This Privacy Policy explains how winboxmy collects, uses, stores, shares, and protects your personal data when you access the Platform as a registered player or visitor. Your privacy is a core obligation at winboxmy, not an afterthought.
Last Updated: June 2026Our Privacy Commitments at a Glance
winboxmy only collects personal data that is necessary for platform operation, KYC compliance, payment processing, and fraud prevention. We do not collect data speculatively or for commercial resale.
All personal data transmitted between your device and winboxmy servers is protected by SSL/TLS encryption. Stored data is held on secured infrastructure with access controls and audit logging.
winboxmy does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks. Data sharing is limited to service providers essential to platform operation.
Registered players may request access to their personal data held by winboxmy, and may request correction of inaccurate data, at any time by contacting the winboxmy support team.
winboxmy retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations, whichever period is longer.
Players may opt out of marketing communications at any time via account settings or by written request to the support team. Transactional and account-related communications remain active regardless.
1.1 winboxmy is committed to protecting the privacy and personal data of every player and visitor who interacts with the Platform. This Policy sets out the categories of personal data we collect, the purposes for which that data is used, how it is stored and secured, and the rights available to data subjects.
1.2 winboxmy processes personal data in accordance with applicable data protection laws and the data protection obligations arising from its international gaming licence. Where the personal data of Malaysian residents is processed, winboxmy handles such data with regard to principles consistent with Malaysia's Personal Data Protection Act 2010 (PDPA) and its subsidiary regulations.
1.3 This Policy applies to all users of the winboxmy Platform, including registered Account holders, applicants who have initiated but not completed registration, and visitors who browse the Platform without registering.
2.1 For the purposes of this Policy, winboxmy acts as the data controller in respect of the personal data it collects directly from players and visitors. As data controller, winboxmy determines the purposes and means by which personal data is processed.
2.2 Where winboxmy engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and gaming software studios — such parties act as data processors under written agreements that require them to process personal data only on winboxmy's documented instructions and in accordance with appropriate security standards.
3.1 Registration Data: When you create a winboxmy Account, we collect your full legal name, date of birth, email address, and the username and password you select.
3.2 Identity Verification (KYC) Data: To comply with our licensing obligations and anti-money laundering requirements, we collect copies of government-issued identity documents (such as your MyKad or passport) and proof of address documentation (such as utility bills or bank statements) when you complete the KYC process.
3.3 Financial Data: We collect payment method details necessary to process deposits and withdrawals — including, depending on the payment method used, Touch 'n Go eWallet identifiers, bank account references via FPX, DuitNow QR codes, or other payment instrument data. We do not store full card numbers or banking credentials on our servers.
3.4 Transaction Data: We maintain records of all deposits, withdrawals, wagers placed, game outcomes, bonus usage, and Wallet balance changes associated with your Account.
3.5 Technical & Usage Data: We automatically collect device identifiers, IP addresses, browser type and version, operating system, referring URL, session duration, page interaction data, and geolocation data (at country/city level) when you access the Platform. This data is used for fraud detection, platform analytics, and responsible gaming monitoring purposes.
4.1 Directly from You: The majority of personal data winboxmy holds is provided directly by you — during Account registration, during the KYC verification process, when you contact customer support, or when you submit a payment transaction.
4.2 Automatically: Certain technical and usage data is collected automatically through cookies, server logs, and similar tracking technologies when you access and navigate the Platform. See Section 11 for further details on cookie usage.
4.3 From Third Parties: winboxmy may receive supplementary data from licensed KYC verification providers and fraud prevention services as part of the identity verification process. Such third-party data is used solely for verification and compliance purposes.
5.1 Contractual Necessity: The majority of personal data processing by winboxmy is necessary for the performance of the contract between winboxmy and the Account holder — specifically, the operation and delivery of gaming services, payment processing, account management, and customer support.
5.2 Legal Obligation: Certain processing — particularly KYC identity verification, anti-money laundering record-keeping, and age verification — is required by law under winboxmy's licensing obligations and applicable financial crime prevention regulations.
5.3 Legitimate Interests: winboxmy processes certain technical and usage data on the basis of legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and platform analytics, where those interests are not overridden by your rights and interests.
5.4 Consent: Where winboxmy processes personal data for marketing communications, such processing is based on your consent, which may be withdrawn at any time in accordance with Section 14.
winboxmy uses the personal data it collects for the following purposes:
7.1 winboxmy does not sell, rent, or trade your personal data to third parties for their own marketing purposes.
7.2 winboxmy shares personal data only with the following categories of recipients, and only to the extent necessary for the relevant purpose:
7.3 All third-party service providers who process personal data on winboxmy's behalf are bound by written data processing agreements requiring them to process data only as instructed and to maintain appropriate security measures.
7.4 In the event of a merger, acquisition, or sale of all or substantially all of winboxmy's business assets, your personal data may be transferred to the acquiring entity, subject to the same protections set out in this Policy.
