Privacy Policy Winbox2 – Our Commitment to Protecting Malaysian Player Data

Winbox2 collects personal data necessary to provide, manage, and improve our services to Malaysian players. We organise this data into three main categories:

The personal data we collect is used exclusively for legitimate, stated purposes. We do not use your data for any other purpose without appropriate notice and consent.

• Account Management: Creating, verifying, and managing your Winbox2 account — including identity verification, password recovery, and account security management.
• Transaction Processing: Processing deposits and withdrawals via your chosen Malaysian local payment methods, and maintaining accurate transaction records for accountability purposes.
• Service Provision: Grants you access to over 500 games on Winbox2, including slots, live casino, Blackjack, Baccarat, Roulette, and progressive jackpots.
• Service Communications: Sending important notifications related to your account – including deposit confirmations, withdrawals, account changes, and security alerts.
• Fraud Detection: Identifying and preventing fraudulent activity, money laundering, bonus abuse, and other unlawful activities on the Winbox2 platform.
• Legal Compliance: Fulfilling our legal obligations, including KYC (Know Your Customer) requirements, AML (Anti-Money Laundering) reporting, and responding to requests from lawful authorities.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need support, and enforcing limits set by the players themselves.
• Marketing (with Consent): Sending you information about relevant Winbox2 promotions, bonuses, and offers – only where you have given consent to receive marketing communications. You may withdraw this consent at any time.

Winbox2 does not sell your personal data to any party. Data sharing with third parties only occurs in limited and lawful circumstances, as described below.

• Game Providers: The minimum information required to enable your gameplay is shared with our game providers such as Evolution Gaming, Pragmatic Play, Microgaming, and others. These providers are bound by strict confidentiality agreements with Winbox2.
• Payment Processors: Transaction data is shared with Malaysia's local payment processors — including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX — solely to facilitate the secure processing of your deposits and withdrawals.
• Legal Authorities: Winbox2 may be required to disclose certain information to Malaysian government authorities, law enforcement agencies, or regulatory bodies where mandated by valid law or court order.
• Fraud Prevention Services: Certain technical data, such as IP addresses and device fingerprints, may be shared with specialist fraud prevention services to protect the Winbox2 platform and its players from malicious activity.
• Technical Infrastructure Providers: Cloud and hosting service providers that store our data are held accountable under data processing agreements that comply with international standards.

Winbox2 continuously invests in up-to-date data security infrastructure to ensure the personal information of all our Malaysian members is protected against unauthorised access, loss, or misuse.

• Encryption: All data transmitted between your device and Winbox2's servers is encrypted using TLS 1.3 with AES-256 encryption. Data stored on our servers is encrypted to the same standard.
• Access Control: Access to members' personal data within the Winbox2 organisation is restricted to staff who require it to carry out their job responsibilities. All access is logged and monitored.
• Continuous Monitoring: Winbox2's cybersecurity team monitors our platform 24 hours a day, 7 days a week to detect any suspicious activity or intrusion attempts.
• Independent Audits: Independent security audits by recognised third-party bodies are conducted quarterly to assess and strengthen Winbox2's security posture.
• Retention Period: Personal data is retained for as long as necessary for the stated purposes, or as required under Malaysian law. Data for accounts inactive for more than 5 years may be deleted following prior notification.
• Data Backup: Regular data backups are performed to ensure service continuity and to prevent data loss in the event of a technical failure.

While Winbox2 takes all reasonable steps to protect your data, no security system is perfect. You also play an important role in keeping your account safe — make sure your password is strong, unique, and not shared with anyone.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Winbox2's Privacy Policy, you hold the following rights regarding your personal data. We fully respect these rights and will handle every request with care.

• Right of Access: You are entitled to a copy of the personal data Winbox2 holds about you. Data access requests are processed within 14 business days.
• Right to Rectification: If your personal data held by Winbox2 is inaccurate or out of date, you have the right to request a correction. This can be done directly in your account settings for basic information, or via customer support for other data.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data from Winbox2's systems. Please note that some data may need to be retained for legal compliance even after a deletion request.
• Right to Restriction of Processing: You may request that Winbox2 restrict the processing of your personal data under certain circumstances, such as while a dispute regarding data accuracy is being resolved.
• Right to Object to Marketing: You may object to the use of your personal data for direct marketing purposes at any time. Such requests will be processed immediately.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to that withdrawal.

Winbox2 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage cookie settings through your web browser preferences. Please note that disabling all cookies may affect the functionality of certain parts of the Winbox2 platform.

Winbox2 strictly prohibits use of the platform by anyone under the age of 18. We do not knowingly collect, process, or store personal data of minors.

• The Winbox2 registration process requires date of birth verification, and all new members must confirm that they are at least 18 years of age.
• Our system uses a multi-stage age verification process to ensure that only legally eligible individuals are able to create an account.
• If Winbox2 discovers that data belonging to an individual under the age of 18 has been collected inadvertently, we will promptly delete that data and close the relevant account.
• Parents or guardians who suspect their child has registered on Winbox2 should contact us immediately at support@winbox2.best for prompt action.

While Winbox2 takes all reasonable precautions, we acknowledge that no system is 100% immune to cyber threats. In the highly unlikely event of a data breach, Winbox2 has clear response procedures in place to protect the interests of our members.

• Immediate Detection: Winbox2's monitoring system operates around the clock to detect any unusual activity or early signs of a data breach as quickly as possible.
• Impact Assessment: When a data breach is suspected, our security team immediately assesses the scope and potential impact of the incident on Winbox2 members.
• Notification Within 72 Hours: In line with data protection best practices, Winbox2 will notify the relevant authorities and affected members within 72 hours of a confirmed data breach.
• Mitigation Steps: Winbox2 will take immediate action to stop the breach, secure the systems, and minimise the impact on affected members — including resetting passwords and freezing accounts where necessary.
• Support for Affected Members: Members whose personal data may have been affected will receive specific guidance from Winbox2 on the steps they should take to protect themselves.

Winbox2 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. We are committed to informing members of any material changes.

• Any material changes to this Privacy Policy will be communicated to all active Winbox2 members via their registered email address or through an in-platform notification at least 7 days before the changes take effect.
• The "Last Updated" date at the top of this page always reflects the most current version of this policy. We recommend checking this page periodically for any changes.
• Continued use of the Winbox2 platform after any changes to the Privacy Policy take effect will be considered acceptance of those changes.
• For material changes that require fresh consent from you, Winbox2 will obtain your explicit consent before those changes take effect.

For any questions, concerns, or requests regarding the Privacy Policy or your personal data at Winbox2, please reach out to us through any of the channels below. Our team is available in Bahasa Melayu and will respond promptly.