Winbox Apps Privacy Policy for Malaysian Players

Welcome to the Privacy Policy page winbox apps. This document explains how we — the operators of the winboxapps.net platform and mobile application winbox apps — collect, use, disclose, and protect your personal information when you use any of our services.

This privacy policy applies to all users of the winbox apps including website visitors, registered players, VIP members, and anyone who contacts our customer support team. It covers all the ways you interact with us — through the website, mobile app, email, live chat, or phone.

By using the winbox apps , you acknowledge that you have read and understood this privacy policy. If you do not agree with any part of this policy, please discontinue use of our platform immediately.

Winbox apps only collects data that is strictly necessary to provide you with a safe, fair, and high-quality service. The following are the categories of data we collect:

We do not collect sensitive data such as your health information, political views, or religious beliefs unless strictly necessary and with your explicit consent.

Winbox apps uses your personal data for the following purposes, and no others:

• Account Management: Creating and managing your account, processing registration, login, and the identity verification (KYC) required prior to fund withdrawals.
• Transaction Processing: Securely and efficiently processes deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks).
• Platform Security: Detecting and preventing fraud, money laundering, multi-account use, and any suspicious activity that could compromise the security of the platform or other players.
• Service Improvement: Analyzing aggregated and anonymized usage patterns to improve the gaming experience, platform speed, and customer support quality.
• Service Communications: Sending important notifications related to your account, transactions, changes to terms, or security issues that require your immediate attention.
• Relevant Marketing: With your consent, sending you information about promotions, bonuses, and special offers that may interest you based on your gaming activity.
• Legal Compliance: Fulfilling our obligations under applicable Malaysian law, including anti-money laundering (AML) reporting requirements.

We will not use your data for any other purpose without first obtaining your explicit consent. If you wish to withdraw consent for marketing purposes, you may do so at any time through your account settings or by contacting our support team.

Under Malaysia's PDPA 2010, winbox apps relies on the following legal bases to process your personal data:

• Consent: You provide explicit consent at registration and through your ongoing interactions with the platform. You may withdraw this consent at any time, with the understanding that doing so may affect our ability to provide the full range of services.
• Contract Performance: Processing necessary to fulfill our contractual obligations to you — including processing bets, paying out winnings, and managing your account.
• Legal Obligation: Processing required to comply with Malaysian law, including KYC requirements, AML reporting, and directives from competent authorities.
• Legitimate Interests: Processing for fraud prevention, network security, and service improvement purposes that do not override your fundamental rights and freedoms.

Winbox apps does not sell or disclose your personal data to third parties for their own commercial purposes. However, we may share your data with the following parties under limited and controlled circumstances:

• Payment Service Providers: Payment processors handling Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX transactions are granted limited access to only the data required to process your transaction.
• Game Software Provider: Companies providing slots, Live Casino, baccarat, poker, and e-sports games may receive session data necessary for the technical operation of those games.
• KYC Service Providers: Third-party identity verification partners who assist us in verifying player identities to meet legal compliance requirements.
• Regulatory Authorities: Malaysian government agencies, law enforcement, or regulatory bodies with lawful authority to request such information.
• Professional Consultants: Lawyers, accountants, or auditors bound by strict professional confidentiality obligations.

All third parties with whom we share your data are required to protect it to a standard no less than our own, and may only use it for the stated purposes.

Winbox apps only retains your personal data for as long as necessary for the purposes stated in this policy or as required by Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account is active and for 7 years after account closure to meet audit and legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's Anti-Money Laundering Act (AMLA) requirements.
• Technical Logs: Server logs and activity data are retained for 90 days for security purposes and technical troubleshooting.
• Support Communication Records: Retained for 2 years from the date of last interaction for reference and quality assurance purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the applicable retention period has expired, your data will be securely deleted or anonymized so that it can no longer be linked to you personally.

Winbox apps implements multiple layers of technical and organizational security to protect your personal data from unauthorized access, loss, destruction, or disclosure:

• Data Encryption in Transit: All communications between your device and our servers are protected with TLS 1.3 and 256-bit SSL encryption.
• Encryption of Stored Data: Sensitive data such as passwords and financial details are encrypted using current-generation encryption algorithms when stored in our database.
• Two-Factor Authentication (2FA): We encourage and provide two-factor authentication options for all accounts as an added layer of security.
• Internal Access Control: Only staff winbox apps who require access to your data to perform their duties are granted such access, and all access is monitored and logged.
• Regular Security Testing: Our platform undergoes regular penetration testing and security audits conducted by independent security experts.
• Incident Response Plan: We have clear procedures in place to respond to any data breach, including player notification within 72 hours.

While we take all reasonable steps to protect your data, no system is 100% secure. You also play an important role in keeping your account safe — ensure your password is strong, unique, and not shared with anyone.

Winbox apps uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core platform functions such as login, session security, and language preferences. The platform cannot function properly without them.
• Performance Cookies: Helps us understand how players use the platform — which pages are visited most and how much time is spent — so we can continually enhance the user experience.
• Functional Cookies: Saving your preferences such as language, currency, and display settings so you don't have to reconfigure them each time you log in.
• Marketing Cookies: Used (with your consent) to display relevant promotions and offers based on your gaming activity and interests.

You may manage or delete cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the winbox apps. For more information on managing cookies, refer to your web browser's help documentation.

Platform winbox apps is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that we have inadvertently collected data from a minor, we will take immediate action to:

• Deleting all data relating to that individual from our systems.
• Closing the account in question immediately.
• Refunding any deposits made, once the investigation has been completed.

If you believe a minor has registered an account on winbox apps, please contact us immediately at support@winboxapps.net with the relevant information so we can act promptly.

Winbox apps reserves the right to update or modify this privacy policy from time to time to reflect changes in our practices, legal requirements, or technology. Whenever we make material changes, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying an in-platform notice winbox apps notifying you of those changes.
• Sending a notification email to your registered address if the changes are significant and require action from you.

Continued use of the winbox apps after an updated privacy policy takes effect will be considered your acceptance of the revised policy. It is your responsibility to review this page periodically.