Your privacy is more than a legal obligation to win box — it is our personal commitment to every player. This document clearly and transparently explains how win box collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.
Before reading the full policy, here are the most important highlights of how win box protects your information.
All personal and financial transaction data you submit to win box is protected by 256-bit SSL encryption — the same security technology used by Malaysia's major banks such as Maybank and CIMB. Your data cannot be intercepted or read by any third party.
Win box has never sold, rented or traded your personal data to any third party for marketing or any other purpose, and never will. Your data is shared only with service providers necessary for platform operations, and with authorities when required by law.
Win box's Privacy Policy is built in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. We ensure that every stage of data collection and processing complies with local legislation, giving you full protection under the Malaysian legal framework.
As a win box player, you have the full right to access, correct, transfer and request the deletion of your personal data. We also give you the right to withdraw consent for data processing at any time through your account settings or by contacting our team.
Win box retains your data only for as long as necessary for the stated purposes. Once the required retention period has ended, your data is securely deleted or anonymised. All data is stored on secure servers with strict access controls and continuous monitoring.
In the event of any security incident involving your personal data, win box is committed to notifying you within the timeframe stipulated by the PDPA. We will also take immediate remedial action and report the incident to the relevant authorities in accordance with legal requirements.
By registering for or using any win box service, you consent to the collection and processing of your personal data as described in this Privacy Policy. If you do not agree, please refrain from using the win box platform and contact us to have any collected data deleted.
Win box collects players' personal data through several different means during your interactions with our platform. This data collection is necessary to enable win box to provide a safe, fair, and effective service to all Malaysian players.
Data is collected when you:
Below is a detailed table of the types of personal data win box collects, along with the purpose of collection and the legal basis for each category:
| Data Category | Sample Information | Primary Purpose |
|---|---|---|
| Identification Data | Full name, national ID number, date of birth, gender | Identity verification (KYC), fraud prevention, regulatory compliance |
| Contact Data | Email address, phone number | Account communications, security notifications, customer support |
| Financial Data | Deposit/withdrawal records, payment methods, transaction history | Payment processing, anti-money laundering, tax reporting |
| Gaming Data | Betting history, game results, session duration, favourite games | Game fairness, fraud detection, experience personalisation |
| Technical Data | IP address, device type, operating system, web browser, access logs | Platform security, unauthorised access detection and technical analysis |
| Behavioural Data | Site navigation patterns, features used, settings preferences | Improved user experience, relevant game recommendations |
| Communication Data | Live chat records, support emails, survey responses | Service quality control, complaint resolution and dispute handling |
* win box does not collect sensitive data such as health information, religious beliefs or political views unless specifically required by regulatory law.
Win box processes your personal data for the following purposes, each grounded in a valid legal basis under Malaysia's PDPA:
Win box takes its obligation to protect your personal data from unauthorised disclosure seriously. There are, however, limited circumstances in which win box needs to share data with certain parties for legitimate platform operations:
Win box implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:
While win box takes all reasonable steps to protect your data, no system is 100% secure against every threat. Win box therefore encourages players to play their part in keeping their accounts safe — use a strong password, enable two-factor authentication and never share your login credentials with anyone.
Win box uses cookies and similar tracking technologies to enhance the functionality and user experience of our platform. Cookies are small text files stored on your device when you visit win box.
Win box uses the following types of cookies:
You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the win box platform. For more information on managing cookies, refer to your web browser's help section.
Win box only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are general data retention guidelines:
As a win box player and data subject under Malaysia's PDPA, you have the following rights regarding your personal data. win box is committed to respecting and facilitating the exercise of these rights:
You have the right to obtain a copy of the personal data win box holds about you. Requests can be made through your account settings or by emailing our privacy team.
If any of your personal data is inaccurate or out of date, you have the right to request a correction. Most profile information can be updated directly in your win box account settings.
In certain circumstances, you have the right to request the deletion of your personal data. However, this right is subject to the legal data retention obligations that win box is required to comply with.
You can request win box to restrict the processing of your data in certain situations, for example while you are disputing the accuracy of your data or awaiting the outcome of a processing objection.
You have the right to receive your personal data in a machine-readable format and transfer it to another data controller, within what is technically feasible.
You may object to the processing of your personal data for direct marketing purposes at any time. win box will cease processing for that purpose immediately upon receiving your objection.
As an online platform operating with international service providers, win box may need to transfer your personal data to other countries for technical processing purposes. This includes licensed game providers such as Evolution Gaming and Pragmatic Play, which may have server infrastructure across multiple locations.
Win box ensures that all cross-border data transfers are carried out with appropriate safeguards in place, including:
Win box is a platform designed exclusively for individuals aged 18 and above. We do not knowingly collect, use or disclose the personal data of any individual under the age of 18.
If win box discovers that personal data has been collected from a minor without our knowledge, we will take immediate steps to delete that information and close the account in question. Parents or guardians who believe their child has registered on win box should contact us immediately at support@winbox-khelo.com for prompt action.
Win box reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or technological developments. Each updated version of the Privacy Policy will be published on this page with a new effective date.
For material changes — that is, changes that significantly affect how your data is used — win box will provide at least 14 days' advance notice via email to your registered address and an in-platform notification before the changes take effect. Continued use of the win box platform after the effective date will be considered acceptance of the updated policy.
Win box has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with Malaysia's PDPA and this Privacy Policy. If you have any questions, concerns or complaints regarding your data privacy at win box, please contact us:
If you are not satisfied with win box's response to your privacy complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia in accordance with the provisions of PDPA 2010.
The most frequently asked questions from Malaysian players about privacy and data protection at win box.
Register for free and join over 500,000 Malaysian players who already trust win box with their data and security every day.
Read the full terms of use for the win box platform, including rules on betting, bonuses and accounts. Read the Terms & Conditions.
Win box provides tools and guidance to help you play in a healthy and responsible way. Visit this page.
Have more questions about win box? Find quick answers in our FAQ section. View the FAQ.