• Right to object: Object to processing based on legitimate interests, including profiling for direct marketing purposes;
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our support team via live chat or at [email protected]. We will respond within 30 calendar days. We may need to verify your identity before processing your request.

10. Children's Privacy

The winbox88 platform is strictly for users aged 21 and above. winbox88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will immediately suspend the relevant account, delete the collected data, and report the matter in accordance with our regulatory obligations. If you have reason to believe that a person under 21 has registered on winbox88, please contact our support team immediately.

11. Security Measures

winbox88 implements a layered technical and organisational security programme to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for personal data stored in our databases;
• Role-based access controls ensuring only authorised personnel can access player data;
• Regular third-party penetration testing and vulnerability assessments;
• Multi-factor authentication on all internal administrative systems;
• Formal incident response procedures compliant with our gaming authority licence requirements.

While winbox88 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You play an important role in keeping your account safe by choosing a strong, unique password and not sharing your winbox88 login credentials with anyone.

12. Changes to This Privacy Policy

winbox88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our gaming authority licence requirements. Where changes are material, winbox88 will notify registered players via the platform interface or by email to your registered address at least 14 days before the changes take effect. Your continued use of the winbox88 platform following notification of a material change constitutes acceptance of the updated Policy.

The "Last Updated" date at the top of this page indicates when this Policy was most recently revised. We encourage you to review this page periodically.

13. Contact & Data Subject Requests

For all privacy-related queries, data subject access requests, or concerns about how winbox88 handles your personal data, please contact our dedicated support team:

• Live chat: Available 24/7 via the winbox88 platform
• Email: [email protected]
• Response time: Within 30 calendar days for formal data subject requests; under 2 minutes during peak hours for live chat enquiries (Malaysian Standard Time, UTC+8)

Please include your registered username and a description of your request to help us locate your account and respond promptly.