Official Data Protection Document

Privacy Policy winbox888 —
Your Data, Our Responsibility

Winbox888 takes every member's privacy seriously. This document transparently explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: 1 January 2026
PDPA 2010 Compliance
256-bit SSL Encryption
No Data Sales
Full Data Control by Members

Winbox888 Privacy Commitment

Six core pillars that define winbox888's approach to protecting the privacy and personal data of Malaysian members

Highest-Level Encryption

All data transmitted between your device and winbox888 servers is protected by 256-bit SSL encryption — the same standard used by global banking and financial institutions. Your data is secure at all times.

No Data Sales

Winbox888 has never and will never sell, rent, or disclose your personal data to any third party for marketing purposes without your explicit consent. Your data belongs entirely to you.

Malaysia PDPA Compliance

All our data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the right to access, correct, or withdraw consent to the use of your data.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls, strict access controls, and continuous 24/7 security monitoring. Only authorised personnel may access your information.

Member Data Control

You have full control over your data. Through your winbox888 account, you can access, update, or request deletion of your personal data at any time via our customer support team.

Communication Controls

You can choose the types of promotional communications you wish to receive from winbox888 and withdraw that consent at any time. We respect your preferences and will not send unwanted messages.

This Privacy Policy applies to all users and registered members of the winbox888 platform, including the website winbox888.fun and mobile app. By using our services, you agree to the terms set out in this document.

1Privacy Policy Introduction & Scope

Winbox888 is a trusted online gaming platform operating to serve members across Malaysia. We understand that your trust is our most valuable asset, and that trust can only be built when we are transparent about how we handle your personal information.

This Privacy Policy details the data collection, use, storage, protection, and disclosure practices of winbox888. This document is drafted in compliance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia and international data security standards.

This policy applies to all your interactions with winbox888, including:

  • Member account registration and management
  • Deposits, withdrawals, and all financial transactions
  • Access to all games — slots, live casino, sports, betting, and e-sports
  • Interactions with our customer support team
  • Use of the winbox888 mobile app
  • Participation in promotional programs and lucky draws

By using any part of the winbox888 platform, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services and contact us to close your account.

2Information We Collect

Winbox888 only collects information that is strictly necessary to provide quality, secure, and legally compliant services. The following are the categories of information we collect:

Data Category Example Information Requirements
Identity Information Full name, MyKad number, date of birth, gender Mandatory (KYC)
Contact Information Phone number, email address, residential address Mandatory
Financial Information Bank account number, bank name, transaction records Mandatory (payment)
Technical Data IP address, device type, operating system, web browser Automatic
Usage Data Game records, login activity, session duration Automatic
Communication Data Support chat history, sent emails Where applicable

Winbox888 does not collect sensitive information such as biometric data, medical records, or religious information unless explicitly required by Malaysian law.

3How We Use Your Data

Every piece of information we collect is used for a clear and legitimate purpose. winbox888 uses your personal data for the following purposes:

  • Account Management: Creating, verifying, and maintaining your member account so you can access all features of the winbox888 platform.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
  • KYC & AML Compliance: Verifying your identity to comply with the Anti-Money Laundering and Anti-Terrorism Financing Act 2001 and applicable KYC requirements.
  • Customer Support: Providing efficient technical assistance and support services when you contact us.
  • Fraud Detection: Monitoring account activity to detect and prevent fraud, money laundering, and unauthorized access.
  • Service Improvement: Analyzing aggregated usage patterns to improve platform performance and user experience.
  • Promotional Communications: Sending information about the latest bonuses and promotions (with your consent only).
  • Legal Compliance: Fulfilling any reporting or disclosure obligations required under Malaysian law.

4Legal Basis for Data Processing

Every personal data processing activity carried out by winbox888 is based on at least one valid legal ground under PDPA 2010:

  • Consent: For marketing communications and preference-based purposes, we require your explicit consent. You may withdraw this consent at any time.
  • Contract Performance: Processing required to provide winbox888 services to you as agreed in the Terms and Conditions.
  • Legal Obligation: Processing required to comply with Malaysian law, including KYC requirements and AML reporting.
  • Legitimate Interest: Processing required for security, fraud prevention, and service improvement that benefits all members.

5Data Sharing & Disclosure

Winbox888 does not sell or rent your personal data to any third party. However, there are limited situations where we may need to share your data with certain parties:

  • Payment Providers: Required transaction details are shared with approved payment providers (DuitNow, FPX, TNG eWallet, Boost, GrabPay) solely for processing your transactions.
  • Game Providers: Limited game session data is shared with certified game providers to ensure a smooth and fair gaming experience.
  • KYC Service: Identity data is shared with appointed identity verification service providers to meet compliance requirements.
  • Authority: Information required by law, court order, or competent Malaysian government authorities.
  • Security Audit: In the event of a security audit or fraud investigation, required information may be shared with appointed auditors or investigators.
All third parties receiving your data from winbox888 are bound by strict data protection agreements and are only permitted to use that data for the specified purposes.

