Privacy Policy — Winbox888

This Privacy Policy (hereinafter "Policy") is issued by Winbox888 (hereinafter "we", "us", "our", or "the Platform") and governs the collection, processing, storage, use, and disclosure of personal data relating to individuals (hereinafter "you", "User", or "Member") who access or use the services available at https://winbox888.cam and all associated mobile-optimised interfaces and subdomains.

winbox888 is committed to protecting the privacy and personal data of all its users, including players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, and Shah Alam. We process personal data in a manner consistent with applicable data protection legislation, including principles aligned with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards.

By registering an account, making a deposit, placing a wager, or otherwise using the winbox888 platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the platform immediately.

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means winbox888, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of winbox888 under a data processing agreement.
• "KYC Data" means identity verification documents provided for Know Your Customer compliance, including copies of government-issued identification such as the Malaysian IC (MyKad).
• "Cookies" means small text files stored on your device by a web browser, used to track session activity and user preferences.
• "PDPA" means Malaysia's Personal Data Protection Act 2010, which governs the processing of personal data in commercial transactions in Malaysia.

winbox888 collects only the personal data that is necessary for the purposes set out in this Policy. The categories of personal data we collect are as follows:

winbox888 collects personal data through the following means:

• 4.1Direct Provision: Data you provide when registering an account, completing KYC verification, submitting support requests, or corresponding with our team via email or live chat.
• 4.2Automated Collection: Technical and usage data collected automatically when you access and use the platform, including through cookies, web beacons, and server log files.
• 4.3Payment Processing: Financial data received through payment service providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency networks such as USDT TRC20.
• 4.4Third-Party Verification: Identity and fraud-risk data received from third-party KYC and AML compliance service providers engaged by winbox888 to verify user identities.
• 4.5Public Sources: Publicly available information that winbox888 may use for fraud prevention, sanctions screening, and compliance purposes.

winbox888 processes your personal data for the following purposes:

• 5.1Account Management: To create, maintain, verify, and administer your winbox888 account, including processing deposits and withdrawals in Malaysian Ringgit (MYR) or cryptocurrency.
• 5.2Service Delivery: To provide access to all platform services including casino games, live dealer tables, sports betting (EPL, Liga Super Malaysia, UFC, and more), and promotional programmes.
• 5.3Identity and Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity for KYC and anti-money laundering compliance purposes.
• 5.4Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, unauthorised account access, and other prohibited conduct.
• 5.5Responsible Gambling: To monitor gambling patterns and implement responsible gambling controls such as deposit limits and self-exclusion where necessary to protect player wellbeing.
• 5.6Customer Support: To respond to your enquiries, resolve disputes, and provide technical and account-related assistance through live chat and email support.
• 5.7Legal and Regulatory Compliance: To comply with applicable laws, regulations, court orders, and requests from competent regulatory authorities.
• 5.8Platform Improvement: To analyse usage patterns, troubleshoot technical issues, and improve the performance, features, and user experience of the winbox888 platform.
• 5.9Marketing Communications: Where you have provided consent, to send you promotional offers, bonus notifications, and relevant platform updates. You may withdraw this consent at any time by contacting support.

winbox888 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and winbox888 — i.e., to operate your account and deliver platform services.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) laws, financial reporting requirements, and age verification obligations.
• Legitimate Interests: Processing is necessary for the legitimate interests of winbox888, including fraud prevention, platform security, and responsible gambling monitoring, provided such interests are not overridden by your rights and freedoms.
• Consent: For specific processing activities such as marketing communications, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

winbox888 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data in the following limited circumstances:

• 7.1Payment Service Providers: Financial data is shared with payment processors including e-wallet providers (Touch 'n Go, Boost, GrabPay), Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong) via FPX/DuitNow, and cryptocurrency networks, solely to facilitate the processing of your transactions.
• 7.2KYC and AML Providers: Identity data and KYC documents may be shared with regulated third-party identity verification and anti-money laundering service providers engaged by winbox888 for compliance purposes.
• 7.3Technology and Infrastructure Partners: Technical data may be shared with cloud hosting, server management, and cybersecurity providers that support the technical operation of the platform, subject to binding data processing agreements.
• 7.4Legal and Regulatory Authorities: We may disclose personal data to competent authorities, courts, or regulators where required to do so by law, court order, or in response to a lawful regulatory request.
• 7.5Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

winbox888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention principles apply:

