winbox02 Privacy Policy 🔏

1. Introduction

This Privacy Policy ("Policy") describes how winbox02 ("winbox02," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "Player," or "User") who access or use the winbox02 platform available at winbox02.org, including all associated interfaces, games, promotional services, and customer support channels (collectively, the "Services").

winbox02 is committed to protecting the privacy and security of personal data entrusted to us by our players and visitors. This Policy is designed to comply with applicable data protection laws and the requirements of our international gaming authority licensing conditions.

By registering an account on winbox02 or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact us to close your account.

2. Data Controller

winbox02 is the data controller responsible for the personal data collected through the winbox02 platform. As data controller, winbox02 determines the purposes and means of processing personal data in accordance with this Policy and applicable data protection legislation.

winbox02 processes personal data under the authority of its international gaming licence. The Licensing Authority may independently hold and process certain player verification and transaction data as part of its regulatory oversight functions. Such processing by the Licensing Authority is governed by the Authority's own data policies and is a condition of winbox02's licence.

3. Personal Data We Collect

winbox02 collects the following categories of personal data in connection with the provision of the Services:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents (e.g., Malaysian MyKad, passport) submitted during account registration and KYC verification.
• Contact Data: Email address, mobile phone number, and residential address as provided during registration or updated subsequently in the account settings.
• Financial Data: Payment method details (e-wallet identifiers, bank account references), deposit and withdrawal transaction records, and balance history. winbox02 does not store full card numbers; payment processing is handled by certified payment service providers.
• Technical Data: IP address, device identifiers, browser type and version, operating system, time zone, and session duration data collected automatically during platform use.
• Usage Data: Game activity logs, betting history, session records, bonus utilisation data, and platform interaction data.
• Communications Data: Records of your correspondence with winbox02 customer support, including live chat transcripts and email exchanges.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, session limit configurations, and related account protection measures.
• Marketing Preferences: Your stated preferences regarding promotional communications from winbox02.

4. How We Collect Your Data

winbox02 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated technical collection: Data collected automatically through cookies, web beacons, and similar tracking technologies when you access or interact with the winbox02 platform. See Section 9 for full cookie details.
• Third-party sources: Data received from identity verification service providers, payment processors, fraud prevention agencies, and our Licensing Authority in connection with the provision and regulation of the Services. winbox02 may also receive data from publicly available sources for fraud and money laundering screening purposes.

5. Purpose and Legal Basis for Processing

winbox02 processes personal data for the following purposes, each supported by an appropriate legal basis:

• Account registration and management — Necessary for the performance of our contract with you. winbox02 cannot provide Services without processing identity and contact data.
• Identity and age verification (KYC) — Legal obligation. winbox02 is required by its Licensing Authority to verify that all players are aged 21 or above and are who they claim to be before permitting withdrawals.
• Transaction processing — Necessary for the performance of our contract with you, including deposit crediting and withdrawal disbursement.
• Anti-money laundering (AML) and fraud prevention screening — Legal obligation and legitimate interest. winbox02 is obligated to screen transactions and player behaviour for indicators of financial crime.
• Customer support — Legitimate interest in providing effective assistance to players experiencing difficulties with the platform.
• Platform improvement and analytics — Legitimate interest in understanding how the platform is used to improve performance, game selection, and user experience for all winbox02 players.
• Responsible gaming compliance — Legal obligation and legitimate interest in player protection, in accordance with our licensing conditions.
• Direct marketing communications — Consent. winbox02 will only send promotional emails or SMS to players who have opted in to receive such communications. Players may withdraw marketing consent at any time via account settings or by contacting support.
• Legal and regulatory compliance — Legal obligation. Retention of records as required by our Licensing Authority and applicable law.

6. Disclosure of Personal Data

winbox02 does not sell, rent, or trade personal data to third-party marketing organisations. We may share personal data with the following categories of recipients strictly for the purposes described in this Policy:

• Licensing Authority: winbox02 is obligated to provide player data to its international gaming authority as required for regulatory oversight, licence compliance audits, and dispute resolution.
• Identity verification service providers: Third-party KYC and age verification specialists who process documentation submitted during account registration or KYC compliance checks.
• Payment service providers: Processors handling deposit and withdrawal transactions on behalf of winbox02, including e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay, DuitNow) and bank payment gateway providers (FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect).
• Fraud prevention and AML screening services: External databases and risk scoring services used to identify and prevent financial crime.
• IT and infrastructure providers: Cloud hosting, security monitoring, and platform maintenance providers who process data under strict data processing agreements with winbox02.
• Legal and regulatory authorities: Law enforcement agencies, courts, or government bodies where winbox02 is legally compelled to disclose data.

All third-party service providers who receive personal data from winbox02 are contractually required to process such data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection law.

