Official Document – Privacy & Data

Winbox 02 Privacy Policy – Personal Data Protection for Malaysian Players

Winbox 02 respects your privacy. This policy clearly explains what information we collect, how it is used, who it may be shared with, and your rights as a Malaysian player over your personal data.

Effective: 1 January 2026 Updated: 1 June 2026 SSL 256-bit Applicable to Malaysian Users
 This is the latest version of the Winbox 02 Privacy Policy.
Any material changes will be communicated via registered email at least 7 days before they take effect.
Version 2.4 · June 2026
1

Introduction – Winbox 02's Commitment to Your Privacy

Winbox 02 ("we", "platform", "company") takes seriously its responsibility to protect the privacy and personal data of every member who uses our services. This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

This policy applies to all individuals who register an account, visit the website, or use any services offered by Winbox 02, including Sports Betting (football, badminton, cricket, e-sports), casino games (slots, live baccarat, roulette, blackjack, poker), and all related support services.

Quick Summary: Winbox 02 only collects data that is strictly necessary to operate our services. We do not sell your data to any third party for marketing purposes. Your data is protected with bank-grade encryption.

By registering for or using the Winbox 02 platform, you confirm that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

2

Personal Data We Collect

Winbox 02 collects personal data through several methods depending on the nature of your interaction with the platform. The following are the categories of data we may collect:

Data Category Example Information How It Is Collected
Identity Full name, date of birth, IC number / passport number Registration form, KYC verification
Contact Email address, Malaysian mobile number Registration form, account updates
Financial E-wallet information (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay), FPX / Maybank2u / CIMB Clicks transaction records Deposit and withdrawal transactions
Technical IP address, device type, web browser, operating system Automatically collected during platform use
Behavioural Betting history, games played, session duration Automated system logs
Communication Live chat conversation records, support emails Interactions with customer support
Winbox 02 never collect credit/debit card numbers directly. All financial transactions are processed through licensed, secure third-party payment processors.
3

How We Use Your Data

The personal data we collect is used solely for legitimate and necessary purposes in delivering Winbox 02 services. The purposes are as follows:

  • Account Management: Creating, maintaining, and securing your account on Winbox 02. This includes identity verification, password recovery, and account settings management.
  • Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay and FPX, as well as withdrawals to accounts registered in your name.
  • Identity Verification (KYC): Complying with applicable legal requirements and anti-money laundering (AML) regulations.
  • Customer Support: Responding to inquiries, resolving complaints, and providing technical support to Winbox 02 members.
  • Platform Security: Detecting and preventing fraud, account misuse, unauthorised access and other unlawful activities.
  • Responsible Gaming: Monitoring usage patterns to identify members who may need support related to responsible gambling.
  • Service Communications: Sending important notifications related to your account, transactions, policy changes, and security information.
  • Platform Improvements: Analysing aggregated usage data (without identifying individuals) to improve the Winbox 02 user experience.
  • Marketing (with consent): Sending promotional offers, bonuses and new product information only to members who have given explicit consent to receive marketing communications.
4

Legal Basis for Data Processing

Winbox 02 processes your personal data on one or more of the following lawful bases, in accordance with Malaysia's PDPA and recognised data protection principles:

  • Contract Performance: Processing necessary to deliver the services you have requested, including account registration, bet processing, and winnings payouts.
  • Legal Obligation: Processing necessary to comply with applicable Malaysian law, including AML/CFT requirements and financial regulations.
  • Legitimate Interests: Processing for platform security, fraud prevention and service improvement purposes, where our legitimate interests do not override your privacy rights.
  • Consent: For marketing communications and other preference-related purposes, we rely on the explicit consent you provided during registration or subsequently through your account settings.
Right to Withdraw Consent: You may withdraw your consent to marketing communications at any time via your account settings or by contacting the Winbox 02 support team. Withdrawal of consent does not affect the validity of any processing carried out prior to that withdrawal.
5

Sharing Data with Third Parties

Winbox 02 does not sell, rent or trade your personal data to any third party for their own marketing purposes. However, we may share your data in the following limited circumstances:

  • Service Provider: Payment processors (for DuitNow, Touch 'n Go, GrabPay, FPX and other transactions), casino software providers (Evolution Gaming, Pragmatic Play and others) and technical infrastructure providers who assist us in operating the platform. All such parties are bound by strict confidentiality agreements.
  • Legal Requirements: Where required by Malaysian law, court order, or a valid request from a competent government authority.
  • Fraud Prevention: Sharing information with industry bodies or enforcement agencies to prevent fraud, money laundering, or other illegal activities.
  • Business Transfer: In the event of a merger, acquisition, or sale of company assets, your data may be transferred to the new entity with appropriate notice given to you.
Every third-party service provider with access to Winbox 02 members' data is required to comply with data protection standards equivalent to or stricter than our own policy.
6

Data Security – How We Protect Your Information

Winbox 02 continuously invests in comprehensive security infrastructure to protect members' personal data from unauthorised access, loss, misuse, or disclosure. Key security measures we employ include:

  • 256-bit SSL Encryption: All communications between your device and Winbox 02 servers are encrypted using 256-bit TLS/SSL technology — the same standard adopted by Malaysia's leading banks.
  • Stored Data Encryption: Sensitive data such as passwords are stored in hashed form and cannot be decrypted. Financial information is encrypted when stored in our database.
  • Two-Factor Authentication (2FA): Members can enable 2FA to add an extra layer of security to their account.
  • 24/7 Monitoring: Our automated monitoring system operates around the clock to detect suspicious activity or unauthorized access attempts.
  • Regular Security Audits: Winbox 02 conducts regular penetration testing and security audits carried out by independent parties.
  • Employee Access Controls: Only employees who require access to specific data to carry out their assigned duties are granted permission. All access is logged and monitored.
Data Breach Notification: In the event of a security incident affecting your personal data, Winbox 02 will notify you within 72 hours of becoming aware of the incident, in line with data protection best practices.
7

