Personal Data Protection

Privacy Policy Winbox2 – Your Data Security Is Our Priority

Winbox2 is committed to protecting the privacy and personal data of every member. This document transparently explains how we collect, use, and safeguard your information in accordance with Malaysian law.

Six Data Protection Principles of Winbox2

Winbox2's privacy policy is built on six core principles that ensure your personal data is always handled responsibly.

256-bit SSL Encryption

All data transmitted between your device and winbox2 servers is protected with 256-bit SSL encryption — the same level of security used by Malaysia's leading banking institutions.

No Sale of Data to Third Parties

Winbox2 has never and will never sell, rent, or share member personal data with advertisers or third parties for marketing purposes without your consent.

Malaysia PDPA 2010 Compliance

All data management practices at winbox2 fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA), including rights of access, correction, and deletion of data.

Secure Data Storage

Your personal data is stored on servers protected with strict access controls. Only authorized personnel may access member data for legitimate operational purposes.

User Data Controls

You have the right to access, correct, and request deletion of your personal data in your winbox2 account at any time through our customer support.

Data Breach Notification

In the event of any security incident involving member data, winbox2 is committed to notifying affected users within the timeframe required by law.

Last updated: 1 January 2026

Important Note: This Privacy Policy describes winbox2's data handling practices. By registering or using our platform, you acknowledge that you have read and understood this policy. Please read it carefully before using winbox2 services.

1 Introduction & Scope of This Policy

Winbox2 ("we", "Platform", or "winbox2") cares about the privacy of every individual using our services. This Privacy Policy explains in detail how we collect, process, store, protect, and in certain circumstances share your personal data when you use the winbox2.win website, our mobile app, or any services we provide.

This policy applies to all users of the winbox2 platform, including website visitors, registered members, and any individual who interacts with us through our official communication channels. Winbox2 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices.

If you do not agree with any part of this privacy policy, you are advised not to use the winbox2 platform. Continued use of our platform after any published amendments is considered acceptance of the updated terms.

2 Personal Data We Collect

Winbox2 collects personal data from you through several means – directly when you register or use the platform, automatically through tracking technologies, and in some cases from trusted third-party sources. The following are the types of data we collect:

2.1 Data You Provide Directly

  • Registration information: full name, date of birth, identity card or passport number, Malaysian phone number, and email address.
  • Financial information: bank account number, e-wallet information (Touch 'n Go, Boost, GrabPay), and transaction records for deposits and withdrawals.
  • KYC documents: copies of identity documents and proof of address when required for identity verification process.
  • Communications: messages, inquiries, and feedback you submit to our customer service team.

2.2 Data Collected Automatically

  • IP address, device type, operating system, and web browser type you use.
  • In-platform activity records including games played, total wagering amounts, and session duration.
  • General location data based on IP address (not precise GPS location).
  • Cookie data and web tracking technologies as further described in section 6.
Data Category Example Information Primary Purpose
Identity Name, date of birth, ID number KYC, account verification
Contact Email, phone number Communications, notifications
Finance Bank account, transaction records Payment processing
Technical IP address, device type Security, analytics
Conduct Game records, login frequency Security, responsible gaming

3 How We Use Your Personal Data

Winbox2 uses the personal data collected solely for legitimate and disclosed purposes. We do not use your data for other purposes without your consent. The primary uses of your personal data are as follows:

  • Account management: create, verify, and maintain your winbox2 account.
  • Transaction processing: process deposits, withdrawals, and all financial transactions within the platform.
  • KYC Verification: comply with legal requirements and anti-money laundering prevention.
  • Customer support: handle your inquiries, complaints, and assistance requests.
  • Platform security: detect and prevent fraud, abuse, and unauthorized access.
  • Service improvement: analyze platform usage to improve user experience.
  • Official communications: send important information about your account, policy changes, and relevant offers (with opt-out option).
  • Responsible gaming: monitor gaming patterns to identify signs of problem gambling and offer appropriate support.

4 Legal Basis for Data Processing

Winbox2 processes your personal data based on the following lawful bases in accordance with Malaysia's PDPA 2010:

  • Contract fulfillment: processing necessary to perform the agreement between you and winbox2, including account management and payment processing.
  • Legal obligations: processing necessary to comply with applicable Malaysian law, including KYC requirements and anti-money laundering prevention.
  • Legitimate interest: processing necessary for the legitimate interests of winbox2 such as platform security, fraud prevention, and business analytics – provided it does not override your privacy interests.
  • Consent: for specific purposes such as optional marketing communications, we obtain your explicit consent beforehand.

5 Data Sharing With Third Parties

Winbox2 does not sell, rent, or disclose member personal data to third parties for marketing purposes. However, in the following limited situations, we may need to share data with certain parties:

5.1 Trusted Service Providers

Winbox2 works with carefully selected third-party service providers to help us operate the platform, including payment processors, cloud infrastructure providers, and analytics software providers. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

5.2 Legal Requirements

Winbox2 will disclose personal data when required by Malaysian law or upon instruction from competent authorities such as police, courts, or relevant regulatory bodies.

