Privacy Policy Win Box Malaysia – How We Protect Your Personal Data

1Introduction – Win Box's Commitment to Privacy

Win Box Malaysia takes member privacy seriously. We understand that when you share your personal information with us to register and use this online betting platform, you are placing a great deal of trust in us — and that trust is something we will never take lightly.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international industry standards. It explains in detail and with full transparency how Win Box handles every aspect of your personal data — from the moment you first visit our website through to the closure of your Win Box account.

This Privacy Policy applies to all Win Box platform users, including unregistered visitors, active registered members, and former members whose accounts have been closed. It covers all your interactions with the Win Box platform via web browser, mobile app, or any other means of access.

2Types of Personal Data Win Box Collects

Win Box collects personal data from you in several ways — directly when you register and use the platform, and automatically through tracking technologies as you browse our website. The following are the main categories of data we collect:

3How Win Box Uses Your Personal Data

Win Box uses collected personal data solely for legitimate, stated purposes. We do not use your data for any purpose unrelated to delivering the platform's services to you. The following are the primary purposes for which your data is used:

4Sharing of Personal Data with Third Parties

Win Box does not sell, rent, or share members' personal data with third parties for their own commercial purposes. However, there are limited situations where Win Box may need to share certain data with specific parties to enable the platform's services to function:

• Payment Gateway Providers: Transaction data required for processing is shared with licensed payment gateway providers such as FPX, DuitNow, and e-wallet providers (TNG, GrabPay, Boost, ShopeePay) solely for the purpose of processing your RM deposits and withdrawals. These providers are held to strict PCI-DSS security standards.
• Game Software Providers: Minimum required data may be shared with licensed game providers for the purpose of enabling access to their games through the Win Box platform.
• Regulatory Bodies & Authorities: Win Box will disclose required data to Malaysian authorities or legitimate regulatory bodies when mandated by law, court order, or valid legal process.
• Technical Service Providers: Hosting, cybersecurity, and analytics service providers working on behalf of Win Box may have limited access to certain data for strictly technical purposes — and all of them are bound by strict confidentiality agreements.

5Win Box Data Security Measures

Win Box invests heavily in security infrastructure and procedures to ensure your personal data is always protected. The following are the security layers we have in place:

• 256-Bit SSL Encryption: All communications between your device and Win Box servers are protected by 256-bit SSL encryption — the same standard used by Maybank2u and CIMB Clicks. Your data is never transmitted in unencrypted form.
• Encrypted Data Storage: Sensitive data stored in Win Box's databases — including passwords and financial information — is stored in encrypted or hashed form using modern cryptographic algorithms.
• Internal Access Controls: Access to member data at Win Box is strictly limited to staff who require it to perform their duties. All access is logged and audited on a regular basis.
• Two-Factor Authentication (2FA): Win Box supports two-factor authentication for member accounts, adding an extra layer of security to protect your account from unauthorised access.
• Regular Security Audits: Win Box's platform infrastructure and source code undergo periodic independent security audits by qualified third parties to identify and address any vulnerabilities.
• 24/7 Monitoring: Win Box's security monitoring systems operate around the clock to detect and respond to any suspicious activity or intrusion attempts.

6Cookies & Tracking Technologies

The Win Box platform uses cookies and similar tracking technologies to enhance the user experience, understand how the platform is used, and deliver relevant content. The following are the types of cookies used by Win Box:

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the Win Box platform. Win Box does not use cookies to track your activity on other websites outside our platform.

7Children's Data Protection

The Win Box platform is a service intended solely for individuals aged 18 and above. Win Box does not knowingly collect, process, or store personal data from anyone under the age of 18.

Should we discover that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child is using the Win Box platform may contact us at support@winbox-bangla.com for prompt action.

8Cross-Border Data Transfers

Win Box member personal data is stored on servers located in jurisdictions that comply with international data protection standards. Where data needs to be transferred across borders — for example, to international game software providers — Win Box ensures that:

• The recipient country or organisation provides a level of data protection that is equivalent to or higher than the standards set out under Malaysia's PDPA.
• Appropriate data transfer agreements, including standard protection clauses, are drafted and signed before any transfer takes place.
• Data transfers involve only the minimum information strictly necessary for the specified service purpose.
• Win Box members are informed of any cross-border data transfers through this Privacy Policy.

9Data Retention Period

Win Box retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required under applicable Malaysian law.

• Active Account Data: Retained for as long as your Win Box account remains active and for the required period following account closure to meet legal obligations.
• Financial Transaction Records: RM deposit and withdrawal transaction records are retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• KYC Records: Identity verification documents are retained for a minimum of 5 years following account closure to meet anti-money laundering (AML) compliance requirements.
• Communication Records: Win Box customer support communication logs are retained for 2 years for service quality and dispute resolution purposes.
• Technical Data & Logs: Access logs and technical data are retained for 12 months before being automatically deleted.

Once the retention period expires, your data will be securely deleted or anonymised using approved procedures to ensure it cannot be recovered.

10Your Personal Data Rights

As a Win Box member and data subject under Malaysia's PDPA, you have the following rights with respect to your personal data held by Win Box:

Win Box will process all data rights requests within 14 working days at no charge. For complex cases, we may require up to 30 days, and you will be informed of any such delay.

11Links to Third-Party Websites

The Win Box platform may from time to time contain links to third-party websites or services — such as sports news sites or esports tournament information. Win Box is not responsible for the privacy practices of those third-party websites.

We encourage you to read the Privacy Policy of every website you visit outside the Win Box platform. The protections set out in this Privacy Policy apply solely to the Win Box platform at winbox-bangla.com.

12Amendments to the Win Box Privacy Policy

Win Box reserves the right to amend this Privacy Policy from time to time to reflect changes in data handling practices, new legal requirements, or new features added to the platform. When material amendments are made, we will:

• Displaying a prominent notice on the Win Box platform's main page at least 14 days before any amendments take effect.
• Sending email notifications to all active Win Box members whenever amendments involve material changes to your privacy rights.
• Updating the "Last Updated" date at the top of this document to reflect the date of the most recent amendment.

Continued use of the Win Box platform after any amendments to the Privacy Policy take effect will be considered acceptance of the revised version. We encourage you to review this Privacy Policy page periodically to stay informed of any updates.

13Contact Win Box Regarding Privacy

If you have any questions, concerns, or requests regarding this Win Box Privacy Policy or the way we handle your personal data, please contact us through the following channels:

• Privacy Email: support@winbox-bangla.com — use the subject line "Privacy Enquiry" for faster handling.
• Live Chat: Via the Win Box platform — our support team operates 24/7 and can route privacy-related enquiries to the appropriate officer.
• Response Time: Win Box is committed to responding to all privacy-related enquiries within 3 business days and resolving formal requests within 14 business days.

We welcome your feedback and enquiries — every communication helps us improve how Win Box protects the privacy of our Malaysian members.