Personal Data Protection

Winboxcasino | Privacy Policy WinBox Casino –
Malaysia Member Data Protection

Winboxcasino takes your privacy seriously. This document clearly explains how we collect, use, store, and protect the personal data of every member. The security of your information is our top priority.

Updated: 1 January 2026 Version 3.1 SSL 256-bit
Key Summary

Winboxcasino does not sell, rent, or trade members' personal data to any third party for marketing purposes. Your data is collected solely for platform operations, security, and legal compliance as outlined in this document.

1

Introduction & Scope of This Policy

This Privacy Policy is published by winboxcasino ("we", "Platform") and applies to all users who access or register on the winboxcasino.app website and our mobile app. This document fully and transparently describes our personal data management practices.

Winboxcasino operates on strong data protection principles: we only collect data that is strictly necessary, store it securely, use it for the stated purposes, and do not share it with unauthorised parties. Every member has the right to know what we hold and how it is used.

By using any part of the winboxcasino platform — including the website, Android app, or iOS app — you give your consent to the collection and processing of data as described in this document.


2

Types of Personal Data We Collect

Winboxcasino collects personal data through several means — during registration, during platform use, and through automated technologies such as cookies. Below is a summary of the types of data collected:

Data Category Example Information How Collected
Identity Information Full name, date of birth, IC/passport number Registration & KYC
Contact Information Email address, phone number, residential address Registration
Financial Data Bank account details, e-wallets, transaction history Deposits & Withdrawals
Game Data Betting history, wins, preferred games Platform usage
Technical Data IP address, device type, operating system, browser Automatic (cookies/logs)
Communication Data Support chat logs, emails, feedback Support interactions

For Know Your Customer (KYC) requirements, winboxcasino requires valid proof of identity such as a MyKad or valid Malaysian passport. These documents are used solely for identity verification and compliance with anti-money laundering laws.


3

Purpose of Personal Data Use

Winboxcasino uses collected personal data for specific, legitimate, and limited purposes. We do not use your data for purposes unrelated to platform operations or that you have not consented to.

  • Account Management: Creating, verifying, and maintaining your member account, including processing biometric login on the mobile app.
  • Transaction Processing: Verifying and processing deposits, withdrawals, and all financial transactions securely and accurately.
  • Platform Security: Detecting suspicious activity, fraud prevention, protection against hackers, and identifying unauthorized multiple accounts.
  • Legal Compliance: Meeting KYC obligations, anti-money laundering (AML) compliance, and reporting requirements set by relevant authorities.
  • Customer Service: Providing effective and personalized support, resolving complaints, and processing member requests.
  • Service Communications: Sending important notifications related to your account, transactions, security updates, and promotions you have opted in to receive.
  • Platform Improvement: Analyzing aggregated usage patterns to improve user experience and platform performance.
Data Minimization Principle

Winboxcasino adheres to a data minimisation principle — we only collect data that is strictly necessary for the stated purposes. We do not collect excessive data or retain it longer than required.


4

Data Storage & Security Measures

The security of your personal data is winboxcasino's top priority. We continuously invest in the latest security infrastructure to ensure your data is protected from all threats — internal and external.

The security measures we implement include:

  • 256-bit SSL Encryption for all communications between your browser and the winboxcasino server.
  • Encryption of data at rest using AES-256 for stored sensitive data.
  • Role-based access control — only authorised and trained staff may access members' personal data.
  • Round-the-clock security monitoring by winboxcasino's dedicated IT team, watching for any unusual activity.
  • Regular security audits by independent third parties to identify and address any vulnerabilities.
  • Regular data backups to prevent data loss due to system failures.

Members' personal data is retained for as long as necessary to fulfil the purpose of collection and meet applicable legal requirements. Once the retention period ends, data is securely deleted or anonymised.

Data Breach

In the unlikely event of a data breach that may affect your rights or freedoms, winboxcasino will notify you via email or in-app notification within 72 hours of becoming aware of the incident, as required by good data protection practice.


5

Data Sharing & Disclosure to Third Parties

Winboxcasino does not sell, rent, or trade members' personal data to any third party. However, there are specific situations where we may need to share limited information with the following parties:

  • Payment Service Providers: To securely process deposits and withdrawals. Payment providers are bound by strict data protection agreements.
  • Game Software Providers: The minimum information required to operate the games you play. They do not receive your financial data.
  • Legal Authorities: When required by law or a valid court order, including financial regulators and crime prevention agencies.
  • IT Service Providers: Hosting providers, cloud services, and technical support partners bound by strict confidentiality agreements.