7.5 winboxmy will not disclose your personal data to third parties in any other circumstances without your prior explicit consent, except where required by law.
8.1 winboxmy operates under an international gaming licence, and certain processing activities — including KYC verification and gaming platform infrastructure — may involve the transfer of personal data to servers or service providers located outside Malaysia.
8.2 Where personal data is transferred internationally, winboxmy ensures that appropriate safeguards are in place — including contractual data protection obligations on receiving parties — consistent with the requirements of winboxmy's licensing authority and applicable data protection standards.
9.1 winboxmy implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.
9.2 Security measures in place at winboxmy include: SSL/TLS encryption for all data in transit; encryption of sensitive data fields at rest; role-based access controls limiting staff access to personal data on a need-to-know basis; audit logging of access to personal data systems; regular security assessments and penetration testing of Platform infrastructure.
9.3 Player Accounts are further protected by the option to enable two-factor authentication (2FA), session timeout controls, and login activity monitoring. Players are responsible for maintaining the confidentiality of their own login credentials.
9.4 In the event of a personal data breach that poses a risk to affected individuals, winboxmy will notify relevant parties in accordance with applicable legal and regulatory notification obligations.
10.1 winboxmy retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable legal, regulatory, accounting, or reporting obligations — whichever period is the longer.
10.2 For registered Account holders, core Account data (including KYC records, transaction history, and Account correspondence) is generally retained for a minimum of five (5) years following Account closure, consistent with anti-money laundering record-keeping requirements applicable under winboxmy's licence.
10.3 Technical and usage data collected via cookies and server logs is retained for shorter periods consistent with its operational purpose. Marketing consent records are retained for as long as the Account remains active or until consent is withdrawn.
11.1 winboxmy uses cookies and similar tracking technologies (including session storage and device fingerprinting) to operate, secure, and improve the Platform.
11.2 Essential Cookies: Required for Platform functionality — including maintaining your login session, enforcing responsible gaming settings, and processing secure transactions. These cookies cannot be disabled without materially impairing Platform function.
11.3 Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the winboxmy Platform — such as which pages are visited most frequently and where players encounter difficulties. This data informs product improvements.
11.4 Security Cookies: Used by winboxmy's fraud detection systems to detect anomalous activity, identify multiple account attempts, and protect against automated access.
11.5 You may manage your cookie preferences through your browser settings. Disabling all cookies may affect the functionality of the winboxmy Platform, particularly login and session management features.
12.1 Subject to applicable law and winboxmy's legitimate processing grounds, registered players have the following rights in respect of their personal data:
12.2 To exercise any of the above rights, contact the winboxmy support team via live chat or at the email address set out in Section 17. winboxmy will respond to verified data subject requests within 30 days.
13.1 The winboxmy Platform is strictly intended for individuals aged 21 years and older. winboxmy does not knowingly collect personal data from individuals under the age of 21.
13.2 If winboxmy becomes aware that personal data has been collected from a person under the age of 21, the associated Account will be suspended, the data will be deleted (subject to any legal retention obligations), and any deposited funds will be returned to the originating payment method following verification.
14.1 Where you have consented to receive marketing communications from winboxmy, we may send you information about promotions, bonuses, new game launches, and platform updates via email or other communication channels you have opted into.
14.2 You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in your Account settings, or by contacting the support team with a written opt-out request.
14.3 Withdrawal of marketing consent does not affect the receipt of transactional communications — including Account security alerts, deposit confirmations, withdrawal notifications, and KYC verification requests — which are sent as a necessary part of managing your Account.
14.4 Players who have activated self-exclusion will not receive marketing communications from winboxmy for the duration of the exclusion period, in accordance with responsible gaming obligations.
The winboxmy Platform may contain links to third-party websites or services. winboxmy is not responsible for the privacy practices of any third-party site. This Policy applies solely to data collected and processed by winboxmy in connection with the winboxmy Platform. Players are encouraged to review the privacy policies of any third-party services they access.
16.1 winboxmy reserves the right to update this Privacy Policy at any time. Where material changes are made, winboxmy will provide notice to registered Account holders via their registered email address and/or by prominent notice on the Platform prior to the changes taking effect.
16.2 The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform after the effective date of any revision constitutes your acknowledgment of the updated Policy.
For questions, concerns, or requests relating to this Privacy Policy or the personal data winboxmy holds about you, please contact the winboxmy Data Protection team via:
Support Contact (plain text — not a link):
[email protected]
winboxmy aims to respond to all privacy-related written enquiries within 10 business days. For urgent account or security matters, 24/7 live chat is available from within your Account dashboard.
winboxmy is built on transparency and security. Sign in to your Account to review your data preferences, update your communication settings, or access responsible gaming tools — all in one place.
Sign In to winboxmy