Official Privacy Policy

Privacy Policy Winbax — How We Protect Malaysian Players' Personal Data

Your privacy is not merely a legal formality to us. winbax has built a robust data protection system because we believe that player trust depends on how we handle the information entrusted to us. This document clearly explains what we collect, why we collect it, and how it is protected.

Updated: January 2026

Winbax's Six Data Protection Principles

Winbax complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. Here is how we put that into practice every day.

End-to-End Encryption

All data transmitted between your device and winbax servers is protected with 256-bit SSL encryption. This means your information cannot be read even if it is intercepted during transmission.

Minimum Data Collection

Winbax only collects data that is strictly necessary to provide our services. We do not collect irrelevant information solely for third-party marketing purposes.

No Sale of Data to Third Parties

Winbax never sells or rents players' personal data to any third party for commercial purposes. Your data is used solely to operate the platform and improve our services.

Full Control in Your Hands

You have the right to access, correct, request a copy of, or delete your personal data at any time. These rights can be exercised through your account settings or by contacting customer support.

Secure Data Storage

Your data is stored on servers protected by strict access controls, continuous monitoring, and regular backups. Internal access to player data within the company is restricted and audited.

Timely Breach Notification

In the event of any data breach affecting your information, winbax is committed to notifying you within the timeframe required by applicable data protection laws.

Important Note: This Privacy Policy explains how winbax ("we", "Platform") collects, uses, stores, and protects your personal information ("player", "you"). By using the winbax platform, you agree to the practices described in this policy.

1 Introduction

Winbax takes our responsibility to every player's privacy seriously. We understand that when you register and use our platform, you are entrusting us with important personal information. That trust is not something we take lightly.

This Privacy Policy details how we handle your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. It applies to all users of the winbax platform, including our website, mobile app, and all other service channels.

We encourage you to read this policy carefully. If you have any questions after doing so, the winbax customer support team is available to assist you via 24/7 Live Chat.

2 Personal Data We Collect

Winbax only collects data needed to deliver safe, fair, and high-quality services. Below are the categories of data we collect and their purposes:

Data Category Information Type Main Purpose
Identity Data Full name, date of birth, MyKad/passport number Identity verification (KYC), legal compliance
Contact Data Phone number, email address, mailing address Account communications, security notices
Financial Data Payment method details, transaction records Processing deposits and withdrawals
Usage Data Login, game records, wagering history Account security, fraud detection
Technical Data IP address, device type, web browser, session cookies Platform security, performance analytics
Communications Data Customer support chat records, emails Service improvement, complaint resolution

2.1 Data You Provide Directly

This includes all information you enter during registration, KYC verification, profile completion, contacting customer support, or participating in promotions. The accuracy of this information is your responsibility, and we rely on it to ensure your account functions correctly.

2.2 Automatically Collected Data

When you use the winbax platform, our systems automatically record certain technical information such as your IP address, login time, device used, and pages visited. This data is used for security purposes and to detect suspicious activity.

3 How We Use Your Data

The data we collect is used solely for the following purposes. winbax does not use your data for any other purpose without obtaining your consent first.

  • Account management — Creating and maintaining your account, processing deposits and withdrawals, and verifying your identity.
  • Platform security — Detecting and preventing fraud, bot usage, money laundering, and other illegal activities.
  • Legal compliance — Meeting Malaysia's PDPA requirements, AML/KYC compliance, and other regulatory body obligations.
  • Service improvement — Analysing usage patterns to improve the platform's interface, performance, and user experience.
  • Service communications — Sending account notices, security updates, and important service-related information.
  • Customer Support — Resolving enquiries, complaints, and technical issues reported by players.
  • Marketing — Sending you relevant promotional offers (only with your consent, unsubscribable at any time).
Our Commitment: winbax never uses your data to make automated decisions that negatively affect you without human review, except for clear security purposes such as real-time fraud detection.

4 Data Sharing with Third Parties

Winbax does not sell, rent, or trade your personal data to any third party for their commercial purposes. However, there are limited situations where we need to share data for platform operational purposes:

4.1 Authorised Service Providers

Winbax works with carefully vetted service providers for the following purposes:

  • Payment processing — licensed banks and e-wallet operators
  • Identity verification — trusted third-party KYC services
  • Cloud infrastructure providers that comply with international security standards
  • Analytics tools to monitor platform performance (data is aggregated and anonymised)

All service providers are bound by data protection agreements that require them to handle your data to the same or higher standards that we uphold.

