Privacy Policy

1. Introduction

winbox02 ("we", "us", "our") operates the online gaming platform accessible at winbox02.net (the "Platform"). This Privacy Policy sets out how winbox02 collects, uses, discloses, stores, and protects the personal data of individuals who register an Account on, access, or interact with the winbox02 Platform.

winbox02 is committed to handling personal data in a responsible, transparent, and lawful manner. This Privacy Policy is intended to inform you clearly about what data we hold, why we hold it, and what your rights are in relation to that data. We encourage you to read this document in full.

By registering an Account on winbox02, using the Platform, or submitting any personal data to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

2. Data Controller

For the purposes of applicable data protection law, winbox02 is the data controller responsible for the personal data of Players and visitors to the Platform. winbox02 determines the purposes and means by which personal data is processed in connection with the provision of online gaming services.

All enquiries regarding the processing of personal data by winbox02 — including data access requests, correction requests, and complaints — should be directed to winbox02 using the contact details set out in Section 15 of this Policy.

3. Data We Collect

winbox02 collects the following categories of personal data from Players and Platform visitors:

• Identity Data: Full name, date of birth, nationality, and government-issued identity document details (where required for age verification or Know Your Customer purposes).
• Contact Data: Malaysian mobile number, email address, and, where provided, residential address.
• Account Data: Username, encrypted password, account registration date, and account status.
• Financial Data: Deposit and withdrawal transaction records, payment method identifiers (e.g., masked e-wallet account numbers or bank account references), and MYR balance history. winbox02 does not store full payment card numbers or banking credentials.
• Gaming Activity Data: Bet history, game session records, wagering activity across sportsbook, casino, slots, arcade, and 4D lottery products, and bonus participation records.
• Technical Data: IP address, device type, browser type and version, operating system, and session logs generated when you access the winbox02 Platform.
• Communications Data: Records of your communications with winbox02 customer support, including live chat transcripts and support ticket history.
• Responsible Gaming Data: Deposit limits, session limits, self-exclusion requests, and any other responsible gaming tool settings applied to your Account.

4. How We Collect Your Data

winbox02 collects personal data through the following means:

• Direct Provision: Data you provide when registering an Account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Technical Collection: Technical data collected automatically when you access the winbox02 Platform, including through cookies, web beacons, and server log files. See Section 9 for further detail on cookies.
• Third-Party Sources: In certain circumstances, winbox02 may receive personal data from third-party identity verification providers, payment processors, or fraud prevention services engaged to support Platform operations. Such providers are contractually bound to process data only as directed by winbox02.

5. How We Use Your Data

winbox02 uses the personal data we collect for the following purposes:

1. To register your Account on winbox02 and verify your identity and age eligibility (21+ requirement).
2. To provide online gaming services, including sportsbook, live casino, slots, arcade, and 4D lottery products.
3. To process deposits and withdrawals in Malaysian Ringgit via your selected payment method.
4. To administer winbox02 promotions and bonus offers, including verifying eligibility and enforcing wagering requirements.
5. To operate the winbox02 responsible gaming programme, including monitoring gaming patterns, enforcing deposit limits, and processing self-exclusion requests.
6. To detect, investigate, and prevent fraud, money laundering, and other illegal activities in connection with your use of the Platform.
7. To provide customer support and respond to your enquiries.
8. To send you service-related communications regarding your Account, such as transaction confirmations, security alerts, and policy updates.
9. To improve the winbox02 Platform, analyse usage patterns, and optimise the user experience for Malaysian players.
10. To comply with applicable legal and regulatory obligations.

6. Legal Basis for Processing

winbox02 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between winbox02 and the Player — including Account registration, game provision, and payment processing.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering obligations, age verification requirements, and regulatory reporting.
• Legitimate Interests: Processing carried out in pursuit of winbox02's legitimate business interests, including fraud prevention, Platform security, and responsible gaming monitoring, where such interests are not overridden by the Player's privacy rights.
• Consent: Where winbox02 relies on your consent as the legal basis for processing — such as for certain marketing communications — you may withdraw that consent at any time by contacting winbox02 as described in Section 15.

