Official Document

Privacy Policy winbox1

winbox1 respects the privacy of every player and is committed to protecting your personal data. This policy explains in detail how we collect, process, store and protect your information.

Effective Date: 1 January 2026

Malay and English

International Licensing

Data Protection Principles

Our Commitment to Your Privacy

Six core principles that guide how winbox1 manages players' personal data.

Layered Data Security

Your personal data is encrypted using SSL/TLS protocols and stored on servers protected by multiple layers of security. Internal access is restricted to authorised personnel only.

Privacy by Design

winbox1 applies a privacy-by-design approach from the system development stage. We only collect data that is genuinely necessary for clear and legitimate purposes, without excessive collection.

Full Control in Your Hands

You have the right to access, correct, transfer or request deletion of your personal data at any time. Requests are handled through our customer service, available 24/7.

Protection from Third Parties

winbox1 does not sell players' personal data to third parties for marketing purposes. Data is only shared with partners required for platform operations and is subject to confidentiality agreements.

Full Transparency

We inform players about changes to the privacy policy proactively via email or in-account notices. This document is updated regularly and amendment dates are clearly included.

Clear Retention Periods

Personal data is kept only for the period required by law or legitimate business purposes. After that period, data is deleted or anonymised in accordance with established procedures.

Contents

Information Collected
Purpose of Data Collection
Basis for Data Processing
Information Sharing
Cookies and Tracking Technologies
Information Security
Your Rights
Children's Data
International Data Transfers
Policy Changes
Contact Us

Current Version: 3.1
Updated: 1 Jan 2026

This Privacy Policy outlines winbox1's practices and procedures regarding the collection, use, disclosure and protection of personal information provided by players and visitors to our website at winbox1.onl. By using our platform, you agree to the terms stated here. Please read this policy carefully before registering or using any of our services.

ⓘ Important Note: This Privacy Policy forms part of winbox1's Terms & Conditions. Continued use of this platform after any amendment is published means you accept the updated terms.

1. Information Collected

In operating a responsible online gambling platform, winbox1 collects various categories of personal information from players. This collection is necessary to comply with licensing requirements, verify player identity and deliver quality service.

Information you provide directly:

Full name as stated on your MyKad or passport
Identity card number (MyKad) or passport number
Date of birth — confirmation that you are 21 years of age or above is mandatory
Current residential address including postcode and state
Active email address
Registered mobile phone number
Payment method details such as e-wallet account number or bank details
Identity verification documents uploaded during the KYC (Know Your Customer) process

Information collected automatically:

IP address and network information
Device type, operating system and web browser version
Access log data including dates, times and pages visited
Transaction records including deposits, withdrawals and betting activity
Session cookies and website performance data

2. Purpose of Data Collection

winbox1 uses the personal data collected for the following purposes:

Identity verification and KYC compliance: Ensuring every player is 21 years of age or above and verifying identity to prevent fraud and money laundering.
Account management: Creating, managing and maintaining player accounts, including processing deposits and withdrawals.
Service delivery: Allowing access to games, bonuses and platform features available.
Customer support: Processing enquiries and complaints submitted via live chat or email.
Security and fraud prevention: Identifying suspicious activity and protecting the integrity of the platform.
Marketing communications: Sending information about promotions and bonuses, subject to your consent.
Platform improvement: Analysing usage patterns to enhance the user experience.
Legal compliance: Meeting reporting obligations under the international licence held by winbox1.

3. Basis for Data Processing

winbox1 processes personal data on the following lawful bases:

Contract performance: Processing required to provide online gambling services to you.
Legal obligation: Compliance with anti-money laundering (AML), KYC and licensing regulatory requirements.
Legitimate interests: Security purposes, fraud prevention and service improvement.
Consent: For direct marketing communications, where you may withdraw consent at any time.

⚠️ Reminder: winbox1 only accepts players aged 21 and above. If we find that a user is below the required age, the account will be closed immediately and all funds returned in accordance with established procedures.

4. Information Sharing

winbox1 does not sell, rent or trade players' personal data to any third party for independent marketing purposes. However, there are limited situations where data sharing is necessary:

Payment service providers: Transaction information is shared with e-wallet providers such as Touch 'n Go, DuitNow, Boost and ShopeePay, as well as cryptocurrency platforms to process deposits and withdrawals.
Game providers: The minimum technical data required by game studios to enable access to games.
Technical service providers: Companies that assist us with hosting, cybersecurity and analytics, all bound by strict data protection agreements.
Regulatory bodies: Data is shared with licensing authorities or law enforcement when required by law.

All third parties that receive winbox1 players' personal data are required to comply with data protection standards equal to or higher than those in this policy.

5. Cookies and Tracking Technologies

winbox1 uses cookies and similar tracking technologies to improve the user experience and maintain platform security. There are several types of cookies we use:

Session cookies: Required to maintain your login status and active game session. These cookies are automatically deleted when you close your browser.
Preference cookies: Store your language settings and display preferences for ease of use.
Security cookies: Help identify unauthorised access attempts and protect your account.
Analytics cookies: Collect aggregated and anonymous usage data to help us understand how players interact with the platform.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the platform. Session cookies are required for platform use.