7. International Data Transfers

As an online platform operating under an international gaming licence, winbox02 may transfer personal data to recipients located in countries outside Malaysia. Where such transfers occur, winbox02 ensures that appropriate safeguards are in place to protect the transferred data, including contractual clauses equivalent to standard data protection contractual frameworks recognised by data protection authorities.

By using the winbox02 platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia, and you consent to such transfer where it is necessary for the performance of Services or compliance with our licensing obligations.

8. Data Retention

winbox02 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to meet our legal and regulatory obligations. Specific retention periods applicable to winbox02 data categories are as follows:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, as required by our Licensing Authority for audit and regulatory compliance purposes.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AML record-keeping obligations.
• Customer support communications: Retained for a minimum of two (2) years from the date of each interaction.
• Marketing preference data: Retained until you withdraw consent for marketing communications or request deletion, whichever is earlier.
• Technical and usage data: Retained for up to thirteen (13) months from collection for analytics purposes, after which it is anonymised or deleted.

Where winbox02 is required by law to retain data beyond the periods stated above, the longer retention period applies.

9. Cookies and Tracking Technologies

winbox02 uses cookies and similar tracking technologies (including web beacons and session tokens) on the platform. Cookies are small text files stored on your device that help winbox02 recognise returning users, maintain session security, and understand how the platform is used.

The following categories of cookies are used by winbox02:

• Strictly necessary cookies: Essential for the platform to function correctly, including authentication session management, security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Functional cookies: Store your preferences such as language settings, display preferences, and account configurations to improve your experience on winbox02.
• Analytics cookies: Collect anonymised information about how users interact with the winbox02 platform, which games are most popular, and which pages generate the most engagement. This data helps winbox02 improve the platform for all Malaysian players.
• Security cookies: Help winbox02 identify and prevent fraudulent access attempts, unusual login patterns, and automated bot activity targeting player accounts.

You may control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the winbox02 platform, including the ability to stay logged in or access certain features.

10. Your Data Protection Rights

Subject to applicable law and our legal retention obligations, you have the following rights with respect to your personal data held by winbox02:

• Right of access: You may request a copy of the personal data winbox02 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Players can update most contact information directly in account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under licensing law.
• Right to restrict processing: You may request that winbox02 limit the processing of your data in certain circumstances, such as while a dispute is being investigated.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to winbox02.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Withdrawal of marketing consent is immediate and can be done via account settings.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, submit a written request to winbox02 support with sufficient information to verify your identity. We will respond within 30 days of receiving a valid request, or notify you if an extension is required for complex requests.

11. Children's Privacy

The winbox02 platform is strictly restricted to individuals aged 21 and above. winbox02 does not knowingly collect personal data from individuals under the age of 21. If winbox02 discovers that personal data has been collected from a person under 21, the account will be closed immediately and all associated data deleted, except where retention is required for regulatory compliance purposes related to the investigation of the underage access.

If you believe that an individual under the age of 21 has registered an account on winbox02 or provided personal data to us, please contact our support team immediately so that appropriate action can be taken.

12. Security Measures

winbox02 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and winbox02 servers.
• Encrypted storage of sensitive personal data including passwords (stored as salted cryptographic hashes) and identity documents.
• Access controls limiting personal data access to authorised winbox02 personnel with a legitimate operational need.
• Regular security assessments and penetration testing by independent security specialists.
• Two-factor authentication (2FA) available to all players to protect account access.
• Continuous fraud monitoring and anomaly detection on player accounts and transactions.

While winbox02 takes data security seriously and maintains robust safeguards, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, winbox02 will notify you and the relevant authorities in accordance with our legal obligations.

13. Third-Party Links

The winbox02 platform may contain references to third-party game providers, payment service providers, or promotional partners. winbox02 is not responsible for the privacy practices of any third-party websites or services. This Privacy Policy applies solely to data processed by winbox02 through the winbox02 platform. We encourage players to review the privacy policies of any third-party services they interact with in connection with the winbox02 platform.

14. Changes to This Policy

winbox02 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform services. The "Last Updated" date at the top of this page reflects the most recent revision.

Material changes to this Policy will be communicated to registered players via email notification to the address on file or via a prominent notice on the winbox02 platform prior to the changes taking effect. Continued use of the platform following notification of any amendments constitutes acceptance of the revised Policy.

We recommend reviewing this Policy periodically. Archived versions of previous policies are available on request from winbox02 customer support.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by winbox02, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 via the winbox02 platform. Select "Privacy & Data" as the subject when initiating the chat.
• Email: [email protected] — Please use the subject line "Privacy Request" to ensure your enquiry is routed to the correct team.

winbox02 targets acknowledgement of all privacy-related enquiries within 72 hours and resolution within 30 calendar days. For complex or high-volume requests, we will notify you of the expected timeline.