Privacy Policy

Winbox Privacy Policy – Member Personal Data Protection

Winbox is fully committed to protecting your privacy. This document transparently explains how your personal data is collected, used, stored, and protected by our platform.

Last Updated: January 2026
SSL 256-bit Protected
256-bit
SSL Encryption
0
Data Sold to Third Parties
24/7
Security Monitoring
PDPA
Malaysia Act Compliance
Important Note: This Privacy Policy applies to all members and visitors of the Winbox platform at winbox.vu as well as the official winbox mobile app. By using our platform, you agree to this policy.

1. Introduction and Our Commitment

Winbox takes member privacy extremely seriously. As a trusted online gaming platform in Malaysia, we understand that member trust is our most valuable asset. This Privacy Policy was established to ensure every member clearly understands how their personal information is handled from the moment of registration through ongoing use of the platform.

Winbox operates in full compliance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia. This means every decision regarding data collection and usage is made with the rights and interests of our members as the top priority. We do not treat your data as a business asset — instead, we regard it as personal information entrusted to us for specific purposes only.

Winbox's core commitments to your privacy include:

  • Only collect data that is genuinely necessary to operate the platform
  • Storing all data with the latest industry-grade encryption
  • Never sell or disclose your data to advertisers or external parties without consent
  • Giving you full control over your data, including the right to access and request deletion
  • Notifying you promptly in the event of any data security incident

This policy is written in plain language because we believe every member has the right to know exactly what happens with their personal information — not just wade through lengthy and confusing legal clauses.

2. Data We Collect

Winbox collects several categories of personal data depending on how you interact with our platform. The table below outlines the data types, purpose of collection, and their legal basis:

Data Types Example Information Purpose
Identity Data Full name, MyKad/passport number, date of birth Identity verification (KYC), legal compliance
Contact Data Phone number, email address Account communications, security notifications
Financial Data Bank account number, bank name, transaction records Deposit/withdrawal processing, fraud detection
Technical Data IP address, device type, web browser, OS Account security, platform optimisation
Usage Data Game history, session time, favourite games Experience enhancement, game recommendations
Communication Data Live Chat conversation logs, support emails Complaint resolution, service improvement
Voluntary Collection: Some information such as language preferences and notification settings is entirely your choice. This information is only used to personalise your experience on the platform and does not affect core account functions.

3. How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. winbox does not use your data for any purpose other than those stated below:

  • Account Management: Creating and maintaining your account, processing registration, verifying identity, and ensuring login security.
  • Transaction Processing: Processing deposits, withdrawals, and credit transfers accurately and securely in Malaysian Ringgit (MYR).
  • Legal Compliance: Meeting KYC (Know Your Customer), AML (Anti-Money Laundering), and reporting obligations to the relevant authorities.
  • Platform Security: Detecting and preventing fraud, multiple account usage, bot activity, and other security threats.
  • Service Communications: Sending important notifications related to your account, security updates, transaction confirmations, and responses to support enquiries.
  • Platform Improvements: Analysing usage patterns in aggregate (not individually) to improve platform performance, interface, and overall experience.
  • Marketing (With Consent): Sending winbox offers, promotions, and the latest news only if you have given explicit consent to receive them.

Winbox never using your data to make automated decisions that directly and negatively affect you without human intervention. Should any decision relating to your account be made based on data analysis, you have the right to request a review by our team.

4. Data Storage and Security

Winbox invests seriously in security infrastructure to ensure your personal data is always protected. The following are the protection measures we have implemented:

  • Data in Transit Encryption: All communications between your device and winbox servers are secured with TLS 1.3 protocol and 256-bit SSL encryption. This means no one can intercept or read the data being transmitted.
  • Static Data Encryption: Sensitive data such as banking information and identity documents is stored in encrypted form on our servers using AES-256 standards.
  • Strict Access Control: Only authorised staff who require access for work purposes may view members' personal data. All access is logged and monitored.
  • Two-Factor Authentication (2FA): winbox fully supports two-factor authentication for all accounts to prevent unauthorised access even if your password is compromised.
  • Regular Security Audits: The winbox platform undergoes regular penetration testing and independent security audits to identify and patch any vulnerabilities.
  • 24/7 Monitoring: Our threat detection system operates around the clock to identify any suspicious activity in real time.

