winbox1 Privacy Policy

1. Introduction

winbox1 ("we", "us", "the Company") is committed to protecting the privacy of all individuals who visit, register with, or otherwise interact with the winbox1 Platform at winbox1.org (the "Platform"). This Privacy Policy ("Policy") sets out the basis on which we collect, process, store, disclose, and protect personal data in connection with the Platform and the services we provide.

By registering an account with winbox1 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the Platform.

This Policy should be read in conjunction with winbox1's Terms & Conditions, which govern your general use of the Platform. Capitalised terms not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

2. Personal Data We Collect

winbox1 collects personal data from you in the following circumstances:

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, username, and password when you create a winbox1 account.
• Identity verification data: Government-issued identification documents (e.g., MyKad, passport), proof of address, and any other documentation required under our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations.
• Payment data: Payment method details submitted when making deposits or requesting withdrawals, including e-wallet account identifiers and online banking references. Full card or account numbers are not retained by winbox1; payment processing is handled by certified third-party payment service providers.
• Communications: Messages you send to winbox1 via live chat, email, or support tickets, including the content of those communications.
• Responsible gaming data: Information you provide when using self-exclusion tools, deposit limits, or other responsible gaming features within your account dashboard.

2.2 Data Collected Automatically

• Device and access data: IP address, device type, browser type and version, operating system, and referring URLs collected when you access the Platform.
• Usage and transaction data: Records of your gaming activity, bets placed, games accessed, session duration, login timestamps, and transaction history generated through your use of the Platform.
• Cookies and similar technologies: Data collected via cookies, web beacons, and local storage as described in Section 6 of this Policy.

3. How We Use Your Personal Data

winbox1 processes your personal data for the following purposes:

Purpose	Description
Account management	Creating and maintaining your winbox1 account, verifying your identity, and managing your login credentials and account preferences.
Service delivery	Providing access to games, processing bets, crediting winnings, and facilitating deposits and withdrawals in Malaysian Ringgit.
Regulatory compliance	Fulfilling KYC, AML, and responsible gaming obligations required under the international gaming authority framework governing our operations.
Fraud prevention	Detecting, investigating, and preventing fraudulent activity, money laundering, multiple account abuse, and other prohibited conduct.
Customer support	Responding to support queries, resolving disputes, and communicating account-related notifications.
Marketing	Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications.
Platform improvement	Analysing aggregated usage data to improve the performance, design, and content of the winbox1 Platform.

4. Legal Basis for Processing

winbox1 processes personal data under the following legal bases:

• Contractual necessity: Processing required to perform the contract between winbox1 and the Player, including account creation, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC verification, AML screening, and age verification.
• Legitimate interests: Processing carried out in furtherance of winbox1's legitimate business interests — including fraud prevention, security, and Platform improvement — where such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time as described in this Policy.

5. Data Sharing and Disclosure

winbox1 does not sell your personal data. We may share your data with third parties only in the following circumstances:

• Payment service providers: To process deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other supported payment channels. These providers are contractually bound to process data only for payment purposes and in accordance with applicable data protection standards.
• Game software providers: To deliver game content. Game providers may receive session data necessary to run the game but are not provided with your full personal profile.
• Identity verification services: Third-party KYC and AML screening providers engaged to verify player identity documents and perform risk assessments as required under our regulatory obligations.
• Regulatory and law enforcement authorities: Where winbox1 is required by law, court order, or regulatory direction to disclose personal data. winbox1 will notify affected players where legally permitted to do so.
• Professional advisers: Legal, accounting, and compliance advisers who are bound by professional confidentiality obligations.

All third parties with whom winbox1 shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the specific purposes for which it was shared.

6. Cookies and Tracking Technologies

The winbox1 Platform uses cookies and similar tracking technologies to support Platform functionality, analyse usage, and where you have consented, to deliver personalised content. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function, including session management and security. These cannot be disabled.
• Functional cookies: Remember your preferences (such as language settings) to improve your experience.
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform to help winbox1 improve performance and content.
• Marketing cookies: Used only where you have given explicit consent to receive personalised promotional content. You may withdraw this consent at any time.

You can manage your cookie preferences through your browser settings. Disabling essential cookies may impair Platform functionality. For analytics and marketing cookies, you may also manage your preferences through the Platform's consent management interface.

7. Data Retention

winbox1 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law and regulatory obligations. In practice:

• Account and transaction data is retained for a minimum of five (5) years from account closure, as required under AML and gaming regulatory obligations.
• Identity verification documents are retained for the period required by applicable law from the date of last account activity.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Marketing preference data is retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Data Security

winbox1 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption of all data in transit between the player's device and the winbox1 Platform.
• Encryption of sensitive data at rest within winbox1's infrastructure.
• Access controls limiting employee access to personal data to those with a documented operational need.
• Regular security assessments and penetration testing.
• Incident response procedures for suspected data breaches, including regulatory notification obligations where applicable.

Notwithstanding the above, no data transmission over the internet can be guaranteed to be completely secure. winbox1 cannot warrant the absolute security of information transmitted to the Platform, and you do so at your own risk. You are responsible for maintaining the confidentiality of your account credentials.

9. Your Data Rights

Subject to applicable law and regulatory requirements, you have the following rights in respect of personal data held by winbox1:

• Right of access: To request a copy of the personal data winbox1 holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data where there is no lawful basis for continued retention. Note that certain data must be retained to comply with AML and gaming regulatory obligations; erasure requests will be assessed against these obligations.
• Right to restrict processing: To request that we limit the processing of your personal data in certain circumstances.
• Right to data portability: To receive personal data you have provided to winbox1 in a structured, machine-readable format where technically feasible.
• Right to object: To object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact winbox1 support via live chat or email as detailed in Section 12. We will respond within the timeframe required by the applicable regulatory framework.

10. Minors

The winbox1 Platform is strictly restricted to individuals aged 21 years and above. winbox1 does not knowingly collect or process personal data from individuals below this age. If winbox1 identifies or is notified that personal data has been collected from a minor, it will be deleted promptly and the relevant account closed immediately. Parents or guardians who believe a minor may have accessed the Platform should contact winbox1 support immediately.

11. Changes to This Policy

winbox1 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via email or through a prominent notice on the Platform before the changes take effect. The effective date of the current version is stated at the top of this page. Your continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or winbox1's handling of your personal data, please contact our support team:

Email: [email protected]
Live Chat: Available 24/7 through the winbox1 Platform.

We aim to respond to all data-related enquiries within the timeframe required under the applicable regulatory framework. If you are not satisfied with our response, you may escalate your concern to the relevant regulatory authority under the framework governing winbox1's operations.