Winboxmy Privacy Policy

1. Introduction

Winboxmy respects the privacy of every eligible player and recognises that account, payment, identity, and gameplay information must be handled responsibly. This Privacy Policy describes the categories of personal data collected by Winboxmy, the purposes for which the data is processed, the circumstances in which it may be shared, and the choices available to users.

This policy applies when you browse Winboxmy, register an account, complete identity verification, deposit or withdraw MYR, claim a promotion, place a sports wager, play a casino game, contact support, or use responsible gambling tools. By using Winboxmy, you acknowledge the data practices described here.

This Privacy Policy should be read together with the Winboxmy Terms & Conditions and Responsible Gambling information. The service is intended only for eligible players aged 21 and above.

2. Definitions and Scope

“Personal data” means information that identifies a person directly or can reasonably be linked to a person. “Processing” includes collecting, recording, organising, storing, reviewing, using, sharing, restricting, or deleting personal data. “Account data” means information associated with a registered Winboxmy account.

This policy covers data collected through the Winboxmy website and related player services. It also covers information received from payment providers, identity verification services, game systems, fraud-prevention tools, and customer support channels where such information relates to a Winboxmy user.

3. Information Winboxmy Collects

3.1 Registration and Profile Information

When a player creates or manages a Winboxmy account, we may collect a legal name, date of birth, residential address, nationality, mobile number, email address, username, preferred language, account settings, and communication preferences. This information helps Winboxmy confirm eligibility, maintain accurate records, and provide locally relevant support.

3.2 Identity and Verification Information

Winboxmy may request an identity document, proof of address, photograph, selfie, payment ownership evidence, or source-of-funds information. Verification may be required before a withdrawal or when account activity presents a security, fraud, or compliance concern. Sensitive document access is restricted to authorised personnel and approved verification providers.

3.3 Payment and Transaction Information

Winboxmy records deposits, withdrawals, payment references, amounts, dates, account status, and selected method. This may include transactions involving Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong. Winboxmy generally does not need to store complete banking credentials where processing is handled securely by a payment provider.

3.4 Betting and Gameplay Information

Winboxmy maintains records of casino sessions, game selections, wagers, odds, outcomes, wins, losses, bonuses, loyalty activity, and withdrawal history. This may include live casino play and sports activity involving EPL, Liga Super Malaysia, UFC, football, and other available markets.

3.5 Device and Technical Information

When you use Winboxmy, technical records may include an IP address, browser type, operating system, device identifiers, screen size, language, approximate location, login time, session data, referring page, and security events. These records assist with fraud detection, service performance, account protection, and troubleshooting.

3.6 Customer Support Information

If you contact Winboxmy support, we may retain your message, account reference, conversation history, language choice, and information supplied to resolve the enquiry. Players should not send a complete password or unnecessary identity documents through ordinary chat messages.

4. How Winboxmy Uses Personal Data

Winboxmy processes personal data only where there is a legitimate operational, contractual, legal, security, or consent-based purpose. Depending on the context, information may be used to:

• Create, authenticate, maintain, and secure a Winboxmy account.
• Confirm age and identity and prevent underage access.
• Process MYR deposits, withdrawals, reversals, and payment enquiries.
• Record casino results, settle sports wagers, and administer bonuses.
• Detect duplicate accounts, fraud, collusion, chargeback abuse, and money laundering.
• Provide customer support in English, Bahasa Melayu, or Chinese.
• Maintain deposit limits, self-exclusion, and other safer gambling controls.
• Improve Winboxmy reliability, mobile performance, accessibility, and security.
• Provide service notices and, where permitted, relevant promotional communications.
• Comply with record-keeping, dispute-resolution, and lawful regulatory obligations.

5. Legal and Operational Grounds for Processing

Winboxmy may process information because it is necessary to provide an account service, carry out a requested transaction, settle a wager, or respond to support. Processing may also be required to meet legal obligations relating to identity checks, fraud prevention, financial records, and responsible gambling.

Winboxmy relies on legitimate interests where processing is reasonably necessary to secure the platform, prevent abuse, improve services, resolve disputes, and understand general product performance. Where consent is the appropriate basis, such as for selected marketing preferences or optional technologies, consent may be withdrawn without affecting prior lawful processing.

6. Cookies and Similar Technologies

Winboxmy may use cookies, local storage, session identifiers, and comparable technologies to keep players signed in, remember settings, protect accounts, measure website performance, and identify suspicious sessions. Some cookies are necessary for essential functions and cannot be disabled without affecting service availability.

Preference and analytics technologies help Winboxmy understand which pages work well across devices used in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia. Measurements may include page load time, navigation patterns, browser type, and error events. These insights are used to improve the platform rather than to determine casino outcomes.

Browser controls can be used to remove or block selected cookies. Doing so may sign you out, remove preferences, or prevent some Winboxmy account functions from operating correctly.

