Privacy & Data Security · PDPA 2010

Winbox 02 Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

Your privacy is not merely a legal obligation for us — it is the foundation of trust that defines the relationship between winbox 02 and Malaysian players. This document transparently explains how we collect, use, store, and protect your personal data.

 Last updated: 1 January 2026  ·   Applicable in Malaysia

Winbox 02's Core Privacy Principles

Data is collected solely for the stated purposes — nothing beyond that.
Data is never sold or shared with third-party advertisers.
256-bit SSL encryption for all communications and transactions.
You have the right to access, correct, and delete your data.
Fully compliant with the Personal Data Protection Act 2010 (PDPA).

This Privacy Policy ("Policy") is the official statement of winbox 02 ("we", "Platform") regarding how we handle the personal data of users ("you", "Player") who access the website winbox02.ws and all related services. This Policy has been prepared in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia. By using the winbox 02 platform, you acknowledge that you have read and understood this Privacy Policy.

1 Introduction

Winbox 02 is an online Sports Betting and casino platform serving Malaysian players. We understand that when you share personal information with us — whether during registration, when making a deposit via Touch 'n Go eWallet or DuitNow, or simply while browsing our platform — you are placing your trust in us to handle it responsibly.

That trust, we take seriously. This Privacy Policy is written in plain, straightforward language — not convoluted legal jargon — so you know exactly what happens to your information at winbox 02. Every word here reflects our actual practices, not just a formal statement.

Data Protection Officer: Winbox 02 has appointed a Data Protection Officer responsible for ensuring compliance with the PDPA 2010. For privacy-related enquiries, please contact: privacy@winbox02.ws

2 Data We Collect

Winbox 02 collects your personal data through various touchpoints — account registration, platform usage, financial transactions, and communications with our team. Below are the categories of data we collect:

Data Category Sample Information How It Is Collected
Identity Full name, date of birth, MyKad / passport number Registration form, KYC process
Relationship Malaysian phone number, email address Registration, customer service communications
Financial Payment methods (Touch 'n Go, DuitNow, GrabPay, FPX), RM transaction history Deposit & withdrawal process
Technical IP address, device type, web browser, operating system Automatically collected during platform use
Usage Game history, bets placed, login times, game preferences Automatically collected during gaming activity
Communications Live chat transcripts, emails, WhatsApp messages to support Interactions with the winbox 02 team

We does not collect sensitive data such as health information, political views, religious beliefs, or biometric data unless required by law for specific identity verification purposes.

3 How We Use Your Data

The data we collect is used solely for legitimate, clearly stated purposes. Winbox 02 uses your personal data for the following:

  • Account Management: Registering and verifying your account, enabling secure login, and managing your account settings.
  • Transaction Processing: Processing your MYR deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay or FPX; and processing withdrawals to your account.
  • Identity Verification (KYC): Verifying your identity to comply with anti-money laundering (AML) legal requirements and child protection obligations.
  • Service Provision: Enabling you to play slots, Live Casino, baccarat, blackjack, Malaysia Super League football betting, e-sports, and all other games on winbox 02.
  • Platform Security: Detecting and preventing fraud, money laundering, multi-account abuse and suspicious activity.
  • Customer Support: Answering enquiries, resolving complaints and providing technical support in Bahasa Melayu.
  • Product Improvement: Analysing usage patterns (in aggregate and anonymised form) to improve the user experience on the winbox 02 platform.
  • Marketing Communications: Sending you promotions, bonuses, and exclusive offers — only if you have given your consent to receive marketing communications.
  • Legal Compliance: Fulfilling the legal and regulatory obligations applicable to winbox 02 as a platform operator.

Marketing Controls: You may opt out of marketing communications from winbox 02 at any time by clicking the "unsubscribe" link in our emails or by contacting our support team.

4 Legal Basis for Data Processing

Winbox 02 only processes your personal data on a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Consent: For marketing and promotional communications, we rely on your explicit consent. You may withdraw this consent at any time.
  • Contract Performance: The processing required to provide winbox 02 services to you — including MYR transaction processing and account management — is carried out on a contractual basis.
  • Legitimate Interests: For platform security, fraud prevention and service improvement purposes, we rely on our legitimate interests, provided these do not override your fundamental rights and freedoms.
  • Legal Obligation: Some data processing is necessary to comply with Malaysian law, including AML (Anti-Money Laundering) regulations and financial reporting requirements.

