At Winbox, your privacy is treated with the same seriousness as your account security. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and what rights you hold as Winbox player in Malaysia.
These commitment cards provide a quick overview of our data practices. The full legal detail is in the policy sections below, which governs in all circumstances.
All personal data transmitted between your device and Winbox is encrypted using256-bit SSL technology — the same standard applied by Malaysia's largest commercial banks. Your data is stored on secure, access-controlled servers.
Winbox does not sell, rent, or trade your personal information to unafiliated third parties for their own marketing purposes — ever. Your data is only shared with partners strictly necessary for operating the Platform and meeting legal obligations.
You have the right to access, correct, and request deletion of your personal data at any time. You may also withdraw consent for non-essential data processing. Contact our support team or email us to exercise your rights.
Winbox collects only the personal data that is genuinely necessary to operate your account, process payments, meet KYC regulatory requirements, and deliver the best possible service to you as a Malaysian player.
Winbox uses cookies to maintain your session, personalise your experience, and analyse platform performance. We do not use third-party advertising cookies. You can manage your cookie preferences via your browser settings at any time.
We will always notify you of material changes to this Privacy Policy before they take effect. You will receive advance notice via your registered email address and/or a prominent notification on the Platform.
This Privacy Policy ("Policy") issued by Winbox ("Company", "we", "us", "our"), the operator of the online gaming and sports betting platform atwinbox.cam ("Platform"). This Policy governs the collection, use, storage, sharing, and protection of personal data belonging to all registered users ("User", "Player", "you") of the Platform.
Winbox is committed to handling your personal data responsibly and in compliance with applicable international data protection standards. We recognise that privacy is a fundamental right, and we have designed our data practices to be transparent, proportionate, and fully aligned with the trust our Malaysian players place in us.
By creating an account on Winbox, making a deposit, placing a wager, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should refrain from using the Platform and may request account closure by contacting our support team.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and device identifiers. |
| "Processing" | Any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | Winbox — the entity that determines the purposes and means of Processing Personal Data collected through the Platform. |
| "Data Processor" | Any third party engaged by Winbox to Process Personal Data on its behalf, subject to written data processing agreements. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose. |
| "KYC" | Know Your Customer — the identity and address verification process required by Winbox pursuant to applicable anti-money-laundering and responsible gambling regulatory obligations. |
| "Cookies" | Small text files placed on your device by the Platform to maintain session state, remember preferences, and collect anonymised usage analytics. |
Winbox collects Personal Data through several channels during your use of the Platform. We collect only the minimum data necessary to deliver our services effectively and to meet our legal obligations.
When you create a Winbox account, we collect:
To comply with our anti-money-laundering and responsible gambling obligations, we may additionally request:
When you make deposits or withdrawals, we collect payment method identifiers — such as the account number associated with your Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX account. Full payment credentials (e.g., full card numbers or banking passwords) are never stored by Winbox — they are processed exclusively by our licensed payment processor partners.
We retain records of all deposits, withdrawals, wagers placed, games played, bonus claims, and account balance changes associated with your Account for regulatory compliance and dispute resolution purposes.
When you use the Platform, we automatically collect:
Records of communications between you and the Winbox customer support team — whether via live chat, email, or any other support channel — are retained for quality assurance, training, and dispute resolution purposes.
Winbox processes your Personal Data for the following specific purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your Winbox account; enabling login, session management, and account recovery. |
| Service Delivery | Processing bets, casino game participation, live dealer sessions, and e-sports wagering; crediting winnings and bonuses to your Account. |
| Payment Processing | Facilitating deposits via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect; processing withdrawal requests to your nominated account. |
| Identity Verification (KYC) | Verifying your identity and age (21+ requirement) to comply with anti-money-laundering regulations and responsible gambling obligations. |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent transactions, bonus abuse, multiple account creation, and other prohibited activities. |
| Legal Compliance | Fulfilling obligations under applicable gaming, anti-money-laundering, and data protection regulations, including responding to lawful requests from regulatory authorities. |
| Customer Support | Responding to enquiries, resolving account disputes, processing self-exclusion requests, and managing responsible gambling tool activations. |
| Platform Improvement | Analysing anonymised usage data to improve Platform performance, identify technical issues, and enhance the user experience for all Malaysian players. |
| Marketing Communications | Sending promotional offers, bonus notifications, and platform updates to your registered email address — subject to your opt-in preferences, which you may withdraw at any time. |
Winbox processes your Personal Data only where a valid legal basis exists. The applicable legal bases for our data processing activities are as follows:
Winbox does not sell, rent, or trade your Personal Data to unaffiliated third parties for commercial purposes. We may share your data only in the following limited and controlled circumstances:
To facilitate deposits and withdrawals, we share relevant payment details with licensed Malaysian payment gateway providers and financial institutions — including those operating DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, and GrabPay. These parties are bound by their own data protection obligations and process data solely for payment completion purposes.