Data Retention Period

Winbox 02 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

Data Type Retention Period Justification
Active account data For the duration of the active account Required for ongoing services
Financial transaction records 7 years after transaction Malaysian AML legal requirements
KYC records / identity verification 5 years after account closure Regulatory compliance requirements
Support communication logs 3 years Complaint resolution and referrals
Technical and security logs 12 months Security and incident investigation
Marketing data (with consent) Until consent is withdrawn Based on member consent

Once the applicable retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8

Cookies, Tracking & Similar Technologies

Winbox 02 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Strictly Necessary Cookies: Required for the platform to function properly. This includes login session cookies and security cookies. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform (pages visited, time spent) in aggregated form without personally identifying you. Used to improve the Winbox 02 platform.
  • Functional Cookies: Saving your preferences (language, display settings) to provide a more personalised experience.
  • Analytics Cookies: Helps us understand overall usage patterns to make better-informed platform development decisions.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the Winbox 02 platform. For more information about cookies, please refer to your web browser's documentation.

9

Your Rights as a Data Subject

In accordance with the Malaysian PDPA and best data protection practices, you have the following rights regarding your personal data held by Winbox 02:

Right to Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request a correction. Simple updates can be made directly through your Winbox 02 account settings.

Right to Erasure

You may request the deletion of your personal data, subject to Winbox 02's legal obligations. Data required for AML compliance cannot be deleted before the mandatory retention period expires.

Right to Object to Processing

You may object to the processing of your data for specific purposes such as direct marketing. Such requests will be actioned immediately for marketing communications.

Data Portability Right

You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another data controller where applicable.

Right to Complain

If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the Winbox 02 compliance team.

To exercise any of the above rights, please submit a written request to privacy@winbox02.bet including your full name, account number and type of request. We will respond within 21 business days.
10

Children's Data Protection

Winbox 02 strictly prohibits individuals under the age of 18 from registering or using our platform. We do not knowingly collect or process personal data belonging to minors.

Should Winbox 02 discover that personal data belonging to an individual under 18 has been collected without the knowledge or consent of a parent or legal guardian, we will take the following steps immediately:

  • Immediately closing the account in question
  • Deleting all associated personal data
  • Reporting incidents to the relevant authorities where required

Parents or guardians who suspect their child or ward has registered an account on Winbox 02 without authorisation are encouraged to contact us immediately at privacy@winbox02.bet or via live chat.

11

Changes to This Privacy Policy

Winbox 02 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business developments. Whenever we make material changes, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending notifications to all registered members via email at least 7 days before changes take effect
  • Displaying a clear notice on the Winbox 02 platform homepage
  • For highly material changes, we may request that you reconfirm your consent

Your continued use of the platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this page periodically.

12

Contact Us – Winbox 02 Data Protection Officer

Winbox 02 has appointed a Data Protection Officer (DPO) responsible for ensuring the platform complies with all applicable data protection requirements.

For any inquiries, requests, or complaints regarding your privacy and personal data protection, please contact us via:

  • Privacy Email: privacy@winbox02.bet – for enquiries and data subject rights requests
  • General Support Email: support@winbox02.bet – for general account enquiries
  • Live Chat: Available 24/7 within the Winbox 02 platform – for immediate enquiries

We are committed to responding to all privacy inquiries within 21 business days. For cases requiring further investigation, we will keep you updated on the progress every 7 business days until the case is resolved.

Winbox 02 complies with Malaysia's Personal Data Protection Act 2010 (PDPA). For complaints that cannot be resolved internally, you have the right to contact the Department of Personal Data Protection under the Ministry of Communications Malaysia.

Winbox 02's 6 Privacy Commitments to Malaysian Players

More than just a document – this is a genuine commitment we uphold in every aspect of how we handle your data.

Bank-Grade Encryption

All data transmitted between your device and Winbox 02 servers is protected by 256-bit SSL encryption — the same technology used by Maybank, CIMB, and other leading Malaysian financial institutions.

No Data Sales

Winbox 02 has never and will never sell, rent or trade members' personal data to advertisers, marketing companies or any third party for their own commercial gain.

Full Control in Your Hands

You may access, amend, download, or request deletion of your data at any time through your account settings or by contacting our privacy team. Your rights are our priority.

Data Minimisation Principle

Winbox 02 collects only the data strictly necessary to provide the services you use. We do not collect additional data on a "might be useful later" basis without clear justification.

Transparent Notification

In the event of any security incident involving your data, we are committed to notifying you within 72 hours — not concealing or withholding information that affects your privacy rights.

Malaysia PDPA Compliance

All of Winbox 02's data processing operations are designed and conducted within the framework of Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your data is protected in accordance with applicable Malaysian law.

Your Data Is Safe at Winbox 02 – Play with Peace of Mind

Winbox 02 takes your privacy seriously. Register today and enjoy a safe, fair, and responsible Sports Betting and casino experience alongside more than 200,000 Malaysian players.

18+ only · Data protected by 256-bit SSL · PDPA Compliant

SSL 256-bit Malaysia PDPA No Data Sales 24/7 BM Support
Bahasa Melayu