Privacy Policy

1 Introduction

Winbox88my ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at https://winbox88my.cam. We are committed to protecting the privacy and personal data of all users ("you", "the Player", or "the User") who access and use our services.

This Privacy Policy ("Policy") describes in detail how Winbox88my collects, processes, stores, shares, and protects personal information obtained through the platform. It also outlines the rights available to you regarding your personal data and explains how you may exercise those rights.

By registering an account with Winbox88my, accessing the platform, or continuing to use our services after any update to this Policy, you confirm that you have read and understood this Policy and consent to the data practices described herein. If you do not agree to the terms of this Policy, you should not use the Winbox88my platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern the full relationship between Winbox88my and its users.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to a name, identification number, location data, email address, financial account details, or any combination of data that can identify an individual.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" means Winbox88my as the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" means a third-party entity that processes Personal Data on behalf of Winbox88my under a contractual arrangement and in accordance with this Policy.
• "KYC Data" means identity verification documents and related information submitted by a Player as part of the Know Your Customer process, including government-issued photo identification and proof of address.
• "Cookies" means small text files placed on a user's device by a website for session management, preference storage, analytics, or other functional purposes.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by which a Player signifies acceptance of the processing of their Personal Data for a stated purpose.

3 Data We Collect

Winbox88my collects the following categories of Personal Data from Players and platform visitors:

3.1 Identity & Contact Data

• Full legal name as it appears on government-issued identification;
• Date of birth (used to verify minimum age of 21 years);
• Email address and mobile phone number;
• Residential address (as provided during registration or KYC).

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (Malaysian MyKad, Passport, or Driver's Licence);
• Proof of address documents (utility bills, bank statements dated within 3 months);
• Selfie photographs submitted alongside identity documents;
• Additional documentation requested by our compliance team where required.

3.3 Financial Data

• Payment method details (e-wallet account identifiers for Touch 'n Go eWallet, Boost, GrabPay; bank account details for Maybank, CIMB, Public Bank, Hong Leong; DuitNow and FPX transaction references);
• Deposit and withdrawal transaction history;
• Account balance and wagering activity records.

3.4 Technical & Usage Data

• IP address and geolocation data;
• Device type, operating system, and browser version;
• Login timestamps and session duration;
• Pages visited, games played, and features accessed on the platform;
• Referring website or source if applicable.

3.5 Communications Data

• Records of live chat conversations with customer support;
• Email correspondence sent to or received from Winbox88my;
• Feedback and dispute submissions.

Winbox88my does not collect special categories of Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where strictly required by regulatory obligations and with appropriate legal justification.

4 How We Collect Data

Winbox88my collects Personal Data through the following channels:

• Direct collection: Information provided by you during the account registration process, KYC verification, deposit transactions, and communications with our support team;
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and platform analytics tools when you access or interact with the Winbox88my website;
• Payment processors: Transaction reference data shared with Winbox88my by third-party payment providers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating Malaysian banks) to facilitate and verify deposits and withdrawals;
• Identity verification providers: Where Winbox88my uses a third-party identity verification service to assist with KYC, data may be processed by such provider under a data processing agreement.

5 Data Processing & Legal Basis

Winbox88my processes Personal Data on the following legal bases:

6 Purposes of Processing

Winbox88my processes Personal Data for the following purposes:

• To create, maintain, and manage your registered Winbox88my account;
• To verify your identity and age (minimum 21 years) in compliance with our KYC obligations;
• To process deposits and withdrawals via your selected Malaysian payment method;
• To administer bonuses, loyalty rewards, and promotional offers applicable to your account;
• To detect, investigate, and prevent fraudulent activity, account abuse, and money laundering;
• To monitor gameplay patterns as part of our responsible gambling obligations and to provide intervention where required;
• To respond to your enquiries and resolve disputes through our customer support channels;
• To send you account-related notifications including transaction confirmations, security alerts, and policy updates;
• To send marketing and promotional communications — subject to your explicit consent and withdrawable at any time;
• To comply with legal obligations imposed by the gaming licence authority and applicable law; and
• To analyse platform usage and improve the Winbox88my user experience.

7 Data Sharing & Disclosure

Winbox88my does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share Personal Data with the following categories of recipients, only to the extent strictly necessary for the purpose stated:

• Payment service providers: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong) — to process your financial transactions;
• Identity verification providers: Third-party KYC and anti-fraud services operating under binding data processing agreements with Winbox88my;
• Game content providers: Studio partners who supply games on the Winbox88my platform may receive anonymised or session-level technical data required to deliver game content — no personally identifiable information is shared;
• Regulatory and law enforcement authorities: Where Winbox88my is legally required to disclose information to comply with a court order, regulatory investigation, or applicable law;
• Professional advisers: Legal counsel, auditors, and compliance consultants bound by confidentiality obligations; and
• Business successors: In the event of a merger, acquisition, or transfer of the platform's assets, Personal Data held by Winbox88my may be transferred to the successor entity, subject to equivalent privacy protections.

