Personal Data Protection

Privacy Policy Winbox Web — Malaysia Player Data Protection

At winbox web, your privacy is more than a legal obligation — it is a responsibility we take seriously. This policy clearly explains how we handle your personal data from start to finish, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026

Six Ways winbox web Protects Your Data

We do not rely on written policies alone — every data protection measure at winbox web is backed by real, measurable technical systems.

256-Bit SSL Encryption

All data transmitted between your device and winbox web servers is protected with 256-bit SSL encryption — the same standard used by Malaysia's major banks. No information travels in plain text.

Secure Data Storage

Your personal data is stored on servers protected by multiple layers of security, including firewalls, intrusion detection, and strict access controls. Only authorized personnel can access this data.

Two-Factor Authentication

Winbox web supports two-factor authentication (2FA) for added account protection. Even if your password is compromised, an attacker cannot access your account without the second authentication factor that only you possess.

Data Minimisation Principle

Winbox web only collects information that is strictly necessary for platform operations. We do not request excessive data and do not store sensitive information such as full credit card numbers in our systems.

Malaysia PDPA Compliance

All winbox web data handling practices are designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular compliance reviews to ensure our policies remain up to date.

Regular Security Audits

The winbox web data security infrastructure undergoes regular independent audits by qualified third-party experts. Any identified vulnerabilities are addressed promptly to ensure your data remains protected at all times.

1 Personal Information We Collect

Winbox web collects your personal data through several different channels throughout your use of our platform. We are committed to being fully transparent about the types of information we collect and the reasons for collecting it.

Information you provide directly:

  • Full name, date of birth, and ID card or passport number upon account registration
  • Email address, mobile phone number, and residential address
  • Bank account or digital wallet details for deposit and withdrawal purposes
  • Identity verification (KYC) documents such as photos of your national ID, passport, or utility bills
  • Any information you share when contacting our customer support team

Information collected automatically:

  • IP address, device type, operating system, and web browser type you use
  • Gaming session data including date, time, game type, and wagering amounts
  • Deposit and withdrawal transaction history on the platform
  • Cookie data and similar tracking technologies (see Section 5 for details)
  • Platform access log including pages visited and time spent in the app

Privacy Notice: winbox web never collects credit or debit card numbers directly. All payment processing is handled by trusted third-party payment processors that comply with PCI DSS standards, meaning your card data never passes through or is stored in our systems.

2 How winbox web Uses Your Data

Every piece of data we collect has a clear and lawful purpose. winbox web does not use your personal data for purposes beyond the scope stated in this policy without obtaining your consent first.

The main purposes for which we use your personal data are as follows:

  • Account Operations: Creating, managing, and maintaining your player account on winbox web, including processing registration, login, and identity verification
  • Transaction Processing: Processing deposits, withdrawals, and all related financial transactions on your account securely and accurately
  • KYC Verification: Conducting the Know Your Customer process as required by regulatory obligations to verify identity and prevent fraud
  • Customer Support: Providing effective technical assistance and customer support when you contact the winbox web support team
  • Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and any activity that violates our terms of service
  • Service Improvement: Analysing aggregated usage patterns to improve user experience, platform performance, and game offerings
  • Marketing Communications: Sending information about promotions, bonuses, and special offers — only if you have consented to receive such communications
  • Legal Compliance: Fulfilling applicable legal and regulatory obligations, including responding to enquiries or directives from legitimate authorities

Control is in Your Hands: You can manage your marketing communication preferences at any time through your winbox web account settings. Withdrawing consent for marketing communications will not affect the core services you receive from our platform.

3 Data Sharing & Disclosure to Third Parties

Winbox web does not sell, rent, or trade your personal data to any third party for their commercial purposes. However, there are certain situations where we need to share your information with relevant parties in order to operate the platform effectively.

Parties that may receive your data include:

  • Payment Processor: Selected payment service providers engaged to process your deposit and withdrawal transactions securely
  • Identity Verification Provider: Third-party KYC services that help us verify player identities in line with regulatory requirements
  • Game Provider: Third-party game companies that provide game content on the winbox web platform, which may require basic session data for game functionality
  • Technology Service Provider: Companies providing IT infrastructure, data analytics, customer support, and other technical services to winbox web
  • Legal Authority: Law enforcement agencies, courts, or regulatory bodies when required by law or a valid court order

All third parties with whom we share data are contractually obligated to protect your information and use it only for agreed purposes. winbox web conducts due diligence on all third-party partners before any data sharing takes place.

Cross-Border Data Transfer: In some cases, your data may be processed on servers located outside Malaysia. winbox web ensures that any such data transfers are carried out with protections equivalent to or exceeding those required under Malaysia's PDPA.

4 Data Security & Protection Measures

Winbox web continually invests in the latest cybersecurity infrastructure to ensure your personal data is always protected. Our approach to data security encompasses integrated technical, organisational, and physical safeguards.

