Official Documents

Privacy Policy winboxmy

We fully respect your privacy. This page transparently explains how winboxmy collects, uses, stores, and protects your personal data as a player on our platform.

Updated: January 2026
Applicable: Malaysia
SSL 256-bit
PDPA Compliance

Winboxmy's Commitment to Malaysian Players' Privacy

At winboxmy, privacy is not just a word in a legal document — it is a core value we uphold in every aspect of our platform's operations. From day one, we have built a robust data protection system to ensure that every piece of information you share with us remains safe and is used only for purposes you have agreed to.

This Privacy Policy explains in detail the types of data we collect, why we need it, how we store and protect it, and the rights you hold as the owner of that data. We have written this policy in plain language that all Malaysian players can easily understand — not in convoluted legal jargon.

Important Note: This Privacy Policy applies to all users of the winboxmy platform, including website visitors, registered players, and any individual who interacts with our services. By using our platform, you agree to the terms set out in this document.

Winboxmy complies with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we have a legal obligation to handle your personal data responsibly, transparently, and securely. Any changes to this policy will be communicated to you via a notice on our platform.

1

Personal Data We Collect

We only collect data that is genuinely necessary to operate the platform and provide you with the best possible service. No data is collected excessively or without a clear purpose.

Data Categories Example Information Purpose of Collection
Personal Identity Full name, date of birth, identification card number Account verification & KYC
Contact Information Email address, mobile phone number Account communications & support
Financial Data Bank name, account number, transaction history Deposit & withdrawal processing
Technical Data IP address, device type, web browser, OS Security & fraud detection
Activity Data Game history, session duration, game preferences Service improvement & responsible gaming
Communication Data Support chat records, inquiry emails Issue resolution & quality control

winboxmy never collect sensitive information such as passwords in plain text, full credit card numbers, or biometric data. All passwords are stored in hashed form that cannot be decrypted.

2

How We Use Your Data

Every piece of data we collect is used for a specific and legitimate purpose. We do not use your data for any purpose unrelated to winboxmy services without your prior consent.

Primary Purposes of Data Use

  • Account Management: Creating, verifying, and maintaining your player account to ensure a smooth gaming experience.
  • Transaction Processing: Processing deposits and withdrawals securely through supported payment channels such as DuitNow and FPX.
  • Identity Verification (KYC): Ensuring all players are verified individuals who meet the minimum age requirement of 18 years.
  • Platform Security: Detecting and preventing fraudulent activity, money laundering, and unauthorized access to your account.
  • Customer Support: Providing accurate and timely assistance when you contact our support team.
  • Product Improvement: Analyzing usage patterns in aggregate (not individually) to improve the platform's user experience.
  • Responsible Gaming: Monitoring gaming patterns to identify players who may need support and early intervention.
  • Marketing Communications: Sending information about promotions and bonuses — only if you have consented to receive such communications.

We will never: Selling, renting, or disclosing your personal data to third parties for their own marketing purposes without your explicit consent. This is winboxmy's absolute commitment.

3

Data Sharing with Third Parties

Winboxmy understands that you trust us with sensitive personal information. We take this responsibility very seriously. In certain limited circumstances, we may need to share some of your data with selected third parties.

Permitted Data Sharing Scenarios

  • Payment Providers: Transaction data is shared with approved payment processors solely to enable deposits and withdrawals to be processed securely.
  • KYC Providers: Identity information is shared with licensed third-party identity verification services to meet legal compliance requirements.
  • Legal Authority: We will disclose data when required by a court order, warrant, or valid legal requirement in Malaysia.
  • Technical Partner: Technical infrastructure providers such as cloud and cybersecurity services may access data within the limited scope required for platform operations.

All third parties working with winboxmy are bound by strict data protection agreements. They are not permitted to use your data for any purpose other than what has been agreed upon in those agreements.

4

Data Security & Protection

Winboxmy continuously invests in the latest security infrastructure to ensure your data is always protected against cyber threats, unauthorized access, and information breaches. Our security systems are designed in multiple layers so that even if one layer is compromised, your data remains safe.

