Winbox77 Privacy Policy for Malaysian Players

01Definitions

Throughout this Privacy Policy the following terms carry the meanings set out below unless the context requires a different reading.

• Personal Data — any information that identifies or could identify a living individual, directly or indirectly.
• Processing — any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• Data Controller — Winbox77, which determines the purposes and means of processing personal data collected through the platform.
• Player or User — an eligible adult who registers for and uses a Winbox77 account.
• Third-Party Processor — a service provider engaged by Winbox77 to process personal data on its behalf under contractual obligations.
• KYC — Know Your Customer; the identity-verification process required to confirm account eligibility and enable financial transactions.

02Personal Data Winbox77 Collects

Winbox77 collects personal data through registration forms, identity verification submissions, deposit and withdrawal transactions, platform activity, device and browser information, support communications, and voluntary account-profile updates.

03Purposes of Data Processing

Winbox77 uses personal data only for defined, legitimate purposes. The primary purposes for which player data is processed include the following.

Account Administration

Registration, login management, account settings, support requests, and the maintenance of accurate player records require the use of identity and contact information.

Identity Verification and KYC Compliance

Winbox77 is obliged to verify the age, identity, and source of funds for players who deposit or withdraw. This process uses identity documents and address evidence to confirm eligibility and reduce fraud.

Payment Processing

MYR deposits and withdrawals via recognised Malaysian payment methods — such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong — require the transfer of relevant payment and identity data to authorised third-party processors.

Security and Fraud Prevention

Winbox77 monitors activity data and device information to detect suspicious login behaviour, unauthorised account access, payment fraud, account collusion, and other security risks that could harm players or the platform.

Responsible Gambling

Activity and transaction data is used to identify patterns that may suggest a player is experiencing difficulties and to implement account limits, cooling-off periods, or self-exclusion where applicable.

Legal and Regulatory Obligations

Winbox77 may be required to retain certain transaction or identity records for audit, anti-money-laundering, or other regulatory purposes for defined periods.

04Legal Basis for Processing

Each category of processing by Winbox77 is supported by one or more of the following recognised legal bases.

• Contractual Necessity — processing required to fulfil the player agreement, including account access, payment handling, and KYC.
• Legal Obligation — processing required to comply with applicable anti-money-laundering, age-verification, or record-keeping requirements.
• Legitimate Interests — processing carried out for security monitoring, fraud prevention, platform improvement, and responsible gambling where those interests are not overridden by player rights.
• Consent — where specific processing (such as optional communications) is based on consent, it will be clearly identified and can be withdrawn at any time.

05Data Sharing and Third-Party Processors

Winbox77 does not sell, lease, or transfer personal data to independent third parties for their own marketing use. Personal data may be shared with carefully selected categories of third-party processors who act only on Winbox77's instructions and are subject to appropriate data-protection obligations.

• Payment Service Providers — to facilitate MYR deposits and withdrawals through supported Malaysian payment channels.
• Identity Verification Services — to assist with document authentication and age confirmation during KYC.
• Platform Security Services — to monitor for fraud, account takeover, or technical threats.
• Customer Support Tools — to manage live chat, email, and support ticket communications.
• Legal or Regulatory Authorities — where disclosure is required by applicable law, court order, or regulatory instruction.

When sharing is necessary, Winbox77 limits the data transferred to the minimum required for the specific purpose and requires processors to maintain appropriate security standards.

06Cookies and Automated Data Collection

Winbox77 uses cookies and similar technologies to maintain login sessions, recognise returning devices, support platform security, and understand how Malaysian players interact with different sections of the website.

Cookies are small data files placed on your device. Session cookies are deleted when the browser is closed. Persistent cookies remain for a defined period to support preferences and security. Players can adjust their browser settings to restrict or delete cookies, but doing so may affect platform functionality including login persistence and session management.

Winbox77 does not use cookies to track behaviour on third-party websites or serve third-party advertising.

07User Rights over Personal Data

Subject to applicable law and any overriding legal obligations held by Winbox77, every registered player holds the following rights in relation to their personal data.

To exercise any of these rights, contact the Winbox77 support team via live chat or the plain-text email address listed in the footer. Winbox77 will acknowledge the request and respond within a reasonable period, which may depend on the complexity of the request and any applicable obligations.

08Data Retention

Winbox77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, comply with legal obligations, resolve disputes, or enforce agreements.

• Active account data is retained while the account remains open and active.
• Transaction and payment records may be retained for defined regulatory periods after the last transaction.
• Identity verification documents may be held for the period required by applicable anti-money-laundering or record-keeping requirements.
• Support communication records are retained for a reasonable period to support dispute resolution.
• Data collected during a self-exclusion period is retained for the duration necessary to enforce that exclusion effectively.

When retention periods expire and no overriding obligation exists, Winbox77 will delete or anonymise the relevant personal data in a secure manner.

09Data Security Measures

Winbox77 implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include encrypted data transmission, access controls, authentication requirements, and periodic security reviews.

Players also have an important role in account security. You must keep your Winbox77 login credentials, two-factor authentication codes, and device access confidential. If you believe your account has been accessed without authorisation, you should notify Winbox77 support immediately. Winbox77 cannot guarantee absolute security against all possible threats, but commits to taking reasonable and proportionate precautions.

10Minors and Age Restriction

Winbox77 is strictly for adults aged 21 and above. Winbox77 does not knowingly collect personal data from any person under 21 years of age. Where Winbox77 reasonably believes an account was created by a minor, the account will be closed, deposits will be returned where practicable, and any related data will be handled in accordance with this policy and applicable law.

If you believe a minor has accessed Winbox77, please contact support immediately using the plain-text email address or live chat shown on this page.

11Policy Updates and Notifications

Winbox77 may revise this Privacy Policy to reflect changes in services, payment methods, applicable data-protection standards, or operational practices. Revisions will be published on this page with an updated effective date. Where a change is material, Winbox77 may notify active players via the email address registered on their account or through a visible notice on the platform.

Continued use of Winbox77 following the publication of a revised Privacy Policy constitutes acceptance of that revision. If you object to any change, you should stop using Winbox77 and may request account closure through support.

12Contact and Privacy Enquiries

Questions, access requests, rectification requests, erasure requests, or concerns about how Winbox77 processes your personal data should be submitted to the Winbox77 support team. Support is available through the live chat facility on the platform or via the plain-text email address displayed in the footer of this page.

Please include your registered username, a description of your request or concern, and any relevant transaction references so that Winbox77 can respond accurately. Identity confirmation may be required before Winbox77 can discuss or action requests relating to a specific account.

For additional context on how personal data is protected in the context of gaming, you may also review the Responsible Gambling and Terms & Conditions pages.