Technical security measures we implement:

  • 256-bit SSL/TLS encryption for all data in transit between your device and our servers
  • Encryption of sensitive data at rest using industry-standard encryption algorithms
  • Web application firewall (WAF) that monitors and filters malicious traffic in real time
  • Intrusion detection and prevention system (IDS/IPS) operating 24 hours a day
  • Continuous security monitoring with rapid incident response
  • Regular penetration testing conducted by independent security experts

Organisational measures we practise:

  • Access control based on the principle of least privilege — staff only access data required for their specific duties
  • Mandatory cybersecurity training for all winbox web staff who handle personal data
  • Clear, tested incident response procedures to address any data breach
  • Non-disclosure agreements (NDAs) binding all staff and contractors

Shared Responsibility: While winbox web takes all reasonable steps to protect your data, account security also depends on your own actions. Please use a strong password, enable two-factor authentication, and never share your login credentials with anyone.

5 Cookies & Tracking Technologies

Winbox web uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage, and deliver relevant content. Cookies are small text files stored on your device when you visit our website.

Types of cookies used by winbox web:

  • Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information about how you use winbox web — pages visited frequently, time spent, and any errors encountered. This data helps us improve platform performance.
  • Functional Cookies: Allowing the platform to remember your preferences such as display settings, language, and favourite game selections to deliver a more personalised experience.
  • Analytics Cookies: Used to understand aggregate usage patterns through trusted analytics tools, helping us make data-driven decisions for continuous improvement.

You can manage your cookie settings through your web browser. Most modern browsers allow you to view, manage, and delete cookies. Please note that disabling certain cookies may affect the functionality and your experience on the winbox web platform.

6 Your Rights as a User Under PDPA

As a winbox web player residing in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). winbox web fully respects these rights and provides clear mechanisms for you to exercise them.

Your Rights Description Status
Right of Access Request a copy of the personal data we hold about you, including how it is used Supported
Right to Rectification Request correction of inaccurate or incomplete personal data held in our systems Supported
Right to Erasure Request deletion of your personal data, subject to legal retention obligations Supported
Right to Withdraw Consent Withdraw consent for data processing at any time, particularly for marketing communications Supported
Right to Object Object to the processing of your personal data for specific purposes, including profiling Supported
Right to Data Portability Request your data in a structured, machine-readable format for transfer to another platform Supported

To exercise any of the above rights, please contact the winbox web customer support team via live chat within the platform. We will process your request within the timeframe stipulated by the PDPA and notify you of the action taken.

No Fees for Rights Requests: winbox web does not charge any fees to process requests related to your data protection rights. We believe that access to your personal data is a fundamental right and should not involve additional costs.

7 Data Retention & Storage Period

Winbox web retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable laws and regulations. Once the retention period expires, data will be securely deleted or anonymised.

  • Active Account Data: Retained for the duration your account remains active on winbox web, plus a set period after account closure for audit and compliance purposes
  • Financial Transaction Records: Retained for the minimum period required by Malaysian financial laws for reporting and audit purposes
  • KYC Documents: Retained for the period required by applicable anti-money laundering (AML) regulatory requirements
  • Customer Support Log: Retained for a reasonable period to allow us to address any complaints or disputes that may arise at a later stage
  • Marketing Data: Retained until you withdraw consent or request deletion

When data is no longer needed, winbox web applies secure deletion procedures to ensure your information cannot be recovered or accessed again. For data stored in physical formats, secure disposal procedures are also carried out.

8 Privacy Policy Amendments & Contact Us

Winbox web reserves the right to update or amend this privacy policy from time to time in line with changes in legislation, industry practices, or platform operations. Any significant changes will be communicated to you via a prominent notice on the winbox web website or by email to your registered address.

We encourage you to review this privacy policy periodically. The update date displayed at the top of this page reflects the latest version in effect. Continued use of the winbox web platform after any amendments take effect constitutes your acceptance of the updated terms.


Data Protection Officer: winbox web has appointed a Data Protection Officer (DPO) responsible for ensuring ongoing compliance with the PDPA and this privacy policy. If you have any enquiries, concerns, or complaints regarding how we handle your personal data, do not hesitate to contact us.

Contact Our Privacy Team: For any enquiries regarding winbox web's privacy policy or to exercise your data protection rights, please contact our support team via live chat, available 24/7 within the platform. Our official email: [email protected]

Winbox web will endeavour to respond to all privacy-related enquiries within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, who is responsible for overseeing PDPA compliance in the country.

Your Data is Secure, Your Gaming is Stress-Free

Winbox web protects your privacy at every step. Register today and enjoy a safe, fair, and responsible gaming experience with Malaysia's platform of choice.

Register Free Now Login
Bahasa Melayu