7. Data Sharing & Disclosure

winbox02 does not sell, rent, or trade your personal data to third parties. winbox02 may share personal data with the following categories of recipients only where necessary for the purposes described in this Policy:

• Payment Processors: Including Touch 'n Go eWallet, Boost, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank — to process MYR deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification services engaged to verify Player identity and age eligibility.
• Fraud Prevention & Security Providers: Services that assist winbox02 in detecting and preventing fraudulent activity on the Platform.
• IT Infrastructure Providers: Cloud hosting, database management, and technical support providers whose services underpin the operation of the winbox02 Platform.
• Legal & Regulatory Authorities: winbox02 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required or permitted by applicable law.

All third-party service providers engaged by winbox02 are subject to contractual obligations requiring them to process personal data only as directed by winbox02 and to maintain appropriate security standards.

8. Data Retention

winbox02 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including ongoing regulatory and legal obligations. The following general retention principles apply:

• Account and identity data is retained for the duration of the Account and for a minimum period following Account closure as required by applicable anti-money laundering and gaming regulations.
• Financial transaction records are retained for the period required by applicable financial record-keeping obligations.
• Gaming activity and responsible gaming data is retained to support ongoing regulatory compliance and responsible gaming obligations.
• Technical and log data is retained for a shorter period consistent with its purpose of supporting Platform security and performance monitoring.

Upon expiry of the applicable retention period, winbox02 will securely delete or anonymise personal data in accordance with its internal data management procedures.

9. Cookies & Tracking Technologies

winbox02 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help winbox02 deliver a functional, personalised, and secure experience. The following categories of cookies are used by winbox02:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including maintaining your login session and storing your Account preferences. These cookies cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how Players interact with the winbox02 Platform, enabling us to identify and address performance issues and improve the user experience.
• Functionality Cookies: Used to remember your preferences and settings — such as language and display choices — to personalise your winbox02 experience.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the winbox02 Platform. winbox02 does not use third-party advertising or tracking cookies.

10. Security Measures

winbox02 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL (Secure Sockets Layer) encryption for all data transmissions between the Player's device and the winbox02 Platform.
• Encrypted storage of sensitive Account data, including passwords, which are stored in hashed form and never accessible in plain text by winbox02 staff.
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate business need.
• Regular security audits and vulnerability assessments of the winbox02 Platform and supporting infrastructure.
• Incident response procedures to detect, report, and remediate any personal data breaches promptly.

11. Your Data Rights

Subject to applicable law, Players have the following rights in relation to their personal data held by winbox02:

• Right of Access: You may request a copy of the personal data winbox02 holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by winbox02.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to winbox02's legal and regulatory retention obligations.
• Right to Restriction: You may request that winbox02 restricts the processing of your personal data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a machine-readable copy of your personal data.
• Right to Object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact winbox02 using the details in Section 15. winbox02 will respond to all verified requests within a reasonable timeframe and in any event within the period required by applicable law.

12. Third-Party Links

The winbox02 Platform may contain references or navigational links to other pages within the winbox02 site. This Privacy Policy applies solely to the winbox02 Platform (winbox02.net) and the personal data processed by winbox02 in connection with that Platform. winbox02 is not responsible for the privacy practices of any external websites or services.

13. Children & Minors

The winbox02 Platform is strictly for adults aged 21 years and above. winbox02 does not knowingly collect personal data from persons under the age of 21. If winbox02 becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the relevant Account.

If you believe that a minor may have registered an Account on winbox02, please contact us immediately using the details in Section 15.

14. Updates to This Privacy Policy

winbox02 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. Where changes are material, winbox02 will notify Players via the Platform or by email to the address registered on the Player's Account prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent version was published. Continued use of the winbox02 Platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by winbox02, please contact us:

winbox02 endeavours to respond to all privacy-related enquiries within a reasonable timeframe. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.