5 Data Sharing with Third Parties

Winbox 02 does not sell, rent or trade your personal data to any third party for their own marketing purposes. However, we do share certain data with selected third parties in the following circumstances:

  • Payment Providers: Payment processors required to handle Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX transactions. They receive only the data necessary for processing transactions.
  • Game Software Providers: Game development companies (such as Evolution Gaming for Live Casino) may receive minimal technical data necessary to enable game delivery.
  • Technical Service Providers: Cloud hosting providers, cybersecurity services, and analytics tools that help us operate the winbox 02 platform securely.
  • Statutory Authorities: We may be required to disclose data to Malaysian authorities (police, Bank Negara Malaysia, MACC) where mandated by court order or applicable law.

Data Processing Agreement: All third parties that share data with winbox 02 are bound by strict data protection agreements. They are not permitted to use your data for any purpose other than what has been agreed with us.

6 Data Security

Winbox 02 continuously invests in security infrastructure to keep your personal data protected at all times. Our technical and organisational security measures include:

  • 256-bit SSL Encryption: All data transmitted between your device and winbox 02's servers is encrypted using the same industry-level encryption employed by Malaysia's leading banking institutions.
  • Two-Factor Authentication (2FA): An additional security layer for account login to prevent unauthorised access.
  • 24/7 Security Monitoring: Our cybersecurity team continuously monitors the winbox 02 platform to detect any suspicious activity or intrusion attempts.
  • Secure Data Storage: Personal data is stored on secured servers with strict access controls in place. Only authorised personnel are permitted to access users' personal data.
  • Regular Security Audits: Winbox 02 conducts regular penetration testing and security audits carried out by independent experts.
  • Incident Response Protocol: We have a clear protocol for responding to any data breach, including notifying affected users within the timeframe stipulated by the PDPA.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. You also play an important role — never share your winbox 02 account password with anyone.

7 Data Retention Period

Winbox 02 retains your personal data only for as long as necessary to fulfil the stated purposes, or as required by Malaysian law. The following are our general data retention guidelines:

  • Active Account Data: Retained for the duration your account is active on winbox 02 and for 7 years following account closure, in compliance with Malaysian financial legal requirements.
  • Financial Transaction Records (MYR): Retained for a minimum of 6 years in accordance with Malaysian AML legal requirements.
  • Communication Logs: Live chat transcripts and emails are retained for 2 years for complaint resolution and service improvement purposes.
  • Technical Data (Logs): System logs and technical data are retained for a maximum of 12 months.
  • Marketing Data: Retained for as long as you consent to receive marketing communications, or until you withdraw your consent.

Once the retention period expires, winbox 02 will securely delete or anonymise your personal data in accordance with established procedures.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by Winbox 02. You may exercise any of these rights by contacting us at privacy@winbox02.ws.

9 Cookies and Tracking Technologies

Winbox 02 uses cookies and similar technologies to enhance your experience on the platform. Here are the types of cookies we use:

Cookie Name Type Purpose Duration
wb_session Mandatory Maintaining your login session on winbox 02 Session
wb_pref Mandatory Saving your language preference and display settings 1 year
wb_analytics Analytics Platform usage analytics (anonymised data) 6 months
wb_security Mandatory CSRF protection and security validation Session
wb_mktg Preferences Personalising winbox 02 offers and promotions 30 days

You can manage your cookie settings through your web browser settings. Please note that disabling essential cookies may affect the functionality of the winbox 02 platform. Analytics and preference cookies can be disabled without affecting your gaming experience.

10 International Data Transfers

Your personal data is primarily stored and processed in Malaysia. In certain cases where data needs to be transferred outside Malaysia — for example, to game software provider servers or international cloud services — winbox 02 ensures that such transfers are carried out securely and in compliance with Malaysian law, through:

  • Data transfer agreements that require recipients to uphold data protection standards equivalent to or higher than PDPA 2010.
  • Use of recognised safeguard mechanisms such as Standard Contractual Clauses.
  • We select technology partners that hold internationally recognised data security certifications.