6Storage, Security & Retention Period

Winbox888 implements robust technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

Technical security measures we apply:

  • Data in transit is encrypted using TLS 1.3 protocol and 256-bit SSL
  • Data at rest is encrypted using AES-256 (data-at-rest encryption)
  • Two-factor authentication (2FA) for internal system access
  • Active 24/7 intrusion detection system (IDS/IPS)
  • Regular access log audits
  • Regular security and penetration testing

Data Retention Period: Your personal data is retained for as long as your account is active. After account closure, data is kept for 7 years to meet Malaysia's legal compliance requirements before being securely deleted. Financial transaction data is retained for the period stipulated by applicable laws.

winbox888 servers are protected by DDoS protection, enterprise-grade firewalls, and continuous security monitoring. We also conduct regular security awareness training for all staff who handle member data.

7Cookies & Tracking Technologies

Winbox888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies (Required): Required for core platform functions such as secure login, session verification, and website navigation. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how members use our platform (pages visited, time spent) to help us improve performance and usability.
  • Functional Cookies: Remembering your preferences such as language, text size, and other personal settings for a more comfortable experience.
  • Analytics Cookies: Used to understand aggregated and anonymised usage patterns for the continuous improvement of the winbox888 platform.

You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect your ability to use certain features of the winbox888 platform.

8Your Rights Under the PDPA

As a data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by winbox888:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days.

Right to Rectification

If any of your data is inaccurate or outdated, you have the right to request a correction without undue delay.

Right to Erasure

You may request deletion of your data when it is no longer needed, subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing any justification.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform.

Right to Withdraw Consent

You may withdraw consent previously given for specific processing at any time without affecting the validity of prior processing.

To exercise any of the above rights, please contact the winbox888 Data Protection Officer (DPO) by email at [email protected] or via 24/7 Live Chat. We will process your request within the timeframe required by law.

9Children's Privacy

Winbox888 strictly prohibits registration and use of the platform by individuals under the age of 18. We do not knowingly collect or process personal data from children or minors who have not reached the age of majority.

Should we discover that personal data has been collected from an individual under the age of 18 without proper age verification, we will take immediate steps to:

  • Suspending the account in question immediately
  • Deleting all related personal data
  • Returning any remaining balance in accordance with established procedures
  • Reporting the incident to the relevant authorities if required

Parents or guardians who discover that a minor under their care has registered on winbox888 are requested to contact our support team immediately.

10Privacy Policy Amendment

Winbox888 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use.

When significant changes are made to this Privacy Policy:

  • A notification will be sent to your registered email address at least 14 days before the changes take effect
  • A notice will be prominently displayed on the winbox888 platform home page
  • The "Updated" date at the top of this document will be revised to reflect the latest version
  • Previous versions of the Privacy Policy will be retained and can be requested from our support team

Your continued use of the winbox888 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. It is your responsibility to review this page from time to time.

11Contact Us

If you have any questions, concerns, or wish to exercise your personal data rights, please contact the winbox888 Data Protection Officer (DPO) through the following channels:

  • Email: [email protected]
  • Live Chat: Available 24/7 via the chat icon on the winbox888 platform
  • Response Time: We are committed to responding to all privacy-related enquiries within 3 working days

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia as the PDPA regulatory body in Malaysia.

winbox888 is committed to addressing every privacy-related enquiry with seriousness, transparency, and within a reasonable timeframe. Your trust is our priority.

FAQ — Privacy & Data

Answers to the most frequently asked questions by winbox888 members regarding privacy and data protection

Absolutely not. winbox888 has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data is only shared with parties that are strictly necessary — such as payment providers and game suppliers — solely to deliver services to you, and always subject to strict data protection agreements.

All your financial information is protected with 256-bit SSL encryption during data transmission, and AES-256 encryption during storage. Bank account numbers and card details are stored in encrypted format and cannot be accessed in plain text by any staff member. Our system is also equipped with real-time fraud monitoring to detect any unusual activity on your account.

Yes, you may request account closure and data deletion at any time by contacting the winbox888 support team via Live Chat or email. Please note, however, that some data may need to be retained for a specified period (typically 7 years) to fulfil Malaysian legal obligations, including financial record-keeping and AML compliance requirements. After that period, data will be securely and permanently deleted.

Identity verification (KYC) is a mandatory legal compliance requirement for all financial and online gaming platforms in Malaysia. This process helps us verify that you are a legitimate individual aged 18 and above, prevents money laundering and identity fraud, and ensures withdrawals are made to the rightful account holder. Your identity documents are stored with full encryption and accessed only by authorized compliance staff.

There are several ways to stop receiving promotional communications from winbox888. First, click the "Unsubscribe" link found at the bottom of any promotional email. Second, log in to your account and update your communication settings under the Profile section. Third, contact our support team via Live Chat and inform them of your preference. Changes will take effect within 5 business days. Please note that important transactional emails (such as transaction confirmations) cannot be opted out of, as they are related to your account security.

In the event of a data security breach affecting your personal data, winbox888 is committed to notifying affected members within 72 hours of becoming aware of the incident, in accordance with PDPA requirements. The notification will include details about the nature of the breach, data that may have been exposed, steps being taken by winbox888, and recommended actions for you to take to protect yourself. We will also report the incident to Malaysia's JPDP in accordance with established procedures.
Safe & Trusted Platform

Join winbox888 with Complete Confidence

Your data is fully protected. Enjoy the best gaming experience in Malaysia with complete peace of mind — your privacy is our priority.

256-bit SSL Encryption  ·  PDPA 2010 Compliance  ·  Secure KYC

Bahasa Melayu