7. When Information May Be Shared

Winboxmy may share limited personal data with carefully selected service providers where necessary to deliver or protect the platform. These recipients may include payment processors, banks, e-wallet operators, identity verification services, game platform providers, hosting companies, security specialists, customer support systems, and professional advisers.

Service providers are expected to use Winboxmy information only for authorised purposes and to apply suitable confidentiality and security safeguards. The information disclosed depends on the service. A payment provider may require transaction and account ownership details, while a game provider may receive a technical player identifier and game session record.

Winboxmy may also disclose data where required by valid law, legal process, regulatory request, investigation, or a need to protect players, employees, the public, or platform integrity. If the business undergoes a restructuring or transfer, relevant records may be transferred subject to continuing privacy safeguards.

8. International Data Processing

Online gaming, payment, hosting, security, and support services may operate across multiple countries. As a result, Winboxmy information may be processed outside Malaysia where infrastructure or approved service providers are located.

Where personal data is transferred internationally, Winboxmy seeks to use appropriate contractual, organisational, and technical safeguards. The privacy laws in another location may differ from Malaysian requirements, but Winboxmy remains committed to protecting data consistently with this policy.

9. Data Security

Winboxmy uses layered administrative, technical, and physical measures designed to protect information against accidental loss, unauthorised access, misuse, alteration, or disclosure. Measures may include encrypted connections, password protection, access controls, transaction monitoring, security logging, backups, staff confidentiality requirements, and account verification.

No online system can be guaranteed completely secure. Players also have an important role in protecting their Winboxmy accounts. Use a strong and unique password, keep one-time codes private, avoid unsecured shared devices, and report unexpected login or transaction activity promptly.

If Winboxmy identifies a data incident that creates a material risk to affected users, it will investigate, contain the issue, preserve relevant evidence, and provide notices where required.

10. Data Retention

Winboxmy keeps personal data only for as long as reasonably necessary for account administration, payment reconciliation, dispute handling, fraud prevention, responsible gambling, security, and applicable record-keeping duties. Retention periods vary according to the type of record and the reason it is held.

Closing a Winboxmy account does not always result in immediate deletion. Transaction histories, verification records, self-exclusion information, and security evidence may need to remain restricted for a further period. When information is no longer required, Winboxmy will delete, anonymise, or securely isolate it in accordance with internal retention controls.

11. Responsible Gambling and Sensitive Records

Winboxmy may process information concerning deposit limits, loss patterns, session duration, cooling-off periods, support interactions, and self-exclusion. These records help Winboxmy identify potential harm, apply player-selected controls, and prevent access during an exclusion period.

Responsible gambling information is treated with particular care. Access is limited to authorised teams and suitable providers that need the information to administer safeguards. Winboxmy will not use self-exclusion data to encourage further gambling.

12. Marketing Communications

Where permitted, Winboxmy may send information about platform updates, casino content, sports markets, promotions, or loyalty benefits. Communication preferences may be adjusted through available account or support options.

Essential notices concerning security, transactions, verification, policy updates, or responsible gambling are operational communications and may still be provided when marketing is disabled. Winboxmy suppresses promotional communications for accounts subject to active self-exclusion controls.

13. Automated Risk Assessment

Winboxmy may use automated tools to identify unusual transactions, account duplication, compromised credentials, bonus abuse, or indicators of gambling-related harm. Such tools can flag activity for review but do not necessarily establish wrongdoing by themselves.

Where a significant account decision is based on risk indicators, Winboxmy may conduct a manual review using transaction history, account data, payment evidence, game records, and information supplied by the player. Users may contact support to request an explanation or correction of inaccurate data.

14. Children's Privacy

Winboxmy is not intended for children or anyone under 21. Winboxmy does not knowingly permit an underage person to hold an account or gamble. Age verification may be requested at registration, during account review, or before a withdrawal.

If Winboxmy identifies an underage account, access may be suspended immediately while the circumstances are investigated. Parents or guardians who believe an underage person has provided information should contact Winboxmy support without sending unnecessary sensitive documents.

15. Changes to This Privacy Policy

Winboxmy may amend this Privacy Policy to reflect changes in services, technology, payment systems, security practices, or applicable requirements. The updated version will display a revised effective date.

Material changes may also be communicated through an account notice or another appropriate service message. Continued use of Winboxmy after the effective date means that the updated policy applies to subsequent processing, subject to any consent requirements.

16. Contact Us

Questions about this policy, a Winboxmy account, or a privacy request may be directed to customer support. To help locate the correct record, provide your username, registered contact details, and a clear description of the request. Never include your complete password or one-time security code.

The Winboxmy support email is [email protected]. It is displayed as plain text and is not a clickable link. Winboxmy may need to verify your identity before releasing, correcting, or deleting account information.