11 Child Protection

The winbox 02 platform is strictly for individuals aged 18 and above. We do not knowingly collect, use or store the personal data of anyone under 18. Should we discover that personal data of an individual under 18 has been collected, we will immediately take the following steps:

  • Immediately suspending the account in question while an investigation is carried out.
  • Deleting all personal data belonging to the individual concerned from our systems.
  • Returning any remaining account balance to the original payment source.

We encourage parents and guardians to use parental control software and to speak with their children about the risks of accessing online gambling platforms.

12 Amendments to This Privacy Policy

Winbox 02 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or the services we offer. You will be notified of significant amendments through:

  • An email notification will be sent to your registered address at least 14 days before any amendment takes effect.
  • A clear notice displayed on the winbox 02 platform homepage.
  • Updating the "Last updated" date at the top of this page.

Your continued use of the winbox 02 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree, you have the right to close your account and request deletion of your data.

13 Contact Our Privacy Officer

For any enquiries, requests, or complaints regarding your privacy and personal data protection at winbox 02, please contact our Data Protection Officer through the following channels:

  • Privacy Email: privacy@winbox02.ws
  • General Support Email: support@winbox02.ws
  • Live Chat: Available on the platform 24/7 — please indicate that your enquiry relates to data privacy
  • WhatsApp: Please check the latest details in the "Contact Us" section on the platform

Response Time: Winbox 02 is committed to responding to all privacy-related enquiries within 30 working days from the date of receipt. For complex complaints, we may require additional time but will keep you updated on the progress of your case.

If you are dissatisfied with how we have handled your privacy complaint, you have the right to refer the matter to Department of Personal Data Protection (JPDP) under the Ministry of Communications Malaysia.

Your Data Protection Rights at Winbox 02

As a Malaysian user, you hold the following rights under PDPA 2010 — winbox 02 respects and upholds all of them

Right of Access

You have the right to request a copy of the personal data we hold about you. Submit your request to privacy@winbox02.ws and we will respond within 30 days.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction. Contact the winbox 02 support team or update it directly in your profile settings.

Right to Erasure

Under certain circumstances, you may request that we delete your personal data. Please note that we may need to retain some data to comply with Malaysian law.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes. Simply click "unsubscribe" in our emails or contact winbox 02 support to stop marketing communications.

Right to Withdraw Consent

For consent-based processing, you may withdraw your consent at any time. Withdrawal does not affect the validity of processing carried out prior to the withdrawal.

Right to Complain

If you are dissatisfied with how winbox 02 handles your data, you may lodge a complaint with the Department of Personal Data Protection (PDPD) Malaysia.

How Winbox 02 Protects Your Privacy

Six layers of protection to keep your data secure at every level

End-to-End Encryption

All data transmitted between your device and winbox 02 servers is encrypted with 256-bit SSL. This means that even if someone intercepts the data, they cannot read it without the correct encryption key.

SSL 256-bit · TLS 1.3
KYC Identity Verification

Our rigorous KYC (Know Your Customer) process ensures that only the verified account holder can access the account and perform MYR transactions, protecting you against unauthorised use by third parties.

MyKad · KYC · 2FA
Secure Data Storage

Your personal data is stored in encrypted databases with strict access controls in place. We apply a "minimum necessary" principle — only staff who genuinely require access to specific data are permitted to do so.

Access Controls · DB Encryption
Real-Time Threat Monitoring

Winbox 02's automated threat detection system monitors the platform for suspicious activity in real time. Any anomaly detected is acted upon immediately by our security team.

IDS/IPS · SIEM · 24/7
PDPA 2010 Compliance

Winbox 02 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Our Data Protection Officer ensures that all processes and policies consistently meet current legal requirements.

PDPA 2010 · Fully Compliant
No Sale of Data to Third Parties

Winbox 02's most important commitment: we have never and will never sell, rent, or trade your personal data to advertisers or third-party marketing companies. Your data belongs to you.

Zero Data Selling · Transparent
🔐

Your Privacy Protected. Your Gaming Experience Secured.

Register with winbox 02 today and enjoy the best Sports Betting and Live Casino experience in Malaysia — with the assurance that your privacy and data security are our top priority.

Minimum deposit RM 20 · Touch 'n Go · DuitNow · GrabPay · FPX · Age 18+ only

Bahasa Melayu