All third parties receiving data from winboxcasino are bound by data protection agreements and are only permitted to use the data for the purposes specified in those agreements.


6

Cookies, Trackers & Similar Technologies

Winboxcasino uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and gather aggregated analytics on how the platform is used.

  • Essential Cookies: Required for core platform functions — including login sessions, security, and language preferences. Cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting anonymous information on how users interact with the platform for improvement purposes. Can be disabled without affecting core functionality.
  • Functional Cookies: Saving your preferences such as display theme, language, and notification settings so you don't have to reset them each time.
  • Session Cookies: Automatically deleted when you close your browser. Used to maintain your active session while browsing the platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect your experience on the winboxcasino platform.


7

Your Rights as a Data Owner

As a winboxcasino member, you have the following rights regarding your personal data. We respect and facilitate the exercise of all these rights:

Right of Access

You have the right to request and receive a copy of all personal data that winboxcasino holds about you. Requests will be processed within 30 days.

Right to Rectification

If any data we hold is inaccurate or incomplete, you have the right to request an immediate correction or update.

Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data when it is no longer required for its original purpose, unless a legal obligation to retain it exists.

Right to Object

You have the right to object to the processing of your data for marketing purposes or where a specific legitimate interest is involved.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform if you wish.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your data while a related issue is being resolved.

To exercise any of the above rights, please contact the winboxcasino support team via live chat or email. We will respond within 30 days of receiving your request.


8

Child & Minor Protection

Winboxcasino does not intentionally collect or process personal data from individuals under the age of 18. Our platform is strictly for adults, and we take active steps to prevent access by minors.

Should we discover that personal data of individuals under 18 has been collected inadvertently, we will take immediate action to delete the relevant data and close the accounts involved. Parents or guardians who suspect their child may have registered on the winboxcasino platform should contact us immediately.


9

Cross-Border Data Transfers

As an online platform operating at an international level, your personal data may be stored and processed on servers located outside Malaysia. However, winboxcasino ensures that any such data transfers are subject to protections equivalent to or greater than those required by Malaysian data protection law.

All cross-border data transfers are carried out under valid transfer mechanisms, including data processing agreements that comply with international standards. winboxcasino's primary servers are protected using internationally recognized security standards.


10

Changes to This Privacy Policy

Winboxcasino reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or technological developments. Members will be notified of any significant updates via email or in-platform notifications.

The 'Updated' date shown at the top of this document will always reflect the date the latest version takes effect. We encourage you to review this page periodically. Continued use of the winboxcasino platform after any amendments are published will be considered your acceptance of the updated policy.

Update Notifications

For material updates — meaning changes that significantly affect how we process your data — winboxcasino will send a notification email directly to your registered email address at least 14 days before the changes take effect.


11

How to Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how winboxcasino handles your personal data, we encourage you to contact us directly. We are committed to responding promptly and transparently.

The winboxcasino data protection team will respond within 72 hours for general inquiries, and within 30 days for formal personal data rights requests.

Why Your Data Is Safe at winboxcasino

More than just written policies — these are the real infrastructure and practices we carry out every day.

256-bit SSL Encryption

All communications between your device and winboxcasino's servers are protected with 256-bit SSL encryption — the same level of security used by major banks in Malaysia. No third party can intercept your data in transit.

Secure & Efficient KYC

Your identity verification documents are processed in the most secure environment. Only authorised staff can access KYC documents, and they will never be shared without your consent or a legal obligation.

No Data Sale

Winboxcasino has never and will never sell, rent, or trade members' personal data to advertisers, data brokers, or external marketing parties. Your data belongs to you — it is not a source of revenue for us.

Biometric Login

The winboxcasino app stores biometric data (fingerprint / Face ID) securely on your device's security chip only — it is never transmitted to our servers. This ensures only you can log in to your account.

Clear Data Retention Policy

Winboxcasino maintains a clear data retention policy — data is kept only for as long as necessary. Once the retention period expires or an account is closed, data is securely and systematically deleted or anonymised.

Full Transparency

Winboxcasino's Privacy Policy is written in plain, easy-to-understand language — not confusing legal jargon. You have the right to know what we do with your data, and we tell you clearly.

Trust Your Data to a Platform That We Care

Winboxcasino earns your trust not just through words, but through a robust data protection system and transparent practices. Register and play with peace of mind.

Your data is fully protected. winboxcasino does not share your personal information without your consent.

Bahasa Melayu