4.2 Legal Requirements

Winbax may be required to disclose certain data to government authorities or law enforcement when mandated by valid Malaysian law, court order, or directive from a regulatory body with jurisdiction over us. In such situations, we will disclose only the minimum data necessary.

Good to Know: winbax is not responsible for the privacy policies of third-party websites or applications you may access via links from our platform. Please review the privacy policy of each platform separately.

5 Cookies & Tracking Technologies

The winbax platform uses cookies and similar tracking technologies to enhance the user experience and ensure session security. The following are the types of cookies we use:

5.1 Essential Cookies

These cookies are required for core platform functions such as login, session management, and security. The platform will not function properly without them. You cannot opt out of these cookies as they form part of our security infrastructure.

5.2 Analytics Cookies

These cookies help us understand how players interact with the platform — which pages are visited most often, how long users spend in each section, and where technical issues tend to occur. This information is used to continuously improve the platform.

5.3 Preference Cookies

These cookies store your preferences such as interface language, display settings, and login information (if you select "Remember me"). You can delete these cookies via your browser settings without affecting core platform functionality.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the winbax platform.

6 Data Storage & Security

6.1 Where Your Data is Stored

Winbax player data is stored in data centres located in jurisdictions that comply with international data protection requirements. All data centres are equipped with high-grade physical and digital security systems, including biometric access controls, 24/7 monitoring, and intrusion detection systems.

6.2 Data Retention Period

Winbax retains your personal data for as long as your account is active. After account closure, your data will be kept for the minimum period required by financial compliance and anti-money laundering laws (typically 5–7 years). After that, data will be securely deleted.

6.3 Technical Security Measures

  • 256-bit SSL encryption for all data transmissions
  • Network segmentation between different system components
  • Regular penetration testing by independent security experts
  • Role-based access control for internal staff
  • Detailed audit logs for all access to sensitive data
  • Automatic data backups with full encryption
Security Certificate: winbax's infrastructure complies with online betting industry security standards and undergoes independent security audits on a regular basis to ensure your data protection remains up to date.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and applicable data protection laws, you have the following rights regarding the personal data we hold about you:

Right of Access

Request a copy of all personal data we hold about you, including how it is used.

Right to Rectification

Correct any inaccurate or incomplete personal data in your account.

Right to Erasure

Request deletion of your personal data, subject to any applicable legal retention requirements.

Right to Object

Object to the processing of your data for direct marketing or profile analytics purposes at any time.

Right to Portability

Obtain your personal data in a machine-readable format for transfer to another platform.

Right to Restriction

Request a restriction on data processing while we review the accuracy of your data or address your objection.

To exercise any of the above rights, contact our privacy team via Live Chat on the winbax platform or through your account settings. We will process your request within 30 days from the date of receipt.

8 Children's Data Protection

The winbax platform is exclusively for users aged 18 and above. We do not intentionally collect, store, or process any personal data from children or minors who have not reached the legal age of majority.

If we find that a minor has registered an account, we will immediately close the account, delete all collected data, and refund any deposits made. Age verification is strictly enforced as part of our KYC procedures.

If you are a parent or guardian who becomes aware that your child has registered an account on winbax without your consent, please contact our customer support immediately for prompt action.

9 Privacy Policy Amendments

Winbax reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. When we make material changes, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending a notice to your registered email address for significant changes
  • Displaying an in-platform notice for a minimum of 30 days

Continued use of the winbax platform after any amendments take effect constitutes your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account before those changes come into force.

10 Contact Our Privacy Team

If you have any questions, concerns, or wish to exercise your privacy rights, there are several ways to reach the winbax team:

  • Live Chat 24/7 — The fastest way to get an immediate response via the winbax app or website
  • Support email — [email protected] (response within 1–2 business days)
  • Account Settings Section — For data requests and privacy controls you can manage yourself

We are committed to handling every privacy-related enquiry seriously and professionally. If you feel we have not addressed your concerns satisfactorily, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

Response Time: Our privacy team aims to respond to all enquiries within 3 working days. More complex requests such as full data deletion may take up to 30 days to be completed.
Your Data is Safe with Us

Play with Peace of Mind on a Platform that Puts Your Privacy First

Winbax is not only financially secure — we also protect your data privacy to the same high standard. Register now and enjoy a truly protected gaming experience.

PDPA 2010 Compliant  ·  SSL 256-bit  ·  18+ Only

Bahasa Melayu