Www winbox Privacy Policy — We Protect Your Data

WWW Winbox ("we", "Platform", "www winbox") respects the privacy of every user who accesses our website at wwwwinbox.app or via our mobile app. This Privacy Policy clearly and transparently explains how we collect, use, store, and protect your personal information.

This policy applies to all users of the www winbox, including visitors who only browse the site, registered members, and anyone who interacts with our services in any way. By continuing to use our platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and adhere to international best practices in data protection. Any changes to this policy will be communicated to users via in-app notifications or our official email.

WWW Winbox collects several categories of information to enable us to provide a secure, seamless, and high-quality service. The following are the types of data we collect and their purposes:

We do not collect sensitive data such as medical information, political views, or religious beliefs. All data collection is conducted on a necessity-only basis — we never collect information beyond what is required for the stated purpose.

Data collected by www winbox used solely for lawful and transparent purposes. The following is a detailed description of how we use your personal information:

• Account management: Creating, verifying, and securely maintaining your user account.
• Payment processing: Processing deposits via FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and Boost, as well as withdrawals to your local bank account.
• KYC Verification: Meeting legal requirements for identity verification and anti-money laundering (AML) compliance.
• Service provision: Enabling you to access all games, sports betting, Live Casino, and other platform features.
• Platform security: Detecting and preventing fraudulent activity, multiple account usage, or other security threats.
• Service communications: Sending account-related notifications, security updates, and promotional information (subject to your notification preferences).
• Customer support: Helping you resolve any issues or inquiries more efficiently.
• Platform enhancement: Analyzing usage patterns to improve the overall user experience.
• Legal compliance: Fulfilling the legal and regulatory obligations applicable to our operations.

WWW Winbox does not sell, rent, or transfer your personal data to third parties for marketing purposes. However, in the following limited situations, we may share necessary data with trusted parties:

• Payment providers: Financial institutions and payment gateways that process your transactions (FPX, DuitNow, and others) receive only the transaction data necessary.
• Technology service providers: Companies that help us operate our platform, including cloud infrastructure and cybersecurity services, are bound by strict confidentiality agreements.
• Regulatory authorities: When required by Malaysian law or a valid court order, we will disclose the necessary information to the relevant authorities.
• Fraud investigation: In cases suspected to involve fraud, money laundering, or cybercrime, relevant information may be shared with law enforcement agencies.

Protecting your personal data is a responsibility we take very seriously at www winbox. We implement multiple layers of technical and organisational security to protect your information from unauthorised access, loss, or misuse:

• 256-bit SSL/TLS Encryption: All communication between your browser or app and our servers is fully encrypted using industry-standard security protocols.
• Two-factor authentication (2FA): An additional security layer to protect your account from unauthorized access even if your password is compromised.
• 24/7 Monitoring: Our cybersecurity team monitors platform activity around the clock to detect and respond to any threats promptly.
• Hashed password storage: Your password is never stored in plain text — only its cryptographic hash value is stored in our database.
• Regular security audits: Our platform undergoes regular independent penetration testing and security audits.
• Internal access controls: Only authorised personnel who require access to specific data to perform their duties are permitted to view users' personal information.

While we make every effort to protect your data, no security system can be guaranteed 100% secure. In the event of a security breach involving your data, we will notify you within 72 hours and explain the steps taken to address the situation.

Platform www winbox uses cookies and similar tracking technologies to enhance your browsing experience and help us understand how users interact with our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, gaming sessions, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your personal settings such as language, time zone, and display preferences to ensure a more comfortable experience.
• Analytics Cookies: Helping us understand how users interact with our platform — such as the most frequently visited pages and most-used features. This data is used solely for platform improvement.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by www winbox:

• Right of Access: You have the right to know what personal data we hold about you and to request a copy of that information.
• Right to Rectification: If your data is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data ("right to be forgotten"), subject to our legal obligations to retain certain records.
• Right to Restrict Processing: You have the right to request that we restrict how we process your data under certain circumstances.
• Right to Object: You may object to the processing of your data for specific purposes such as direct marketing communications.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time.

To exercise any of the above rights, please contact our support team www winbox via live chat or email. We will process your request within 14 business days and may require identity verification before processing certain requests.

WWW Winbox only retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by Malaysian law. General retention periods are as follows:

• Active account data: Retained for the duration your account remains active on our platform.
• Financial transaction records: Retained for 7 years after the transaction date in accordance with Malaysian financial legal requirements.
• Security logs: Retained for 12 months for security investigation and fraud prevention purposes.
• Closed account data: Basic information is retained for 5 years after account closure for AML compliance and regulatory requirements.
• Support communication data: Live chat session records and support emails are retained for 2 years.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For data stored in physical format (if any), secure disposal methods will also be applied.

WWW Winbox reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. We are committed to informing you of any material changes through the following means:

• In-app or on-site notification when you log in after changes take effect.
• Email notification to your registered email address for significant changes.
• Update the "Last updated" date at the top of this document.

You are encouraged to review this page periodically to stay informed about how we protect your information. Continued use of the www winbox after the effective date of the changes means you accept the terms of the updated Privacy Policy.

If you disagree with any changes made, you have the right to close your account before the effective date and request deletion of your data in accordance with the procedure set out in Section 7.

If you have any questions, concerns, or wish to exercise your personal data rights, our privacy team www winbox ready to assist you through the following channels:

• Live Chat: Available 24/7 directly from the website or app www winbox — the fastest way to get a response.
• Privacy Email: [email protected] (include "Privacy Enquiry" in the email subject line for faster processing)
• Response time: We are committed to responding to all privacy-related inquiries within 5 business days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, the regulatory body responsible for PDPA compliance in Malaysia.

For more information on how we operate our services responsibly, please visit our Responsible Gaming ours.