winbox8 Privacy Policy

1. Data Controller

winbox8 (operating at winbox8.org) is the data controller responsible for personal data collected through the winbox8 platform. By creating an account or using the winbox8 website, you acknowledge that your personal data will be processed as described in this Privacy Policy.

If you have any questions about how winbox8 handles your personal data, you may contact our data support team at [email protected]. We endeavour to respond to all data-related enquiries within ten (10) business days.

2. Personal Data We Collect

winbox8 collects the following categories of personal data from players and platform visitors:

• Identity Data: Full legal name, date of birth, national identification number or passport number, and copies of government-issued identity documents provided during the Know Your Customer (KYC) verification process.
• Contact Data: Email address, mobile phone number, and residential address (including postcode and state, e.g., Kuala Lumpur, Selangor, Johor, Penang).
• Financial Data: Bank account details, Touch 'n Go eWallet identifiers, Boost account identifiers, deposit and withdrawal transaction records, and account balance history.
• Account Data: winbox8 username, password (stored in hashed form only), account preferences, login history, session duration, and device identifiers used to access the account.
• Gaming Data: Betting and wagering history, game session records, game preferences, and responsible gaming tool selections (e.g., deposit limits, self-exclusion requests).
• Technical Data: IP address, browser type and version, operating system, referring URLs, device type, and approximate geolocation derived from IP address.
• Communications Data: Records of your interactions with winbox8 customer support, including chat transcripts and email correspondence.

3. How We Collect Personal Data

winbox8 collects personal data through the following channels:

• Direct provision: Data you provide when registering a winbox8 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Data collected automatically when you visit the winbox8 website or use the platform, including through cookies, server logs, and analytics tools. See Section 9 (Cookies) for details.
• Third-party sources: winbox8 may receive data about you from identity verification services, payment processors, fraud prevention agencies, and our gaming software providers where this is necessary to verify your identity, process payments, or detect fraudulent activity.

4. Legal Basis for Processing

winbox8 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to open and maintain your winbox8 account, process deposits and withdrawals, and provide the gaming services you have requested.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and other obligations imposed by winbox8's licensing authority and applicable law.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming enforcement, and the improvement of winbox8's services — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where winbox8 relies on your consent for specific processing activities (such as optional marketing communications), you may withdraw that consent at any time by contacting [email protected].

5. How We Use Your Personal Data

winbox8 uses personal data for the following purposes:

1. To create, verify, and manage your winbox8 player account.
2. To process deposits and withdrawals through your selected payment methods (including Touch 'n Go eWallet, Boost, Maybank, CIMB, and Public Bank).
3. To verify your identity and age in compliance with KYC obligations and the winbox8 21+ age restriction policy.
4. To detect and prevent fraud, money laundering, and other unlawful activity on the platform.
5. To administer bonuses and promotions, including verifying eligibility and detecting abuse.
6. To enforce responsible gaming tools elected by you, including deposit limits, loss limits, and self-exclusion.
7. To provide customer support and respond to your enquiries.
8. To send you account-related communications (e.g., transaction confirmations, security alerts, policy updates). These communications are not optional as they relate to the operation of your account.
9. To send you promotional communications about winbox8 offers and products, where you have consented to receive such communications.
10. To analyse platform usage and improve the winbox8 user experience.
11. To comply with reporting obligations to winbox8's licensing authority.

6. Disclosure to Third Parties

winbox8 does not sell your personal data. winbox8 may share your personal data with the following categories of third parties, strictly as necessary for the purposes set out in this policy:

• Payment processors: Banks and e-wallet providers (including Maybank, CIMB, Public Bank, Touch 'n Go, and Boost) to process your financial transactions.
• Identity verification providers: Third-party KYC and AML services used to verify your identity and comply with regulatory obligations.
• Gaming software providers: Our certified game providers receive the minimum data necessary to operate games and maintain fair play integrity.
• Fraud prevention and security services: Agencies that assist winbox8 in detecting and preventing fraud, cheating, and money laundering.
• Regulatory and law enforcement authorities: Where winbox8 is required by law, court order, or regulatory directive to disclose personal data to a competent authority.
• Professional advisers: Lawyers, auditors, and insurers where disclosure is necessary in connection with legal proceedings or regulatory compliance.

All third-party service providers who process personal data on behalf of winbox8 are subject to contractual obligations to process that data only as instructed, maintain appropriate security standards, and not disclose it to further parties.

7. International Data Transfers

winbox8 operates infrastructure that may involve the transfer and processing of your personal data outside of Malaysia. Where personal data is transferred internationally, winbox8 ensures that appropriate safeguards are in place — including contractual protections equivalent to those required by applicable data protection law — to ensure your data receives an adequate level of protection regardless of where it is processed.

8. Data Retention

1. winbox8 retains personal data for as long as your account is active and for a period of at least five (5) years following account closure, or longer where required by applicable law or our licensing authority's record-keeping obligations.
2. Financial transaction data is retained for a minimum of five (5) years from the date of the transaction to comply with anti-money laundering legislation.
3. Customer support records are retained for a minimum of two (2) years from the date of the interaction.
4. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with winbox8's data destruction procedures.

9. Cookies and Tracking Technologies

1. winbox8 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that allow winbox8 to recognise your browser, maintain your session, and collect analytics data.
2. winbox8 uses the following categories of cookies: strictly necessary cookies (required for platform operation and your session), analytics cookies (to understand how players use the platform), and functionality cookies (to remember your preferences).
3. winbox8 does not use third-party advertising cookies or permit external advertisers to place cookies on the winbox8 platform.
4. You may control cookie settings through your browser preferences. Disabling strictly necessary cookies will impair the functionality of your winbox8 account.

10. Your Data Rights

Subject to applicable law, you have the following rights with respect to your personal data held by winbox8:

• Right of access: You may request a copy of the personal data winbox8 holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request deletion of your personal data, subject to our legal retention obligations.
• Right to restriction: You may request that winbox8 restrict processing of your data in certain circumstances.
• Right to object: You may object to processing based on winbox8's legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact [email protected]. winbox8 will respond within ten (10) business days. We may need to verify your identity before processing certain requests.

11. Security Measures

winbox8 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption for all data in transit, server-side encryption for data at rest, access controls limiting internal data access to authorised personnel, and regular security assessments of our infrastructure.

Despite these measures, no system is completely immune from security risks. In the event of a personal data breach that poses a risk to your rights and freedoms, winbox8 will notify affected players and relevant authorities in accordance with applicable legal requirements.

12. Children and Minors

winbox8 strictly enforces a minimum age of 21 years for all account holders. winbox8 does not knowingly collect personal data from individuals under 21 years of age. If winbox8 determines that personal data has been collected from a person under 21, the relevant account will be immediately closed and the data deleted. If you believe a minor has registered a winbox8 account, please contact us at [email protected] immediately.

13. Changes to This Privacy Policy

winbox8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. The "Last updated" date at the top of this page indicates when the policy was last revised. Material changes will be communicated to registered players via email or in-platform notification prior to taking effect. Continued use of the winbox8 platform following the effective date of any revision constitutes your acceptance of the updated policy.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or winbox8's handling of your personal data, please contact our support team:

Email: [email protected]
Response time: Within 10 business days
Support hours: 24 hours a day, 7 days a week