KYC document verification may be performed by authorised third-party identity verification service providers operating under strict data processing agreements with Winbox. These partners do not retain your documents beyond the verification period unless required by law.
Winbox may be required by law or court order to disclose specific Personal Data to regulatory bodies, law enforcement agencies, or other competent authorities. We will comply with such lawful requests while, where permitted, notifying the affected User.
To protect the integrity of the Platform and its players, Winbox may share limited transactional and technical data with industry-standard fraud detection and prevention services. This sharing is conducted under strict data minimisation principles.
In the event of a merger, acquisition, or asset sale involving Winbox, Personal Data held by the Company may form part of the transferred assets. Users will be notified via email and/or prominent Platform notice prior to any such transfer, and will be given the opportunity to object or close their accounts before the transfer takes effect.
Winbox retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations.
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years post-closure |
| KYC identity documents | Duration of account + 5 years post-closure (regulatory requirement) |
| Transaction & betting records | Duration of account + 7 years post-closure |
| Support communications | 3 years from date of communication |
| Technical & device logs | 12 months on a rolling basis |
| Marketing consent records | Until withdrawal of consent + 3 years |
Upon the expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.
Winbox uses cookies and similar tracking technologies to operate the Platform effectively, maintain your login session, and analyse aggregated usage patterns to improve our services.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Maintain your login session, remember account preferences, and enable core Platform functionality. Cannot be disabled without impairing Platform operation. | Session / up to 30 days |
| Analytics Cookies | Collect anonymised data about how users interact with the Platform — pages visited, time spent, features used — to improve performance and identify technical issues. | Up to 12 months |
| Preference Cookies | Remember your language, currency display, and other personal settings so you don't need to re-configure them each visit. | Up to 12 months |
You may control and disable non-essential cookies through your browser settings at any time. Most modern browsers — including Chrome, Firefox, Safari, and Edge — provide granular cookie management controls under their Privacy or Security settings. Please note that disabling essential cookies may impair your ability to log in or use certain Platform features.
Winbox does not use third-party advertising cookies or participate in cross-site user profiling networks.
As a Winbox user, you have specific rights with respect to your Personal Data. Winbox is committed to facilitating the exercise of these rights promptly and without unnecessary obstacles.
To exercise any of the rights listed above, please contact us at [email protected] or via 24/7 live chat. We aim to respond to all data subject requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days, in which case we will inform you of the extension and the reason for it.
Winbox implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
In the event of a data security breach that is reasonably likely to result in a high risk to your rights and freedoms, Winbox will notify affected users within 72 hours of becoming aware of the breach, where technically and legally feasible. We will also notify the relevant supervisory authority as required by applicable law.
During the registration process, all users are required to confirm that they are at least 21 years of age. Winbox further verifies age during the KYC process through examination of government-issued identity documents. Where Winbox identifies or has reasonable grounds to believe that a user is under the age of 21, the Account will be immediately suspended pending investigation, and any balance may be withheld pending verification.
If you are a parent or guardian and believe that your child has registered on the Winbox Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.
As an internationally operated platform, Winbox may transfer your Personal Data to, and store it on, servers located outside Malaysia. Where such transfers occur, Winbox ensures that appropriate safeguards are in place to protect your data to the same standard as it would receive in Malaysia.
Safeguards used for international data transfers include: to countries recognised as providing an adequate level of data protection; use of standard contractual clauses approved by applicable data protection authorities; and transfers to recipients who have implemented binding corporate rules or equivalent data protection frameworks.
By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Malaysia. Winbox will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.
Winbox reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. The updated Policy will be published on this page with a revised "Last Updated" date.
Where changes are material — meaning they significantly affect how we collect, use, or share your Personal Data — Winbox will provide at least 14 days' advance notice to all registered users via the email address on record and/or a prominent banner notification on the Platform. Continued use of the Platform following the effective date of an amended Policy constitutes your acceptance of the updated terms.
We encourage you to review this Policy periodically to stay informed about how we are protecting your information. The current version will always be accessible at winbox.cam/privacy-policy.
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a concern about how Winbox handles your Personal Data, please contact us through any of the following channels:
Email
Data privacy enquiries:
[email protected]
Live Chat
Available 24/7 via the Platform.
Response under 3 minutes.
Response Time
Data requests acknowledged
within 2 business days.
Winbox is committed to resolving all data privacy enquiries fairly and promptly. If you remain dissatisfied with our response to your data privacy concern, you may have the right to lodge a complaint with the relevant supervisory authority in the jurisdiction applicable to your circumstances.
Your data is safe with us. Winbox is built on a foundation of security, transparency and respect for every player's privacy. Ready to experience Malaysia's most trusted betting and casino platform? Start at our homepage or read our FAQ for more information.
🔞 For players aged 21 and above only. Play responsibly.