8 Data Retention

Winbox88my retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal and regulatory retention requirements. The following general retention periods apply:

• Account and transaction data: Retained for a minimum of five (5) years following account closure, in compliance with anti-money-laundering record-keeping obligations;
• KYC documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later;
• Customer support communications: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained for the duration of your account and for one (1) year following account closure or opt-out, as evidence of consent;
• Technical and usage logs: Retained for up to twelve (12) months from the date of generation.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

9 Data Security

Winbox88my implements a range of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and Winbox88my's servers;
• Encrypted storage of sensitive Personal Data and financial records at rest;
• Access controls limiting Personal Data access to authorised personnel on a strict need-to-know basis;
• Segregated storage of KYC documents in access-controlled compliance environments;
• Regular security audits, penetration testing, and vulnerability assessments;
• Multi-factor authentication for internal system access by Winbox88my staff; and
• Incident response procedures for the detection and management of data breaches.

In the event of a data breach that poses a risk to your rights and freedoms, Winbox88my will notify affected Players and relevant authorities without undue delay, in accordance with applicable legal obligations.

10 Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They are widely used to make websites function correctly, remember user preferences, and provide analytics information to website operators.

10.2 Cookies Used by Winbox88my

Winbox88my uses the following categories of cookies:

• Essential cookies: Strictly necessary for the platform to function — including session management cookies that keep you logged in during your visit. These cannot be disabled without affecting platform functionality;
• Performance cookies: Anonymised analytics cookies used to understand how players navigate the platform, identify errors, and improve user experience. No personally identifiable information is transmitted via these cookies; and
• Preference cookies: Cookies that remember your language, display, and notification preferences across sessions.

Winbox88my does not use third-party advertising cookies, cross-site tracking cookies, or social media pixels on its platform.

10.3 Managing Cookies

You may control cookie settings through your browser preferences. Blocking essential cookies may impair your ability to log in or use certain features of the Winbox88my platform. Disabling performance cookies will not affect your gameplay experience but will limit our ability to identify and resolve technical issues.

11 User Rights

As a user of the Winbox88my platform, you hold the following rights with respect to your Personal Data. You may exercise any of these rights by contacting our support team via live chat or by emailing [email protected]:

• Right of access: You have the right to request a copy of the Personal Data held by Winbox88my about you, together with information about how it is processed;
• Right to rectification: You have the right to request correction of inaccurate or incomplete Personal Data held in your account;
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to restrict processing: You may request that we limit the processing of your Personal Data in certain circumstances, such as where you contest its accuracy;
• Right to data portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format where technically feasible;
• Right to object: You may object to the processing of your Personal Data where we rely on legitimate interests as the legal basis, and where your interests override ours; and
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

Winbox88my will respond to data rights requests within thirty (30) calendar days of receipt. In complex cases requiring additional review, the response period may be extended by a further thirty (30) days with notice to the requester.

12 Minors & Age Restriction

The Winbox88my platform is strictly for individuals aged 21 years and above. We do not knowingly collect or process Personal Data of individuals under the age of 21. Age verification is a mandatory component of the KYC process for all registered accounts.

If Winbox88my becomes aware that Personal Data has been collected from a person under the age of 21, the relevant account will be suspended immediately and the data in question will be deleted or returned in accordance with applicable regulations. If you believe that a minor has submitted data to Winbox88my, please contact our support team immediately so that appropriate action can be taken.

13 International Data Transfers

Winbox88my's platform infrastructure and certain third-party service providers may operate in jurisdictions outside of Malaysia. Where Personal Data is transferred to a country that does not provide an equivalent level of data protection, Winbox88my will ensure that appropriate safeguards are in place prior to any such transfer. These safeguards may include standard contractual clauses, binding corporate rules, or equivalent data transfer mechanisms recognised under applicable law.

Winbox88my will not transfer Personal Data to a third party located in a jurisdiction without adequate protections in place, and all international data transfers are conducted in a manner consistent with the principles of this Privacy Policy.

14 Policy Amendments

Winbox88my reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. Where amendments are material, we will provide reasonable notice to affected Players via the platform's notification system or by email to your registered address.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically to remain informed about how we protect your Personal Data. Continued use of the Winbox88my platform following the effective date of any revision constitutes your acceptance of the updated Policy.

15 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or Winbox88my's handling of your Personal Data, you may contact us through the following channels:

• Live Chat: Available 24/7 via the live chat widget on any page of the Winbox88my platform. Average first-response time: under 3 minutes.
• Email: [email protected] — please mark your subject line as "Privacy Request" or "Data Protection Enquiry" to ensure your message is directed to the appropriate team. We aim to respond within 4 hours.
• FAQ: Visit our FAQ page for answers to common questions from Malaysian players, including questions about account data and verification.