5.3 Protection of Interests

We may disclose certain information when we believe it is necessary to protect the rights, property, or safety of winbox2, our members, or the public – including in cases of fraud investigation or illegal activity.

winbox2 never shares sensitive information such as identity card numbers, KYC documents, or full financial details with any third parties without legitimate necessity and legal authorization.

6 Cookies & Tracking Technologies

The winbox2 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. The types of cookies we use are:

  • Essential Cookies: required for essential platform functions such as login and session management. Cannot be disabled.
  • Performance Cookies: collect anonymous usage data to help us understand how members interact with the platform for improvement purposes.
  • Functional Cookies: save your preferences such as language and display settings to provide a more personalized experience.
  • Analytics Cookies: help us analyze traffic and platform usage patterns in aggregate and anonymously.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect certain features of the winbox2 platform.

7 Data Security Measures

Winbox2 implements multiple layers of technical and operational protection to safeguard the security of your personal data:

  • 256-bit SSL/TLS encryption for all data communications between your device and our servers.
  • Passwords are stored using strong hashing methods — we never store passwords in plain text.
  • Role-based access control (RBAC) ensuring only authorized personnel can access specific data.
  • 24/7 security monitoring and an intrusion detection system (IDS) to identify suspicious activity.
  • Regular data backups to a secure, isolated location to ensure continuity of service.
  • Two-factor authentication (2FA) is available for all member accounts as an added layer of security.
  • Regular security audits by independent third parties to identify and address vulnerabilities.

While winbox2 implements industry-leading security measures, no system can guarantee absolute 100% security. You also play a vital role by keeping your password confidential and enabling 2FA on your winbox2 account.

8 Data Retention & Deletion Period

Winbox2 retains your personal data only as long as necessary for the purposes stated in this policy or as required by Malaysian law:

  • Active account data: retained throughout the period your account is active and in use.
  • Financial transaction data: retained for a minimum of 7 years in accordance with Malaysian legal and taxation requirements.
  • KYC records: retained for a minimum of 5 years after account closure in accordance with anti-money laundering legislation.
  • Customer support communication logs: retained for 2 years for reference and dispute resolution purposes.
  • Anonymous analytics data: may be retained longer as they do not contain personally identifiable information.

When your personal data is no longer needed and there is no legal obligation to retain it, winbox2 will delete or anonymize that data in a secure manner.

9 Your Rights Over Personal Data

As a winbox2 member and an individual protected under Malaysia's PDPA 2010, you have the following rights regarding your personal data:

Right of Access

You have the right to request and obtain a copy of the personal data winbox2 holds about you. This request will be processed within 21 business days.

Right to Rectification

If your personal data in the winbox2 system is inaccurate or incomplete, you have the right to request a correction. You may also update certain information directly in your account.

Right to Erasure

In certain circumstances, you may request deletion of your personal data. However, this right is subject to winbox2's legal obligations to retain certain records.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time without providing any reason.

Right to Data Portability

You have the right to receive the personal data you have provided to winbox2 in a machine-readable format for transfer to another platform if needed.

To exercise any of the above rights, please contact winbox2 customer service team via live chat or email at [email protected]. We will respond within 21 business days from the date we receive your request.

10 Child Protection

Winbox2 is a platform exclusively for adult users aged 18 and above. We do not knowingly collect or process personal data of individuals under 18. Should we discover that personal data of minors has been collected without valid consent, we will take immediate steps to delete such information and close the relevant account.

If you as a parent or guardian discover that your underage child has accessed or registered on the winbox2 platform, please contact us immediately at [email protected] so we can take appropriate action.

11 Amendments to This Privacy Policy

Winbox2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technology, or legal requirements. Any material changes will be communicated to you via:

  • In-platform notification on winbox2 upon your next login.
  • Email to the address registered in your account.
  • Announcement on the winbox2.win homepage.

The "Last updated" date at the top of this page will always reflect the date of the most recent amendment. Continued use of the winbox2 platform after any amendment takes effect constitutes your acceptance of the updated policy.

12 Contact Us About Privacy

If you have any questions, concerns, or complaints about how winbox2 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

  • Privacy Email: [email protected] (with subject: "Privacy Inquiry")
  • Live Chat: available 24/7 within the winbox2 platform or app
  • Response Time: we are committed to responding within 3 working days for general inquiries and 21 working days for formal data rights requests

If you are not satisfied with our response to your privacy complaint, you have the right to refer the matter to the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

Privacy Protected, Entertainment Without Worry — Join Winbox2 Now

With bank-grade data protection and a full commitment to member privacy, winbox2 is the safe choice for the best online entertainment experience in Malaysia.

Bahasa Melayu