Privacy Policy — Winbox2026

1 Introduction

Winbox2026 ("the Platform", "we", "us", "our") is committed to protecting and respecting the privacy of all players who register, access, and use the services available at winbox2026.cam. This Privacy Policy ("Policy") sets out in clear terms the categories of personal data we collect, the purposes for which that data is processed, the legal bases that justify such processing, your rights as a data subject, and the safeguards we apply to protect your information.

This Policy applies to all players who interact with the Winbox2026 platform, including individuals accessing the site from Malaysia and other jurisdictions where the platform is available. It applies to personal data collected through account registration, gameplay, payment transactions, customer support interactions, and platform browsing activity.

Winbox2026 may update this Policy from time to time to reflect changes in legal requirements, our operational practices, or the services we offer. The version bearing the most recent "Last Updated" date at the top of this page represents the current governing Policy.

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"). An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, account number, location data, or online identifier.
• "Processing" means any operation performed on personal data, whether or not by automated means, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means Winbox2026, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of Winbox2026, under a binding contractual agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication of your wishes by which you signify agreement to the processing of your personal data.
• "KYC" means Know Your Customer — the identity verification process required before withdrawals are processed or where otherwise mandated by our licensing obligations.
• "Cookie" means a small text file placed on your device by the Platform when you browse the website, used to store session information, preferences, and analytical data.
• "Malaysian Player" means any individual who registers or accesses the Winbox2026 platform while located in Malaysia.

3 Categories of Personal Data We Collect

Winbox2026 collects and processes the following categories of personal data, depending on the nature of your interaction with the Platform:

4 How We Collect Your Personal Data

Winbox2026 collects personal data through the following channels and methods:

4.1 Direct Collection

Data you provide directly when registering an account, completing your player profile, submitting KYC documents, making deposits or withdrawal requests, contacting our customer support team via live chat or email, and participating in promotions or surveys.

4.2 Automated Collection

Technical and usage data collected automatically when you access and interact with the Platform, including through browser cookies, server log files, pixel tags, and session analytics tools. This data is collected to ensure platform functionality, detect fraudulent activity, and improve the player experience.

4.3 Third-Party Sources

In limited circumstances, Winbox2026 may receive personal data from third-party sources, including identity verification service providers (for KYC purposes), payment processors (for transaction confirmation), fraud prevention agencies, and our international licensing authority (for regulatory compliance reporting). All third-party data sources are subject to contractual data protection obligations.

5 Purposes of Data Processing

Winbox2026 processes your personal data for the following specific, legitimate purposes:

• Account Management: Creating, maintaining, and administering your player account, including processing login authentication and account security.
• Payment Processing: Executing and reconciling deposit and withdrawal transactions via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels.
• KYC & Identity Verification: Verifying your identity and age (21+ requirement) in compliance with our international licensing obligations and anti-money laundering (AML) standards.
• Responsible Gambling: Monitoring gameplay patterns to identify players who may be exhibiting signs of problem gambling, and administering deposit limits, cool-off periods, and self-exclusion requests.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, and platform abuse, including the use of automated detection systems.
• Regulatory Compliance: Meeting our obligations to our international gaming regulator, including transaction reporting and player fund protection requirements.
• Customer Support: Responding to your queries, resolving disputes, and improving the quality of our support services based on interaction history.
• Platform Improvement: Analysing aggregated usage data to improve game offerings, platform performance, and the overall player experience.
• Marketing Communications: Sending promotional emails or in-platform notifications about bonuses, new games, or sports betting markets, where you have provided explicit consent to receive such communications. You may opt out at any time.

6 Legal Basis for Processing

Winbox2026 processes personal data only where a valid legal basis exists. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to perform our obligations under the account agreement, including managing your account, processing payments, and providing gaming services.
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC/AML obligations, tax reporting, and regulatory reporting to our licensing authority.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and platform analytics, where these interests are not overridden by your privacy rights.
• Consent: Processing for non-essential marketing communications and certain cookie categories, where you have given explicit, freely-given consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Third Parties

7.1 Payment Processors

To execute deposit and withdrawal transactions, Winbox2026 shares relevant financial data with authorised payment processors, including Payments Network Malaysia Sdn Bhd (FPX), PayNet (DuitNow), and the respective operators of Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processing partners. Data shared is limited to what is strictly necessary to complete the transaction.

7.2 Identity Verification Services

For the purposes of KYC and age verification (21+ enforcement), Winbox2026 may share identity documents and data with authorised third-party identity verification service providers. These providers are bound by data processing agreements that prohibit any use of your data beyond the stated verification purpose.

7.3 Regulatory & Legal Authorities

Winbox2026 may disclose personal data to competent legal, regulatory, or law enforcement authorities where required by applicable law, a court order, or our international gaming licensing authority's mandatory reporting requirements. We will notify you of any such disclosure to the extent permitted by law.

7.4 No Data Sales

Winbox2026 does not sell, rent, trade, or otherwise transfer your personal data to any third-party advertisers, data brokers, or marketing agencies. Any sharing of data for marketing purposes is subject to your explicit consent and can be revoked at any time.

8 Cookies & Tracking Technologies

Winbox2026 uses cookies and similar tracking technologies to ensure the proper functioning of the Platform, to maintain your session while logged in, and to collect analytical data that helps us improve the player experience.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These enable login sessions, maintain your account state, and support payment process flows. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Store your preferences such as language settings and display options to personalise your experience.
• Analytical Cookies: Collect aggregated, anonymised information about how players use the Platform, including pages visited and features used, to help us improve performance. These require your consent.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and account takeover attempts.

8.2 Managing Cookies

You may manage non-essential cookie preferences through your browser settings or the cookie preference centre available on the Platform. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including logging into your account.

9 Data Retention

Winbox2026 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with our legal, regulatory, and contractual obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, to meet regulatory and legal retention requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with standard financial record-keeping requirements applicable under our international licensing framework.
• KYC Documents: Retained for five (5) years following the end of the account relationship, or longer where required by applicable law or ongoing regulatory proceedings.
• Customer Support Records: Retained for three (3) years from the date of the interaction, to enable resolution of any delayed disputes or regulatory reviews.
• Marketing Consent Records: Retained for as long as necessary to demonstrate the existence and withdrawal of consent, and for no longer than three (3) years after consent is withdrawn.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10 Data Security

Winbox2026 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, destruction, or alteration. Our security infrastructure includes:

• 256-bit SSL (Secure Socket Layer) encryption on all data transmitted between your device and our servers.
• Encryption of sensitive data at rest, including financial records and identity documents, using industry-standard encryption protocols.
• Access control systems that restrict internal access to personal data on a strict need-to-know basis.
• Regular penetration testing and security audits conducted by independent third-party security professionals.
• Two-factor authentication available to all players and enforced for all administrative system access.
• Real-time fraud monitoring systems that flag and respond to anomalous transaction and account activity.
• Secure, access-controlled storage of all KYC documents and identity verification materials.

While Winbox2026 applies rigorous security measures, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, Winbox2026 will notify affected players and, where applicable, the relevant supervisory authority, within the timeframes required by our licensing obligations.

11 Your Rights as a Data Subject

Subject to applicable law and our legitimate processing interests, you have the following rights in relation to the personal data Winbox2026 holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed. We will provide this within 30 days of a verified request.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. You may update basic account information directly through the Account Settings section of the Platform.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of your personal data for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the rights listed above, please contact Winbox2026 via live chat or at [email protected]. We may require verification of your identity before processing any data subject request to protect against unauthorised requests.

12 Children, Minors & the 21+ Requirement

Winbox2026 does not knowingly collect, process, or store personal data from individuals under the age of 21. The Platform is strictly restricted to players who are aged 21 years or older, consistent with Winbox2026's international licensing minimum age requirement for casino-style gambling activities.

During the KYC verification process, all registered accounts are required to submit government-issued proof of age. Any account discovered to belong to a person under the age of 21 will be immediately suspended, and any real-money balance refunded. All personal data associated with the account will be retained only to the extent required by law, and then securely deleted.

If you believe that a person under the age of 21 has registered or is using a Winbox2026 account, please notify us immediately at [email protected]. We treat all such reports seriously and will investigate and act promptly.

13 International Data Transfers

As an internationally licensed platform, Winbox2026 may transfer your personal data to servers or processors located outside of Malaysia. Where such international transfers occur, Winbox2026 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections applicable in your home jurisdiction.

Safeguards applied to international data transfers may include: standard contractual clauses, binding corporate rules, or reliance on adequacy decisions where applicable. Details of the specific safeguards applied to any international transfer may be requested by contacting our support team.

14 Changes to This Privacy Policy

Winbox2026 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our operational practices. Material changes — meaning those that significantly affect how your personal data is processed or your rights as a data subject — will be communicated to registered players by email or via a prominent in-platform notification at least seven (7) days before the changes take effect.

Non-material amendments, such as typographical corrections, clarifications, or updates to contact details, may take effect immediately without prior notice. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how your data is protected.

Your continued use of the Winbox2026 platform following the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the Platform and request account closure.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data subject rights, please contact Winbox2026 through the following channels. All privacy-related communications are handled by our dedicated compliance and support team.

• Live Chat: Available 24 hours a day, 7 days a week via the platform. Average first response time is under 3 minutes. Suitable for general privacy queries and urgent data concerns.
• Email: [email protected] — for formal data subject rights requests, please use email and include your registered username and a description of your request. Responses are provided within 5 business days for privacy matters.

When submitting a data subject rights request, please include: your full name as registered on the Platform, your account username, the nature of your request, and any supporting details that will help us identify the relevant data. Identity verification may be required before we process your request.