Our Security Layers

  • 256-bit SSL Encryption: All communications between your browser and our servers are encrypted using banking-grade SSL technology.
  • Data-at-Rest Encryption: Data stored in our databases is also encrypted, meaning it is useless even if accessed without authorisation.
  • Two-Factor Authentication (2FA): Additional authentication layers are available for all accounts to prevent unauthorized access.
  • 24/7 Monitoring: Our security team continuously monitors systems to detect and respond to any threats in real time.
  • Internal Access Controls: Only specifically authorised winboxmy staff may access players' personal data, and every access is logged for audit purposes.
  • Secure Backup: Data is regularly backed up to a secure, separate location to ensure continuity of service.

While we implement all reasonable security measures, no system is 100% completely secure. We encourage you to play your part — use a strong password, do not share your login credentials, and enable 2FA on your account.

5

Cookies & Tracking Technologies

Winboxmy uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled.
  • Performance Cookies: Helping us understand how players use the platform so we can improve its design and performance.
  • Functional Cookies: Remembering your preferences and settings such as language and display options for a more convenient return experience.
  • Analytics Cookies: Aggregated statistical data that helps us understand overall platform performance without identifying any individual.

You can manage cookie settings through your web browser settings. Please note that disabling essential cookies may affect the functionality of the winboxmy platform.

6

Your Rights as a Data Owner

Under Malaysia's PDPA and winboxmy's policy, you have specific rights regarding your personal data. We are committed to making it easy for you to exercise these rights without unnecessary obstacles.

Right of Access

Request a copy of the personal data we hold about you at any time.

Right to Rectification

Update or correct any personal data that is inaccurate or outdated.

Right to Erasure

Request the deletion of your personal data under certain circumstances permitted by law.

Right to Object

Object to the use of your data for direct marketing or specific purposes.

Right to Portability

Receive your data in a reusable format for transfer to another platform.

Right to Restriction

Request that processing of your data be restricted in certain situations during an investigation.

To exercise any of the above rights, contact our Privacy team via 24/7 Live Chat or support email. We will process your request within 14 working days.

7

Data Retention and Deletion

Winboxmy does not store your data indefinitely. We have a clear data retention policy based on operational needs and legal obligations.

  • Active Account Data: Retained for the duration your account is active plus 5 years after account closure for legal compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's taxation and anti-money laundering legal requirements.
  • Security Logs: Retained for 12 months for security incident investigation purposes.
  • Marketing Data: Deleted within 30 days after you withdraw consent for marketing communications.
  • Customer Support Data: Retained for 3 years after case resolution for reference and quality control.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

8

Data Transfers Outside Malaysia

In certain situations, your data may be processed or stored outside Malaysia — for example, when we use international cloud services. When this occurs, winboxmy ensures that protections equivalent to Malaysia's PDPA are upheld through valid data transfer agreements.

We only use international service providers with recognised security and privacy practices, and we ensure every data transfer is protected with appropriate safeguards, including standard contractual clauses and compliance declarations.

Even if data is stored outside Malaysia, it remains under winboxmy's control at all times and is fully subject to this Privacy Policy. Your rights as a player are not affected by the physical location of data storage.

Why Your Data Is Safe with winboxmy

End-to-End Encryption

All data transmitted between you and winboxmy is encrypted with 256-bit SSL — the same level of security used by international banking systems.

Malaysia PDPA Compliance

Our operations fully comply with Malaysia's Personal Data Protection Act 2010, providing you with strong legal protection.

No Data Selling

We have never sold and will never sell your personal data to any party for their own marketing or commercial purposes.

Timely Data Deletion

Your data is securely deleted when no longer required, in accordance with a transparent, legally compliant retention schedule.

Breach Notification

In the event of any security incident involving your data, we will notify you within 72 hours in accordance with best practices.

Full Control in Your Hands

You may update, request a copy of, or request deletion of your data at any time through our available support channels.

9

Changes to This Privacy Policy

Winboxmy reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. The "Last Updated" date at the top of this page will always show the most current version of this policy.

For significant changes, we will notify you via a prominent notice on the platform, an email to the address registered to your account, or a pop-up upon your next login. Continued use of the winboxmy platform after any changes constitutes your acceptance of the updated policy.

We encourage you to review this page regularly so you remain informed about how we protect your data. If you disagree with any changes, you have the right to close your account by contacting our support team.

Have questions about our Privacy Policy? The winboxmy support team is available 24/7 via Live Chat on our platform. We are committed to providing you with clear and satisfactory answers.

Your Data Is Safe. Join winboxmy With Confidence.

Over 500,000 Malaysian players trust winboxmy. Register now and enjoy a gaming platform that is secure, transparent, and respects your privacy at all times.

Bahasa Melayu