Privacy Policy winbox88 — Member Personal Data Protection

Winbox88 takes our responsibility to protect the privacy of every member and platform user seriously. This Privacy Policy ("Policy") explains in detail how we handle your personal information throughout your relationship with the winbox88 platform.

We understand that trust is the cornerstone of the relationship between a platform and its members. Therefore, winbox88 is committed to being transparent and honest in every aspect of collecting and using your personal data. We will not use your data for purposes you would not expect or have not consented to.

This Privacy Policy applies to all users of the winbox88 platform, including website visitors, registered members, new account applicants, and any individual who interacts with our services through any official channel.

By registering a winbox88 account or continuing to use our platform after a policy change notice has been issued, you are deemed to have read, understood, and fully agreed to the terms of this Privacy Policy.

Winbox88 only collects personal data that is strictly necessary to provide you with a safe, fair, and high-quality service. The following are the categories of information we may collect:

Registration and Identity Data:

Financial and Transaction Data:

Technical and Usage Data:

All data collection is conducted directly from you during registration or platform use, automatically through cookie and tracker technology, or from trusted third-party sources such as identity verification providers for KYC purposes.

Every piece of data we collect is used for a specific and legitimate purpose. winbox88 will not use your data beyond the scope stated below without obtaining additional consent from you:

• Account Management: Creating, verifying, and maintaining your member account, including the KYC process and identity verification.
• Transaction Processing: Processing deposits, withdrawals, and any financial transactions you carry out on the winbox88 platform.
• Platform Security: Detecting and preventing fraud, money laundering, multi-account usage, and other suspicious activities that may harm the platform or other members.
• Customer Support: Providing technical support and resolving any issues or complaints you raise with the winbox88 support team.
• Service Communications: Sending important notices relating to your account, policy updates, transaction confirmations, and critical security information.
• Platform Improvements: Analysing aggregated and anonymised usage patterns to improve user experience, technical performance, and gaming offerings.
• Legal Compliance: Fulfilling the reporting and record-keeping obligations required by applicable laws and regulatory authorities.
• Personalised Marketing: Sending relevant promotional offers and bonuses based on your gaming preferences — subject to your communication opt-in settings.

Winbox88 only processes your personal data on valid legal grounds — whether for contract fulfillment, compliance with legal obligations, the legitimate interests of the platform, or with your explicit consent.

Winbox88 does not sell member personal data to any third party. However, in certain limited situations, we may need to share your information with the following parties for legitimate operational purposes:

• Payment Service Providers: Banks and payment processors that handle your deposits and withdrawals. They receive only the minimum data necessary to complete transactions.
• Game Providers: Third-party game software providers that supply slots, Live Casino games, and sports betting on the winbox88 platform. Data sharing is limited to gaming session information only.
• Identity Verification Providers: Third-party KYC services that assist us in verifying member identities to meet anti-money laundering (AML) requirements.
• Statutory Authority: Law enforcement agencies, regulatory bodies, or courts when required to do so by law or a valid court order.
• Auditors and Professional Advisors: Audit firms, legal counsel, or consultants bound by strict confidentiality obligations in assisting winbox88 with its operations.

All third parties receiving winbox88 member personal data are required to sign strict data protection agreements and comply with privacy standards equivalent to those in this policy.

Winbox88 continuously invests in the latest security infrastructure to ensure that member personal data is always protected against unauthorised access, leakage, destruction, or unlawful alteration.

The technical and organisational measures we implement include:

• Data-in-Transit Encryption: All communications between your browser and winbox88's servers are secured with TLS 1.3 protocol and 256-bit SSL encryption.
• Data-at-Rest Encryption: Sensitive data stored in the winbox88 database is encrypted using the globally recognised AES-256 standard.
• Strict Access Controls: Only specifically authorised winbox88 staff may access member personal data — based on the principle of least privilege.
• Two-Factor Authentication (2FA): winbox88's internal systems use 2FA for all administrative access to add an extra layer of security.
• 24/7 Security Monitoring: Intrusion detection systems (IDS) and threat monitoring operate around the clock to detect and respond to any suspicious activity immediately.
• Regular Penetration Testing: winbox88 conducts regular security audits by independent third parties to identify and address system vulnerabilities before they can be exploited.
• Incident Response Plan: We have established incident response procedures to address any data security breaches swiftly and effectively.

Winbox88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect certain functions on the winbox88 platform. Marketing and performance cookies can be opted out of without affecting your core experience.

As a winbox88 member, you hold strong privacy rights under Malaysia's Personal Data Protection Act (PDPA). winbox88 is committed to making it easy for you to exercise these rights:

To exercise any of the above rights, contact our privacy team by email at [email protected] or via live chat within the platform. We will process your request within 14 working days after receipt.

Winbox88 retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by applicable law. Our data minimisation principle ensures no data is kept longer than necessary.

• Active Account Data: Retained for the duration your account remains active and in good standing.
• Financial Transaction Data: Retained for a minimum of 7 years after the transaction date, in line with Malaysia's financial and tax legal requirements.
• KYC Records and Identity Verification: Retained for a minimum of 5 years after account closure to meet AML/CTF requirements.
• Technical and Security Logs: Retained for 12 months for security investigation and dispute resolution purposes.
• Support Communication Data: Retained for 3 years after the issue is resolved, for service reference and improvement.
• Account Closed: Basic data is retained for 5 years after closure for legal compliance before being securely deleted.

Once the designated retention period has expired, your personal data will be securely deleted using methods that ensure the data cannot be recovered.

The winbox88 platform is exclusively for adult users aged 18 years and above. winbox88 does not intentionally collect, process, or store any personal data from individuals under the age of 18.

All account applicants are required to confirm that they are at least 18 years of age at the time of registration. Our KYC process is designed to detect and reject applications from those who do not meet this minimum age requirement.

Should we discover that we have inadvertently collected personal data from anyone under the age of 18, we will take immediate action to:

• Suspending and closing the relevant account immediately.
• Permanently deleting all related personal data from our systems.
• Returning any remaining fund balance to the original deposit source.

Winbox88 reserves the right to amend or update this Privacy Policy from time to time in response to changes in law, technological developments, or changes in our business practices. We are committed to notifying you of any significant changes.

When significant changes are made to this Privacy Policy, we will:

• Updating the "Last Updated" date shown at the top of this page.
• Displaying a clear notice within the winbox88 platform for a minimum of 7 days.
• Sending email notices to all registered members affected by the relevant changes.

Continued use of the winbox88 platform after any amendments to the Privacy Policy take effect will be considered your acceptance of the revised terms. If you do not agree with any changes, you have the right to close your account and request deletion of your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how winbox88 handles your personal data, our privacy team is available to assist you at any time.

You may reach us through the following channels:

• Privacy Email: [email protected] — for written enquiries and formal privacy rights requests
• Live Chat: Available 24/7 within the winbox88 platform for immediate assistance
• Telegram: Contact our support agents via winbox88's official Telegram channel

For formal privacy rights requests such as data access, correction, or deletion, please provide the following details in your message: full name, winbox88 account number, type of request, and reason for the request. This helps us process your request more quickly and accurately.

Our team will respond within 14 working days for standard requests and 72 hours for urgent security issues. winbox88 values your trust and will always strive to resolve every privacy concern in a professional and transparent manner.