Privacy Policy

1. Introduction

winbox01 ("we", "us", "our") operates the online gaming Platform accessible at winbox01.co. We are committed to protecting the privacy and personal data of our Members and visitors. This Privacy Policy has been prepared in accordance with applicable data protection principles and outlines the nature, purpose, and scope of data processing activities conducted by winbox01.

By registering a winbox01 account or using any part of our Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this policy, you should refrain from using the Platform and contact our support team to close any existing account.

This policy should be read in conjunction with the winbox01 Terms & Conditions, which govern the overall relationship between you and winbox01. Defined terms used in this Privacy Policy carry the same meaning as those defined in the Terms & Conditions unless stated otherwise.

2. Personal Data We Collect

2.1 Registration Data

When you register a winbox01 account, we collect the following information: full legal name, date of birth, residential address (including city — commonly Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, or elsewhere in Malaysia), email address, and mobile telephone number. This data is mandatory for account creation and ongoing verification purposes.

2.2 Identity Verification (KYC) Data

As a licensed gaming operator, winbox01 is legally obligated to verify the identity of Members prior to processing withdrawals. This requires collection of copies of government-issued identity documents (MyKad, passport, or driving licence) and, where required, proof of residential address such as a recent utility bill or bank statement. These documents are processed and stored securely and are not used for any purpose other than identity verification and regulatory compliance.

2.3 Financial Data

winbox01 collects transaction data associated with deposits and withdrawals, including the payment method used (Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, or FPX), transaction amounts in MYR, timestamps, and transaction reference numbers. Full payment credentials (such as bank account numbers or e-wallet login details) are not stored by winbox01 — these are handled directly by the respective payment processors.

2.4 Usage and Gaming Data

We collect data relating to your use of the Platform, including games played, bet amounts, session durations, game outcomes, bonus activity, and account navigation behaviour. This data is used to personalise your experience, detect unusual activity, and comply with responsible gaming obligations.

2.5 Technical and Device Data

We automatically collect technical data when you access the Platform, including IP address, device type and model, operating system, browser type and version, referring URL, and general geographic location derived from IP address. This data is used for security monitoring, fraud detection, and Platform optimisation for Malaysian mobile users.

2.6 Communications Data

We retain records of communications between you and the winbox01 support team, whether via live chat, email, or any other channel. These records are maintained for quality assurance, dispute resolution, and regulatory audit purposes.

3. How We Collect Your Data

winbox01 collects personal data through the following channels:

• Direct submission — information you provide when registering, completing KYC verification, making deposits or withdrawals, or contacting support.
• Automated collection — technical and usage data collected automatically via cookies, server logs, and similar tracking technologies when you access the Platform.
• Third-party sources — identity verification agencies and fraud prevention databases may provide supplementary data to validate the accuracy of information you have submitted, in accordance with applicable law.
• Payment processors — transaction confirmation data passed by payment partners (Touch 'n Go, Boost, FPX-linked banks) to confirm successful fund transfers.

4. Legal Basis for Processing

winbox01 processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our obligations under the Member agreement, including account management, deposit and withdrawal processing, and game access.
• Legal obligation — processing required to comply with anti-money laundering regulations, KYC requirements, and any other applicable legal or regulatory obligations imposed on licensed gaming operators.
• Legitimate interests — processing for fraud detection, security monitoring, Platform improvement, and responsible gaming enforcement, where such interests are not overridden by your rights.
• Consent — processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. Consent may be withdrawn at any time.

5. How We Use Your Data

winbox01 uses collected personal data for the following purposes:

• Creating and managing your winbox01 Member account.
• Processing deposits and withdrawals in MYR via your chosen payment method.
• Conducting KYC identity verification as required by our licensing authority.
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities.
• Enforcing responsible gaming tools, including deposit limits, session timers, and self-exclusion requests.
• Personalising your gaming experience — for example, recommending game categories based on your play history.
• Sending transactional communications such as deposit confirmations, withdrawal updates, and security alerts.
• Sending promotional communications — bonuses, reload offers, and tournament invitations — where you have not opted out of marketing.
• Improving Platform performance, fixing bugs, and optimising load times for Malaysian mobile network conditions.
• Responding to inquiries and resolving disputes submitted through our support channels.