Retention Period: Your data is retained for as long as necessary to fulfil the purpose of collection or to comply with legal requirements. Generally, transaction records are kept for 7 years in accordance with Malaysia's financial regulations, while marketing data will be deleted once you withdraw consent.

Incident Notifications: In the event of a data breach affecting your personal information, winbox will notify you within 72 hours of the incident being identified, in line with industry best practices and compliance requirements.

5. Data Sharing with Third Parties

Winbox does not sell, does not rent, and does not trade members' personal data to any third party for marketing or commercial purposes. However, there are limited situations where winbox needs to share your data with certain parties:

  • Payment Service Providers: FPX, Touch 'n Go, GrabPay, and partner banks receive only the minimum transaction data required to process your payment securely. All these providers are bound by strict data protection agreements.
  • Game Providers: Game software providers partnering with winbox receive only the session data required for technical operation. Your personal identity is not shared.
  • Regulatory Bodies and Authorities: winbox is legally required to disclose certain information to regulatory bodies, law enforcement agencies, or courts upon receipt of a valid request.
  • KYC Verification Service: Approved third-party providers assist in verifying member identities in accordance with AML/KYC requirements. This sharing is conducted in an encrypted environment and is limited to only the necessary information.

All third parties working with winbox are required to comply with data protection standards equal to or stricter than our own policies. winbox conducts thorough due diligence before appointing any service provider that will have access to member data.

6. Cookies and Tracking Technologies

Winbox uses cookies and similar tracking technologies to enhance your experience on the platform. Understanding our use of cookies is important for you to make informed decisions about your privacy.

Types of Cookies We Use:

  • Essential Cookies: Required for core platform functions such as maintaining your login session, account security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Helping us understand how members use the platform — which pages are visited most, how long sessions last, and where technical issues occur. This data is collected in aggregate and is not personalised.
  • Functional Cookies: Storing your preferences such as display settings, language, and personalised platform configurations to ensure a more comfortable experience.
  • Analytics Cookies: Used to analyse usage patterns for continuous platform improvement. This data is not shared with advertisers.

Managing Your Cookies: You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect certain functions of the Winbox platform. For guidance on managing cookies in popular browsers, please refer to your browser's official documentation.

Winbox does not use cookies to track your activity outside our platform or for third-party advertising purposes.

7. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding your personal data held by Winbox. We fully respect and facilitate the exercise of these rights:

1
Right of Access You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days.
2
Right to Rectification If your data is inaccurate or outdated, you may request a correction through your account settings or by contacting customer support.
3
Right to Erasure You may request deletion of your personal data, subject to our legal obligations to retain certain records.
4
Right to Withdraw Consent You may withdraw consent for marketing communications at any time via the notification settings in your account.
5
Right to Object You have the right to object to the processing of your data for certain purposes, including processing for direct marketing.
6
Right to Complain If you are not satisfied with how winbox handles your data, you may file a complaint with the Malaysia Personal Data Protection Department.

To exercise any of the above rights, please contact the winbox support team via Live Chat or email. We will verify your identity before processing any data-related request.

8. Children's Data and Minor Protection

The winbox platform is exclusively for individuals who are of age 18 years and above. Winbox does not intentionally collect or process personal data from children or minors.

As a protective measure, winbox enforces a strict age verification process during registration. Applicants are required to submit an official identification document confirming their age before their account is fully activated.

Should winbox discover that personal data of an underage individual has been inadvertently collected, we will take immediate action to:

  • Closing the account in question immediately
  • Deleting all personal data of the individual concerned from our systems
  • Returning any account balance to their rightful owner

Parents or guardians who discover that a child under their care has registered on the Winbox platform are encouraged to contact our support team immediately.

9. Links to Third-Party Sites

The winbox platform may from time to time contain links or references to third-party websites or services, such as payment service providers or support platforms. This Privacy Policy not applicable to those third-party websites.

Winbox is not responsible for the privacy practices or content of third-party websites. We encourage you to read the Privacy Policy of those sites before providing any personal information to them.

