Privacy Policy winbox web —
Data Protection Malaysia Members

Winbox web collects members' personal information directly when you register, make a deposit, claim a bonus, or interact with our platform. The information collected falls into several main categories:

We only collect information that is strictly necessary for the stated purposes. winbox web does not collect sensitive information such as biometric data or medical information unless specifically required by authorities for legal compliance purposes.

The personal data you provide to winbox web is used for purposes that are lawful, transparent, and limited to the operational needs of the platform. Below is a full list of the purposes for which your data is used:

• Account Management: Creating, verifying, and maintaining your member account, including the KYC process and identity verification.
• Financial Transactions: Processing deposits, withdrawals, and bonus payments securely and accurately.
• Customer Support: Enabling our support team to assist you more effectively when you contact us.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Legal Compliance: Meeting reporting requirements to the relevant regulatory authorities.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance.
• Platform Improvement: Analyzing aggregated usage data (without identifying individuals) to improve our products and services.
• Marketing Communications: Sending promotional information and exclusive offers — only if you have consented to receive such communications.

Winbox web adheres to the principle of limited purpose: data collected for one purpose will not be used for any other unrelated purpose without your prior consent.

Winbox web does not sell, rent, or disclose members' personal data to third parties for their own commercial purposes. However, under certain limited circumstances, we may share your information with:

• Payment Service Providers: FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and partner banks — solely for processing your financial transactions.
• Game Providers: Gaming software providers that operate slots, fish shooting games, and live casino games on our platform, limited to data required for game session verification.
• Regulatory Authority: Regulatory bodies or law enforcement agencies when required by law or a valid court order.
• Technical Service Providers: Cloud, analytics, and cybersecurity service providers that help winbox web operate the platform — all subject to strict confidentiality agreements.

Winbox web invests seriously in security infrastructure to ensure your personal data is always protected. Among the security measures we have implemented:

• 256-bit SSL Encryption: All communications between your device and winbox web servers are encrypted using the latest TLS protocol.
• Two-Factor Authentication (2FA): Additional security layers are available for member accounts to prevent unauthorized access.
• 24/7 Monitoring: Our systems are continuously monitored around the clock to detect any suspicious activity or security threats.
• Regular Security Audits: Vulnerability assessments and penetration testing are conducted periodically by independent security experts.
• Data Segregation: Financial data and personal data are stored in separate environments with layered access controls.

Winbox web uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website.

We use the following types of cookies:

• Essential Cookies (Required): Required for core platform functions such as login verification, session security, and access control. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how members use the platform so we can continuously improve it — all data is collected anonymously.
• Functional Cookies: Saving your personal preferences such as language, display theme, and other settings to simplify repeat use.
• Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.

You can manage or delete cookies through your browser settings at any time. Please be aware that disabling certain cookies may affect the functionality of the winbox web platform.

Winbox web retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as long as required by applicable law, whichever is longer.

• Active Account Data: Retained for the duration your account is active and for a period of no less than 5 years after account closure, in accordance with anti-money laundering legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with accounting and financial legislation.
• Support Communication Log: Retained for 2 years from the date of interaction for quality control and reference purposes.
• Technical Log Data: Access and security logs are retained for 90 days and then automatically deleted.

Once the retention period expires, your data will be securely deleted or anonymised using methods that meet industry standards.

As a winbox web member, you have the following rights regarding the personal data we hold. These rights may be exercised by contacting our support team:

• Right of Access: You have the right to know what personal data we hold about you and to request a copy of it.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct it.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data — subject to any legal obligations that prevent such deletion.
• Right to Restrict Processing: You may request that we stop or restrict the processing of your data in certain circumstances.
• Right to Object to Marketing: You may object to the use of your data for direct marketing purposes at any time by contacting us or clicking the "unsubscribe" link in any marketing email.
• Right to Data Portability: You may request that your data be provided to you in a machine-readable format.

Winbox web is committed to processing data rights requests within a reasonable timeframe, no later than 30 calendar days after the request is received.

The winbox web platform is exclusively for users aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.

Should we discover that personal data of an individual under the age of 18 has been collected without our knowledge, winbox web will take immediate steps to:

• Deleting all personal data related to that individual from our systems.
• Closing the relevant account immediately.
• Refunding any deposits made, where applicable.

Parents or guardians who suspect their child has registered on winbox web are urged to contact our support team immediately so that appropriate action can be taken.

The winbox web platform may contain links to third-party websites or services related to gaming or financial services. Please be aware that:

• Winbox web is not responsible for the privacy practices of those third-party websites.
• This Privacy Policy applies solely to the winbox web platform and not to any third-party websites.
• We encourage you to read the privacy policy of every third-party website you visit.

All game and payment providers integrated with winbox web are selected based on strict security and privacy standards; however, use of their services remains subject to their respective privacy policies.

Winbox web reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform operations.

When significant changes occur, we will notify you via:

• In-app or winbox web website notifications.
• Email to your registered email address, for changes that materially affect your privacy rights.

The "Updated" date at the top of this document indicates the most recent date this Privacy Policy was reviewed. Your continued use of the winbox web platform after any changes take effect will be considered your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact the winbox web Data Privacy Officer through the following channels:

Our team will process privacy-related requests within no more than 30 days from the date the request is received. For urgent account security issues, please contact our live chat for an immediate response.