Privacy Policy Winbox 02 –
Malaysian Player Data Protection

This Privacy Policy ("Policy") is issued by Winbox 02 and applies to all users who access or use our platform, including the website winbox02.biz, mobile application (if any), and all related services. This Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information.

For the purposes of this Policy, there are several key terms you should be familiar with:

• "Personal Data" – Any information that can be used to identify you, directly or indirectly, including your name, MyKad number, phone number, email address, and financial details.
• "Processing" – Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• "Third Party" – Any individual or entity other than yourself and Winbox 02, including payment service providers, game providers, and regulatory authorities.
• "KYC (Know Your Customer)" – The identity verification process required to comply with anti-money laundering regulations.

Winbox 02 collects your personal data through three main channels: information you provide directly during registration or use, data generated automatically as you use the platform, and information we receive from legitimate third parties such as payment providers.

The personal data we collect is used for clear and lawful purposes. Below is a detailed breakdown of how Winbox 02 uses your information:

• Account Management: Creating and managing your account, verifying your identity, processing logins, and keeping your Winbox 02 account secure.
• Financial Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u / CIMB Clicks), as well as handling your winnings withdrawals.
• Gaming Services Provision: Giving you access to all games — live baccarat, roulette, slots, lottery, Malaysia Super League and EPL Sports Betting, badminton, and e-sports.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Customer Support: Processing and responding to your enquiries, complaints, and support requests via live chat, email, and WhatsApp.
• Relevant Marketing: Sending promotional information, bonus offers, and service updates – only if you have opted in to receive them.
• Legal Compliance: Meeting legal obligations including KYC, reporting to relevant authorities, and retaining records in accordance with statutory requirements.

Winbox 02 does not sell your personal data to any party. However, in certain circumstances necessary for the provision of our services, your data may be shared with the following parties:

• Licensed Payment Providers: Required transaction information is shared solely with DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX-processing banks for the purpose of processing your financial transactions.
• Game Providers: Third-party game providers offering baccarat, roulette, slots, and Live Casino games may receive the minimum game data required to ensure a seamless gaming experience.
• Government Authorities: Where required by law, court order, or directive from a competent authority, Winbox 02 will disclose the necessary data.
• IT Service Providers: Companies providing technical infrastructure such as server hosting, security analytics, and cloud services, governed by strict data protection agreements.
• Not shared: Third-party marketing companies, data brokers, external advertisers, or any party with no legitimate need to access your data.

All third-party service providers who receive Winbox 02 user data are required to sign data protection agreements obligating them to safeguard your information to standards at least equivalent to those of Winbox 02.

Winbox 02 invests heavily in security infrastructure to ensure your personal and financial data is protected at all times. The following are the key security layers we employ:

• Data-at-Rest Encryption: All data stored in our databases is encrypted using AES-256, ensuring it remains unreadable even in the event of a physical breach.
• Data-in-Transit Encryption: TLS 1.3 protocol is applied to all communications between your device and Winbox 02 servers, including all DuitNow, GrabPay, and other e-wallet transactions.
• Internal Access Controls: Access to user data within the Winbox 02 organisation is restricted to staff who require it, supported by comprehensive audit logs.
• 24/7 Monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) monitor Winbox 02 platform traffic around the clock to detect suspicious activity.
• Regular Security Testing: Penetration testing and security audits are conducted periodically by independent parties to ensure no vulnerabilities go unaddressed.

Winbox 02 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required under Malaysian law. The general retention schedule is as follows:

Once the retention period expires, your data will be securely deleted or anonymised in a manner that makes re-identification impossible.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Winbox 02's policies, you have the following rights regarding your personal data. All requests may be submitted to privacy@winbox02.biz and will be processed within 14 business days:

Winbox 02 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website.

You can manage cookies through your web browser settings at any time. However, disabling essential cookies may prevent certain Winbox 02 platform features from working properly.

In certain circumstances, your personal data may be stored or processed on servers located outside Malaysia — for example, when international game providers or cloud infrastructure providers we use operate from other locations.

Winbox 02 ensures that any cross-border data transfers are carried out with adequate safeguards in place, including:

• Data transfer agreements that comply with protection standards equivalent to or higher than Malaysia's PDPA.
• Use of providers based in countries or regions with recognised data protection laws.
• Data encryption in transit to ensure security even during cross-border transfers.

The Winbox 02 platform is strictly restricted to individuals aged 18 years and above. We do not knowingly collect or process personal data of children or individuals under 18 years of age.

If you believe that someone under the age of 18 has registered on Winbox 02 or that their data has been collected without parental or guardian knowledge, please contact us immediately at privacy@winbox02.biz. We will take prompt action to verify and delete the relevant data and close the account.

Winbox 02 reserves the right to review and amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When material changes occur, we will:

• Notifying all members via email or in-platform notification at least 7 days before the changes take effect.
• Updating the "Last Updated" date at the top of this document.
• Maintaining an archive of previous versions of this Policy, available upon request.

Continued use of the Winbox 02 platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with the updated Policy, you may close your account and request data deletion before the effective date.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Winbox 02 handles your personal data, please contact our Data Protection Officer through the following channels:

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority in Malaysia.