Privacy Policy – winbox88

1. Introduction

winbox88 ("we", "us", "our", "the Company") operates the online gaming platform at winbox88.lat. This Privacy Policy ("Policy") describes how winbox88 collects, uses, discloses, and safeguards personal information provided by or generated from users ("you", "the User") who access or use the winbox88 platform.

By registering an account or using any service offered by winbox88, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the winbox88 Terms & Conditions and should be read alongside them.

winbox88 is committed to protecting your privacy and handling your personal information with transparency, integrity, and care. If you have questions about this Policy or your data, please contact our support team at [email protected].

2. Data We Collect

winbox88 collects the following categories of personal data:

2.1 Identity Data

• Full legal name as stated on a government-issued identification document;
• Date of birth;
• National identification number (e.g., Malaysian MyKad number) or passport number for KYC verification;
• Copies of identity documents submitted for account verification.

2.2 Contact Data

• Email address;
• Mobile phone number;
• Residential address (required for full KYC verification on high-value accounts).

2.3 Financial Data

• Payment method details (e.g., bank account numbers, e-wallet identifiers such as Touch n Go eWallet or Boost account references) — stored only to the extent required to process transactions and comply with anti-money laundering obligations;
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment methods;
• Account balance records.

2.4 Technical & Usage Data

• IP address and geolocation derived from it;
• Device type, browser type, and operating system;
• Session duration, pages visited, games played, and betting history;
• Login timestamps and session activity logs.

2.5 Communication Data

• Records of customer support interactions including live chat transcripts and email correspondence;
• Feedback or complaints submitted to winbox88.

3. How We Collect Your Data

winbox88 collects personal data through the following means:

• Direct submission: Information you provide during account registration, KYC document upload, payment form completion, or live chat interactions;
• Automated collection: Technical data collected automatically when you visit winbox88.lat, including cookies, server logs, and device fingerprinting;
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from payment processors; geolocation data from IP resolution services.

4. How We Use Your Data

winbox88 uses collected personal data for the following purposes:

• Account management: To create, maintain, and secure your winbox88 account;
• Identity verification: To verify your age (21+) and identity in compliance with our licensing authority's KYC requirements;
• Payment processing: To process deposits, withdrawals, and refunds in MYR;
• Regulatory compliance: To meet anti-money laundering (AML), counter-terrorism financing (CTF), and other regulatory obligations imposed by our licensing authority;
• Fraud prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, and other prohibited conduct;
• Customer support: To respond to your enquiries, complaints, and disputes;
• Service improvement: To analyse usage patterns and improve the winbox88 platform, game offerings, and user experience;
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling and to apply account tools such as deposit limits or self-exclusions where warranted;
• Marketing communications: To send promotional offers and bonus notifications to users who have opted in to receive them. You may opt out at any time via your account settings.

5. Legal Basis for Processing

winbox88 processes your personal data under one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil the Terms & Conditions governing your winbox88 account, including account creation, payment processing, and dispute resolution;
• Legal obligation: Processing required to comply with applicable laws and our licensing authority's regulatory requirements, including KYC, AML, and CTF obligations;
• Legitimate interests: Processing for fraud prevention, platform security, and internal analytics, where such processing does not override your fundamental rights;
• Consent: Processing for direct marketing communications, where you have given explicit opt-in consent. Consent may be withdrawn at any time.

6. Data Sharing & Disclosure

winbox88 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary:

• Payment processors: To process deposits and withdrawals via your chosen payment method (e.g., Maybank FPX, Touch n Go eWallet, CIMB, Visa/Mastercard);
• KYC and identity verification providers: To verify the identity and age of account holders;
• Fraud prevention services: To screen transactions and gameplay for indicators of money laundering, bonus abuse, or other prohibited activity;
• Game software providers: Game providers may receive session identifiers and game result data as part of game delivery — they do not receive full identity or payment data;
• Regulatory and law enforcement authorities: Where we are legally required to disclose data by our licensing authority, a court order, or applicable law;
• Professional advisers: Legal counsel, auditors, and insurers, under applicable confidentiality obligations.

All third parties with whom winbox88 shares personal data are required to maintain appropriate data protection standards and to use the data solely for the purposes for which it was shared.

7. Cookies & Tracking Technologies

winbox88 uses cookies and similar tracking technologies on winbox88.lat for the following purposes:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your winbox88 session. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to understand how users navigate the platform, which games are most popular, and where users encounter difficulties. Data is aggregated and anonymised.
• Security cookies: Used for fraud detection, device fingerprinting, and identifying unusual login activity.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the winbox88 platform.

8. Data Retention

winbox88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal and regulatory obligations. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of account activity and for a minimum of five (5) years after account closure, in compliance with AML regulatory requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications: Retained for three (3) years from the date of the communication;
• Technical and usage logs: Retained for twelve (12) months from the date of generation, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, winbox88 will securely delete or anonymise your personal data such that it can no longer be linked to your identity.

9. Data Security

winbox88 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and winbox88 servers;
• Encrypted storage of sensitive data at rest, including payment credentials and identity document copies;
• bcrypt hashing of account passwords — plaintext passwords are never stored;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of the winbox88 platform;
• Automated monitoring for anomalous login patterns and suspicious account activity.

Whilst winbox88 takes all reasonable precautions to protect your data, no internet-based system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your winbox88 login credentials and for immediately reporting any suspected unauthorised access to your account.

10. Your Data Rights

Subject to applicable data protection legislation, you have the following rights in respect of your personal data held by winbox88:

• Right of access: To request a copy of the personal data winbox88 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data, subject to our legal retention obligations;
• Right to restriction: To request that winbox88 restricts processing of your data in certain circumstances;
• Right to data portability: To receive your personal data in a structured, machine-readable format where technically feasible;
• Right to object: To object to processing of your data for direct marketing purposes at any time, without providing a reason;
• Right to withdraw consent: Where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the winbox88 support team via live chat or at [email protected]. We will respond to data rights requests within 30 days. We may request proof of identity before actioning a request to protect against unauthorised access to your account information.

11. Children's Privacy

winbox88 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. If winbox88 becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted immediately and the account closed.

If you have reason to believe that a minor is using the winbox88 platform, please notify us immediately via live chat or at [email protected] so we can take appropriate action without delay.

12. International Data Transfers

winbox88 operates servers and infrastructure in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, winbox88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applicable in Malaysia, including contractual data transfer agreements with service providers.

13. Changes to This Policy

winbox88 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email or via a notice on the platform at login. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the winbox88 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by winbox88, please contact us:

• Live Chat: Available 24/7 via the chat widget on winbox88.lat
• Email: [email protected]

We are committed to resolving privacy concerns promptly and to your satisfaction. If after contacting us you remain unsatisfied with the resolution, you may escalate your complaint to the relevant data protection authority or the independent dispute resolution body specified by winbox88's licensing authority.