Third-party payment integrations within the Winbox platform, such as FPX and e-wallets, have undergone our security review and are bound by data protection agreements. However, once you are redirected to their payment portal, their own privacy policy will apply.

10. Amendments to This Privacy Policy

Winbox reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform improvements. Any material amendments will be communicated to members via:

  • In-platform notification upon next login
  • Notification email to the address registered in your account
  • Update the "Last Updated" date at the top of this page

Your continued use of the winbox platform after any amendments take effect signifies your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account by contacting our support team.

Recommendation: Bookmark this page and revisit it at least every 6 months to ensure you always stay informed about how winbox handles your data.

11. Contact Us Regarding Privacy

For any enquiries, requests, or complaints regarding this Privacy Policy or how winbox handles your personal data, please contact us through the following channels:

  • Live Chat: Available 24/7 directly within the winbox platform — the fastest way to get an immediate response
  • Telegram: The official winbox Telegram channel for account and privacy-related enquiries
  • WhatsApp: WhatsApp support for data and account security matters
  • Email: [email protected] — for formal data-related requests, we recommend using email for written records

The winbox Data Protection Team will address all privacy-related enquiries within 3 working days or sooner via Live Chat.

High-Level Protection

Why Your Data Is Safe with winbox

Every security layer we build is to ensure that the gaming experience you enjoy is never compromised by concerns about data privacy.

256-bit SSL Encryption

All data transmitted between your device and winbox servers is protected with 256-bit SSL encryption — the same standard used by global financial institutions. No one can intercept your information in transit.

Two-Factor Authentication (2FA)

An additional security layer via 2FA ensures only you can access your account even if your password falls into the wrong hands. Enable 2FA now through your winbox account security settings.

Zero Data Sales

Winbox has never and will never sell members' personal data to advertisers, data brokers, or any third party for commercial purposes. Your data is used solely to operate the platform and comply with the law.

Malaysia PDPA Compliance

Winbox operates in full compliance with Malaysia's Personal Data Protection Act 2010. All data handling processes are audited regularly to ensure ongoing adherence to local legal requirements.

24/7 Threat Monitoring

The winbox security monitoring system operates around the clock, 7 days a week. Any suspicious activity such as unauthorised login attempts or unusual transaction patterns will be detected and handled automatically in real time.

Data Control in Your Hands

Through your winbox account settings, you can access, update, or request deletion of your personal data at any time. Full control rests with you — not with us.

Frequently Asked Questions

Winbox Privacy FAQ

We have compiled the most frequently asked questions from our members regarding privacy policy and data security.

Absolutely not. winbox does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data is only shared in limited situations necessary to operate the platform — such as with payment providers and regulatory bodies — and only to the extent required.

You may submit a data access request via the 24/7 Live Chat on the Winbox platform or by contacting us at our official email. Please provide identification details for verification purposes. Requests will be processed within 21 working days in accordance with Malaysia's PDPA.

Yes, you have the right to request account closure and deletion of your personal data. However, please note that winbox is legally required to retain certain financial records for a period prescribed by Malaysian legislation even after account closure. Data not subject to any legal obligation will be permanently deleted.

In the event of a data breach affecting your personal information, winbox will notify you within 72 hours of the incident being identified. We will explain the type of data involved, the steps taken to contain the situation, and the actions you should take to protect yourself. Our security team will operate around the clock to resolve the incident.

The Winbox app only accesses approximate location (not precise GPS) for geographic compliance and fraud detection purposes. This access requires your explicit permission and can be revoked at any time through your device's app permission settings. Location data is not stored persistently and is not shared with third parties.
Trusted Platform

Ready to Play with Peace of Mind?

Winbox is more than a gaming platform — we are a platform that puts your trust first. With enterprise-grade data protection, 256-bit SSL encryption, and full Malaysia PDPA compliance, you can focus on gaming without worrying about your privacy.

Join hundreds of thousands of members who have trusted winbox as their preferred gaming platform in Malaysia. Register today and enjoy a safe, fair, and rewarding gaming experience.

PDPA Compliant
Malaysia 2010
SSL 256-bit
Full Encryption
Zero Data Sales
No Third Parties
24/7 Support
Always Available
Bahasa Melayu