6. Sharing Your Personal Data

winbox01 does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients under strictly controlled circumstances:

• Payment processors — to facilitate MYR deposits and withdrawals through Touch 'n Go, Boost, Maybank, CIMB, Public Bank, and FPX. Data shared is limited to what is necessary to process the transaction.
• Identity verification providers — third-party KYC and AML screening services used to verify identity documents and perform sanctions screening as required by our licence conditions.
• Technology and infrastructure providers — cloud hosting, cybersecurity, and software service providers who process data on our behalf under binding data processing agreements that prohibit secondary use.
• Regulatory authorities — our licensing authority and any competent law enforcement or regulatory body where disclosure is required by law, court order, or lawful authority.
• Game content providers — certain game studios may receive anonymised session data to facilitate game rendering and RNG operation. No personally identifiable information is shared with game studios beyond what is technically necessary.

All third parties with whom winbox01 shares personal data are contractually obligated to handle that data in accordance with applicable data protection standards and to use it solely for the specified purpose.

7. Cookies & Tracking Technologies

winbox01 uses cookies and similar technologies (local storage, session tokens) to operate the Platform and enhance your experience. The following categories of cookies are in use:

• Strictly necessary cookies — required for authentication, session management, and core Platform functionality. These cannot be disabled without impairing Platform operation.
• Performance cookies — collect anonymised data on how Members use the Platform, such as pages visited and error occurrences, to help us identify and fix issues. No personal identity is captured.
• Functionality cookies — remember your preferences such as language setting, last-played game category, and display preferences to provide a more personalised experience on return visits.
• Analytics cookies — used to measure aggregate Platform performance and understand traffic patterns. Data is anonymised and aggregated before analysis.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent login. Disabling other categories will not prevent access but may reduce personalisation features.

8. Data Retention

winbox01 retains personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to comply with applicable legal and regulatory obligations. The following retention periods apply as general guidance:

• Account data — retained for the duration of account activity and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documents — retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction records — retained for a minimum of five (5) years from the date of the transaction.
• Support communications — retained for a minimum of three (3) years from the date of the interaction.
• Technical and usage logs — typically retained for twelve (12) months for security and debugging purposes, after which they are deleted or anonymised.

Following the expiry of applicable retention periods, personal data will be securely deleted or irreversibly anonymised.

9. Your Data Rights

As a winbox01 Member, you have the following rights in relation to your personal data, exercisable by contacting our support team via live chat or at [email protected]:

• Right of access — you may request a copy of the personal data winbox01 holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data held in your account.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing — you may request that we limit the processing of your data in certain circumstances, for example while a dispute regarding data accuracy is being resolved.
• Right to data portability — you may request a structured, machine-readable copy of personal data you have provided to winbox01 for transfer to another service provider.
• Right to withdraw consent — where processing is based on consent (marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object — you may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes.

winbox01 will respond to verified data rights requests within 30 days. We may request proof of identity before actioning a request to prevent unauthorised access to your data.

10. Data Security

winbox01 implements technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS encryption for all data transmitted between your device and our servers.
• One-way cryptographic hashing of all account passwords — plaintext passwords are never stored.
• Role-based access controls ensuring that winbox01 staff access only the personal data necessary for their specific function.
• Regular third-party security audits and penetration testing of the Platform infrastructure.
• Incident response procedures for detecting, assessing, and notifying affected Members of any personal data breach in a timely manner.

No method of electronic storage or transmission is completely secure. While winbox01 takes all reasonable precautions, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorised access.

11. Children's Privacy

The winbox01 Platform is strictly restricted to individuals aged 21 years or above. We do not knowingly collect or process personal data from persons under the age of 21. If we become aware that a minor has registered an account or provided personal data, we will immediately suspend the account, delete the associated personal data, and forfeit any associated balances.

If you believe a minor has registered a winbox01 account, please notify our support team immediately via live chat so that we can take prompt action.

12. Changes to This Privacy Policy

winbox01 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

Where changes are significant, winbox01 will endeavour to notify Members via a prominent notice on the Platform or by email to your registered address. Your continued use of the winbox01 Platform following the publication of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any changes, you should cease using the Platform and request account closure.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by winbox01, please contact us through the following channels:

• Live Chat: Available 24/7 via the support widget on winbox01.co
• Email: [email protected] (response within 2–4 hours)

Please include your registered username or account email in any correspondence to expedite handling of your request. winbox01 is committed to addressing privacy-related inquiries promptly and transparently.