Winbox My Privacy Policy – Our Commitment to Protecting Your Data

Trust is the foundation of the relationship between winbox my and every one of our players in Malaysia. We understand that you are entrusting us with sensitive personal information — from identity card details to e-wallet payment information — and we take that responsibility seriously.

This Privacy Policy is written in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and the highest international standards for personal data handling. We are committed to ensuring every player winbox my understand their rights regarding personal data.

Winbox my only collects data that is strictly necessary to provide our services. The following are the categories of data we may collect:

Winbox my collects your personal data through a range of transparent channels:

• Account Registration: Information you provide during registration, including your name, phone number, email, and financial details.
• Identity Verification (KYC): Documents you submit when required for account verification prior to withdrawal.
• Financial Transactions: Details are collected automatically when you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks, or any other approved payment method.
• Platform Usage: Activity data is collected automatically as you play slots, Table Games, bet on sports, or use any platform feature.
• Support Interactions: Information you share via live chat, email, or WhatsApp when seeking assistance.
• Cookies & Similar Technologies: Technical data is collected automatically when you browse our website — detailed in Section 8.

Every piece of data we collect has a clear and legitimate purpose. Winbox my use your data to:

• Service Provision: Creating and managing your account, processing deposits and withdrawals, and enabling access to all games and platform features.
• Identity Verification: To verify that you meet the minimum age requirement (21+) and to prevent fraud, money laundering, and other illegal activities.
• Account Security: Detecting suspicious activity, protecting accounts from unauthorised access, and sending security alerts.
• Customer Support: To enable our team to provide accurate and effective support whenever you need assistance.
• Platform Improvements: Analysing usage patterns to improve the user experience, introduce new features, and resolve technical issues.
• Legal Compliance: To fulfil financial reporting obligations, anti-money laundering (AML) compliance, and other regulatory requirements.
• Communications: To send you important information regarding your account, transactions, promotions, and policy updates (for marketing communications, only with your consent).

Winbox My does not sell your personal data to anyone. This is a core principle we will not compromise. However, in limited circumstances, we may need to share data with certain parties:

• Payment Processors: Payment service providers such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and banking institutions that process your transactions. They only receive the data necessary to complete the payment.
• Technology Service Providers: Hosting companies, cybersecurity analysts, and software providers that help us operate the platform — all bound by strict confidentiality agreements.
• Authorities: When required by Malaysian law, court order, or a legitimate criminal investigation. We will only disclose the minimum data necessary.
• Game Providers: Limited game-related information shared with licensed game providers for technical and compliance purposes — subject to confidentiality agreements.

Winbox my continuously invests in the latest security technologies and procedures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Technical Security Measures

• 256-bit SSL/TLS Encryption: All data transmitted between your device and winbox my's servers is encrypted using the same security standards as Malaysian banking institutions.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256 algorithm.
• Two-Factor Authentication (2FA): Available on all accounts as an added layer of protection against unauthorised access.
• 24/7 Monitoring: Our security team continuously monitors networks and systems to detect and respond to any threats.
• Periodic Security Audit: Independent security assessments are conducted periodically by qualified third parties.

Your Responsibilities

• Keep your password confidential and do not share it with anyone, including the support team. winbox my.
• Log out of your account when using shared devices or public networks.
• Contact us immediately at support@winboxmy.im if you suspect your account has been compromised.

Winbox my only retains your personal data for as long as it is needed for the stated purposes. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your account is active and for a reasonable period after closure for support and compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years after each transaction, in line with Malaysia's financial reporting requirements.
• KYC Documents: Retained for the duration of the active account plus 5 years after account closure to meet anti-money laundering legal requirements.
• Communication Logs: Customer support logs are retained for 2 years for service improvement and dispute resolution purposes.
• Technical Data (IP Logs, etc.): Retained for 12 months for security and technical troubleshooting purposes.

Once the retention period expires, data will be securely deleted or anonymised using approved methods.

Winbox my uses cookies and similar technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect platform functionality.

As a user winbox my in Malaysia, you have the following rights under the Personal Data Protection Act 2010 and our policy:

Winbox my is an entertainment platform designed exclusively for individuals aged 21 and above. We do not knowingly collect, store, or process personal data of individuals under the age of 21.

We apply age verification during registration and KYC to enforce this policy. Any account suspected of belonging to a minor will be suspended immediately pending investigation.

Winbox my reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. You will be notified of material changes through:

• In-platform notice upon your next login
• Email to your registered address (for significant changes)
• Update the "Last Updated" date at the top of this document

Continued use of the platform winbox my following any changes to this Privacy Policy will be considered acceptance of the updated terms. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to get in touch: