winboxlogin | Privacy Policy and Personal Data Protection

1. Information We Collect 2. How We Use Your Data 3. Legal Basis for Processing 4. Data Sharing & Disclosure 5. Data Security 6. Cookies & Tracking Technologies 7. Data Retention Period 8. Your Rights as a User 9. Privacy Policy Amendments 10. Contact Us

1Information We Collect

Winboxlogin collects various categories of personal information to ensure our platform operates safely, efficiently, and in line with each player's needs. Data collection is carried out transparently and only for the purposes stated in this policy.

Information you provide directly:

Full name as shown on your official Malaysian identification document.
Date of birth for age verification purposes and compliance with legal requirements.
An active Malaysian mobile number for account verification and important communications.
A valid email address for transaction notifications, promotions, and service communications.
Passwords are stored in hashed format using the latest encryption algorithms — we never store passwords in plain text.
KYC documents including a copy of your MyKad or passport, proof of address, and proof of ownership of your payment method.
Financial information such as bank account numbers, digital wallet details, or cryptocurrency wallet addresses for processing deposits and withdrawals.

Information collected automatically:

IP address, device type, operating system, and browser version you use.
Session data including pages visited, visit duration, in-game actions, and account settings preferences.
Geolocation data at the country and region level to ensure compliance with service area requirements.
Login and logout activity logs including timestamps and devices used.
Gaming performance data such as betting history, wins, losses, and bonus usage.

            
            We do not collect sensitive information such as biometric data, medical records, or religious beliefs unless specifically required by applicable Malaysian law.
          

2How We Use Your Personal Data

Every piece of information we collect has a clear and legitimate purpose. winboxlogin uses your personal data for the following purposes:

Purpose of Use	Data Involved	Legitimate Interest
Identity verification & KYC	Name, IC, date of birth, photo	Legal obligation
Deposit & withdrawal processing	Financial data, bank account details	Contract performance
Customer Support	Email, phone, chat logs	Customer service
Fraud detection & security	IP, activity logs, transaction patterns	Legitimate interest
Personalising your gaming experience	Game history, preferences	Legitimate interest
Promotional communications (with consent)	Email, phone number	User consent

We do not use your data to make automated decisions that materially affect your rights without human intervention. Any risk assessments carried out using your data are subject to manual review by our compliance team.

3Legal Basis for Data Processing

Every personal data processing activity at winboxlogin has a solid legal basis under Malaysia's Personal Data Protection Act (PDPA) 2010. We rely on the following bases depending on the type of data and the purpose of processing:

Contract Performance: Processing necessary to fulfil the service agreement between you and winboxlogin, including processing financial transactions and managing your account.
Legal Obligation: Processing required under Malaysian law, including KYC requirements, reporting to relevant authorities, and compliance with anti-money laundering (AML) regulations.
Legitimate Interest: Processing for fraud detection, platform security, service improvement, and usage pattern analysis that does not affect your fundamental rights.
Consent: For marketing and promotional communications, we will obtain your explicit consent. You may withdraw this consent at any time through your account settings or by contacting us.

winboxlogin always ensures a valid legal basis exists before processing any personal data. If you wish to know the specific basis for any processing activity, please contact our Data Protection Officer.

4Third-Party Data Sharing & Disclosure

Winboxlogin takes a highly cautious and limited approach to sharing players' personal data. We do not sell your data to any party for commercial purposes. However, in certain situations, your data may be shared with the following parties:

Payment Service Provider: Only the minimum necessary information is shared with registered and licensed payment processors to securely handle your deposit and withdrawal transactions.
Technical Service Provider: Server hosting companies, cloud service providers, and cybersecurity vendors that help us maintain the platform infrastructure — all bound by strict confidentiality agreements.
Regulatory Authority: When required by Malaysian law or a court order, we will disclose the necessary information to competent authorities such as Bank Negara Malaysia or law enforcement agencies.
KYC Service Provider: Licensed third-party identity verification providers help us verify your identification documents quickly and securely.

All third parties working with winboxlogin are bound by data processing agreements that require them to protect your data to the same or higher standard as our own. We do not permit third parties to use your data for their own purposes.

5Data Security Measures

Winboxlogin continuously invests in the latest security infrastructure to ensure your personal data is always protected from unauthorised access, misuse, loss, or destruction. Our key security measures include:

Data encryption in transit using TLS 1.3 protocol and encryption at rest using AES-256 for all sensitive data.
Role-based access control (RBAC) ensures only authorised staff can access player data, with every access logged in detail.
Regular security audits by independent third parties that assess system vulnerabilities and provide improvement recommendations.
A comprehensive Incident Response Programme — in the event of any data breach, you will be notified within 72 hours of us becoming aware of the incident.
Mandatory cybersecurity training for all winboxlogin staff with access to player data.
Real-time threat monitoring using a SIEM (Security Information and Event Management) system that detects unusual activity around the clock.

While we take all reasonable precautions, no digital system can guarantee 100% security at all times. We therefore encourage you to also take proactive steps such as using a strong password, not sharing your login credentials, and enabling two-factor authentication.

6Cookies & Tracking Technologies

Winboxlogin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Essential Cookies: Required for core platform operations such as login authentication, session management, and security. These cookies cannot be disabled without affecting key platform functionality.
Performance & Analytics Cookies: Helps us understand how players use the platform, frequently visited pages, and technical performance for continuous improvement.
Functional Cookies: Stores your preferences such as language, account settings, and display options to deliver a more personalised experience.
Marketing Cookies: Used with your consent to display relevant promotions. You may opt out of this type of cookie via your browser settings.

You may manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect certain functions of the winboxlogin platform. For more information on managing cookies in popular browsers, refer to your browser's help documentation.

            
            winboxlogin does not use third-party cookies for cross-site advertising purposes. Analytics data we collect through cookies is processed internally and is not shared with external advertising networks.
          

7Data Retention Period

Winboxlogin retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by Malaysian law. Our core principle is "keep only what is needed, for only as long as needed."

Active Account Data: Retained for the duration your account remains active and in use to ensure continuity of service.
Financial & Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysia's tax and financial audit legal requirements.
KYC Documents: Retained for a minimum of 5 years following account closure in accordance with applicable AML/CFT legal requirements.
Support Communication Logs: Retained for 2 years for reference purposes and resolution of any disputes that may arise.
Marketing Data: Retained until you withdraw consent or close your account, whichever comes first.
Inactive Accounts: Data will be anonymised after 3 years of inactivity, with prior notice sent to the player concerned.

Once the retention period expires and there is no legal requirement to retain the data, winboxlogin will securely delete or anonymise your personal data using methods that do not allow recovery.

8Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 and international best practices, you have the following rights regarding your personal data that we hold:

Right of Access

You may request a copy of all personal data we hold about you at any time via your account settings or by contacting us directly.

Right to Rectification

If any of your information is inaccurate or outdated, you have the right to request a correction and we will update the record within 14 days.

Right to Erasure

You may request deletion of your personal data, subject to our legal obligations. Requests will be processed within 30 days.

Right to Restriction of Processing

You may request that we restrict the processing of your data in certain situations, such as while a dispute regarding data accuracy is being investigated.

Right to Data Portability

You may request your data in a machine-readable format (JSON or CSV) for transfer to another platform if you close your winboxlogin account.

Right to Object

You may object to data processing for direct marketing purposes or processing based on our legitimate interests at any time, without providing any justification.

To exercise any of the above rights, contact our Data Protection Officer via live chat on the platform or our support email. We will respond within 30 days of receiving your request.

9Amendments to This Privacy Policy

Winboxlogin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements in how we protect your information.

Any material changes — meaning changes that significantly affect how we use your data — will be communicated to you through:

In-account notifications when you log in after an amendment has been made.
A notification email will be sent to your registered email address at least 14 days before any amendment takes effect.
A notice banner displayed on the winboxlogin homepage.

Your continued use of the winboxlogin platform after the effective date of any amendment constitutes your acceptance of the updated policy. It is your responsibility to review this page periodically. The "Updated" date at the top of this policy indicates when the latest amendment was made.

10Contact Us & Data Protection Officer

If you have any questions, concerns, or complaints regarding how winboxlogin handles your personal data, we encourage you to reach out to us directly. Our team is ready to assist you at any time.

Live Chat: Available 24 hours a day, 7 days a week via the chat button at the bottom-right corner of the winboxlogin platform.
Support Email: [email protected] — we aim to respond within 48 business hours.
Data Protection Officer (DPO): For specific PDPA-related enquiries or to formally exercise your data rights, send an email to [email protected] with the subject line "Personal Data Rights Request".

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the official website of the Department of Personal Data Protection.

Winboxlogin Privacy Policy — Your Personal Data Protection

The Six Pillars of winboxlogin Data Protection

128-bit SSL Encryption

PDPA 2010 Compliant

Secure Data Storage

No Data Selling

Two-Factor Authentication

Full Control in Your Hands

Table of Contents

Related Links