• Active Account Data: Retained for the duration of your registered membership and for a minimum of 5 years following account closure, in accordance with anti-money laundering and financial record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of 5 years following the cessation of the business relationship, as required by applicable AML legislation.
• Transaction Records: Financial transaction histories are retained for a minimum of 7 years for regulatory compliance and audit purposes.
• Support and Communication Records: Customer service records and chat transcripts are retained for a minimum of 3 years following the relevant interaction.
• Marketing Consent Records: Records of your consent to marketing communications are retained for as long as such consent remains relevant and for a period thereafter sufficient to demonstrate compliance.

Upon the expiration of applicable retention periods, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of the original data.

winbox888 implements and maintains a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• AES-256 Encryption: All personal data transmitted between your device and the winbox888 platform is encrypted using industry-standard 256-bit AES encryption via TLS/SSL protocols.
• Two-Factor Authentication (2FA): Available for all Member accounts to provide an additional layer of protection against unauthorised access.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Continuous Security Monitoring: Our platform is subject to ongoing security monitoring, vulnerability scanning, and periodic third-party security audits.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach affecting your rights, we will notify you and relevant authorities as required by applicable law.

While winbox888 takes all reasonable steps to safeguard your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that your devices are adequately protected.

winbox888 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and collect usage analytics. The following types of cookies are used:

• Essential Cookies: Required for the platform to function correctly, including maintaining your session authentication and enabling core features such as the game lobby and cashier. These cannot be disabled without impairing platform functionality.
• Analytical Cookies: Used to collect anonymised data about how users interact with the platform — including pages visited, session duration, and navigation paths — to help us identify and fix usability issues.
• Functional Cookies: Used to remember your preferences such as language settings and display options, so you do not need to reconfigure these on each visit.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and credential stuffing attacks.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the winbox888 platform. We do not use third-party advertising cookies or sell data collected through cookies to advertising networks.

Subject to applicable law and certain exceptions, you have the following rights in respect of your personal data held by winbox888. Requests may be submitted to [email protected] and will be acknowledged within 5 business days:

winbox888 strictly prohibits the use of its platform by individuals under the age of 21. We do not knowingly collect personal data from persons below this age threshold.

As part of our account registration and KYC process, all Members are required to confirm that they are aged 21 or above and to provide documentary evidence of age — such as a valid Malaysian IC (MyKad) — prior to the processing of any withdrawal. Where winbox888 discovers or has reasonable grounds to suspect that an account is being operated by a minor, the account will be suspended immediately and all associated personal data will be reviewed in accordance with applicable law.

If you are a parent or guardian and believe that a minor has registered an account on the winbox888 platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

The winbox888 platform integrates with various third-party service providers for payment processing, identity verification, platform analytics, and security operations. Each such provider is engaged under a contractual data processing agreement that requires them to handle your personal data in compliance with applicable privacy legislation.

Please note that winbox888 does not control the privacy practices of third-party payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or banking institutions such as Maybank, CIMB, Public Bank, and Hong Leong Bank. Once a payment transaction redirects to those providers' platforms, their respective privacy policies govern the handling of your data in that context.

winbox888 is not responsible for the privacy practices of any third-party services or websites that may be referenced or accessible from our platform. We encourage you to review the privacy policies of any third-party services you use in connection with your winbox888 account.

winbox888 reserves the right to update, modify, or replace this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, or our data processing practices. Any changes will be published on this page with a revised "Last Updated" date at the top of the Policy.

Where a change to this Policy is material — for example, a change to the categories of personal data collected, a new purpose for processing, or a change to your data rights — winbox888 will endeavour to notify registered Members via email or an in-platform notification prior to the changes taking effect.

Your continued use of the winbox888 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease use of the platform and may request account closure in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our support team using the details below. All privacy-related enquiries are handled with confidentiality.