6. Information Security

winbox1 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction:

256-bit SSL/TLS encryption for all data transfers between your browser and our servers
Data encryption in the database using industry-recognised cryptographic algorithms
Strict role-based access controls for internal staff
Regular security audits and penetration testing
24/7 monitoring system to detect unusual activity
Comprehensive disaster recovery and data backup procedures

Although we take every reasonable step to protect your information, no security system can be guaranteed 100% secure. You are also responsible for keeping your account password confidential and not sharing your login details with anyone.

ⓘ Security Tip: Use a unique and strong password for your winbox1 account. Enable two-factor authentication if available. Never give your password to a customer service representative — our staff will never ask for your password.

7. Your Rights

As a winbox1 player, you have certain rights regarding your personal data. We are committed to making it easy for you to exercise these rights:

Right of access: You have the right to obtain a copy of the personal data we hold about you.
Right to rectification: You may request correction of inaccurate or incomplete data.
Right to erasure: In certain circumstances, you may request deletion of your personal data, subject to our legal obligations.
Right to restriction of processing: You may request that we limit how we process your data in certain situations.
Right to data portability: You may request that your data be provided in a machine-readable format.
Right to object: You may object to the processing of your personal data for certain purposes, particularly direct marketing.
Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact our support team via 24/7 live chat or email us at [email protected]. We will process your request within a reasonable timeframe.

8. Children's Data

winbox1 strictly prohibits use of the platform by individuals under the age of 21. Our platform is not designed for, and is not directed at, children or minors. We do not knowingly collect personal data from individuals who have not reached the specified age limit.

If we find that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that an underage individual has registered an account, please notify us via our support email.

9. International Data Transfers

As a platform operating under international licensing, your personal data may be stored and processed on servers located outside Malaysia. winbox1 ensures that any such data transfers are protected by appropriate safeguards, including:

Data transfer agreements incorporating recognised standard contractual clauses
Transfers only to countries or entities with an adequate level of data protection
Consistent application of technical security controls regardless of processing location

10. Policy Changes

winbox1 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service improvements. When material changes are made, we will:

Update the "Effective Date" at the top of this document
Send a notification by email to the address registered in your account
Display a notice in your account upon your next login

Continued use of the winbox1 platform after changes are published will be considered acceptance of the updated terms. If you do not agree with the changes, you should stop using the platform and contact us to close your account.

11. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data, please contact our privacy team:

Email: [email protected]
Live Chat: Available 24 hours a day, 7 days a week via the winbox1 platform
Service languages: Malay and English

We aim to respond to all privacy-related enquiries thoroughly and take your feedback seriously.

FAQ

Privacy-Related Enquiries

Answers to questions frequently asked by winbox1 players regarding personal data protection.

winbox1 collects information you provide during registration — including your full name, MyKad or passport number, date of birth, email address, mobile phone number and payment details. We also automatically record technical data such as IP address, device type and transaction records for security and licensing compliance purposes. All of this data collection is necessary to verify your identity and confirm that you meet the minimum age requirement of 21 years.

No. winbox1 does not sell, rent or transfer players' personal data to any third party for marketing or commercial gain. Data is only shared with payment service providers required to process your transactions, game providers and regulatory bodies where required by law. All such third parties are bound by strict data protection agreements.

You can submit a data access or deletion request through our 24/7 live chat or by emailing the winbox1 support team. Requests will be processed within a reasonable timeframe. Please note that deletion requests may be limited by our legal obligation to retain transaction records and KYC information for periods specified by the regulator.

Retention periods depend on the type of data and its purpose. Active account data is kept for as long as your account remains active. Transaction records and KYC information are retained for the period required by licensing and anti-money laundering laws, which is typically several years after account closure. Marketing data such as communication preferences is kept until you withdraw your consent. Once the retention period ends, data is deleted or anonymised in accordance with our security procedures.

Should a data breach occur that could affect your rights and freedoms, winbox1 will take immediate action to contain the incident and assess the extent of the damage. We will notify affected players within the timeframe required under our licensing obligations and inform the relevant authorities if necessary. We will also take remedial steps to prevent a similar incident from recurring.

Yes. You can stop receiving marketing emails at any time by clicking the "unsubscribe" link at the bottom of any promotional email we send. You can also update your communication preferences through your account settings or by contacting our customer service team. Please note that opting out of marketing does not affect important account-related communications such as transaction confirmations and security notices.

Trusted Platform

Your Data is Safe with winbox1

With a solid security infrastructure and our commitment to player privacy, you can focus on your betting experience with confidence. Enjoy slots, live casino, roulette and sports betting in a secure environment.

SSL 256-bit

International Licensing

24/7 Support

Data Protected

Terms & Conditions

Platform terms of use

Responsible Gambling

Responsible gambling guide

FAQ

Answers to common questions