Privacy Policy

winbox01 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who use or interact with the winbox01 platform, accessible at winbox01.cam ("the Website"). This Privacy Policy ("Policy") describes how we collect, use, store, disclose, and safeguard your personal data in connection with your use of the Platform.

This Policy applies to all registered Players, account applicants, and visitors to the winbox01 Website. It covers personal data collected through the registration process, ongoing use of betting and gaming services, financial transactions, customer support interactions, and general browsing activity on the Website.

By registering an account on winbox01 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you should not register an account or use the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means winbox01, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of winbox01, such as a payment processor or identity verification provider.
• "Player" / "User" means any individual who has registered and holds an active account on the winbox01 platform.
• "KYC" means Know Your Customer — the identity verification process required of all Players prior to withdrawal processing.
• "Cookies" means small text files placed on your device by the winbox01 Website to support essential functionality, security, and analytics.

winbox01 collects personal data that is necessary and proportionate to the provision of our online sports betting and live casino services. The categories of personal data we collect are described below:

4.1 Directly from You

The majority of personal data winbox01 holds is provided directly by you during the registration process, KYC verification submission, financial transactions, and communications with our customer support team. This includes data you provide when completing account forms, uploading identity documents, and requesting withdrawals.

4.2 Automatically via the Platform

When you access and use the winbox01 Website, certain technical data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser specifications, session activity, and navigation patterns within the Platform. This data is used primarily for security monitoring, fraud prevention, and anonymous platform analytics.

4.3 From Third-Party Service Providers

winbox01 may receive certain personal data from third-party service providers engaged to support platform operations. This includes identity verification results from KYC service providers, transaction confirmation data from payment processors such as Maybank2u, CIMB Clicks, DuitNow, FPX, and e-wallet operators, and risk screening data from fraud prevention services.

winbox01 processes personal data one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to enter into and perform the Player account agreement, including account registration, payment processing, withdrawal execution, and the provision of betting and gaming services.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) verification requirements, and financial reporting obligations.
• Legitimate Interests: Processing necessary for winbox01's legitimate business interests, including fraud detection, platform security, responsible gambling monitoring, and product improvement — provided these interests are not overridden by your data protection rights.
• Consent: Where required, processing based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

winbox01 uses your personal data for the following specific purposes:

1. Account Management: To register, maintain, and administer your winbox01 player account, including authentication, security alerts, and account communications.
2. Payment Processing: To process MYR deposits via Maybank2u, CIMB Clicks, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX, and to execute withdrawal requests to your registered payment method.
3. Identity Verification (KYC): To verify your identity and age (21+) prior to processing withdrawals and as part of our ongoing AML compliance obligations.
4. Service Delivery: To provide access to sports betting markets (including Liga Super Malaysia, EPL, UFC, and other events), live casino games, slot titles, and all other Platform features.
5. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other prohibited activities.
6. Responsible Gambling: To monitor gaming activity for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and provide responsible gambling tools and support resources.
7. Customer Support: To respond to enquiries, resolve disputes, and provide technical assistance via live chat and email.
8. Legal Compliance: To satisfy applicable regulatory, tax, and reporting obligations, and to cooperate with lawful requests from competent authorities.
9. Platform Improvement: To analyse aggregated and anonymised usage data to improve the performance, content, and features of the winbox01 Platform.

7.1 Authorised Third-Party Processors

winbox01 may share your personal data with the following categories of third-party service providers who act as data processors on our behalf:

• Payment processors — including operators of Maybank2u, CIMB Clicks, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay, for the purpose of processing your financial transactions.
• Identity verification providers — for KYC document verification and age confirmation.
• Fraud prevention and AML screening services — for the detection and prevention of financial crime.
• IT infrastructure and security providers — for the hosting, monitoring, and security of the winbox01 platform.
• Customer support platform providers — for the operation of our live chat and ticketing systems.

7.2 Regulatory and Legal Disclosure

winbox01 may disclose your personal data to regulatory authorities, law enforcement agencies, financial intelligence units, and other competent bodies where required by applicable law, court order, or regulatory obligation. This includes mandatory AML reporting requirements where a transaction triggers a statutory reporting threshold.

7.3 No Commercial Sale of Data

winbox01 does not sell, rent, license, or otherwise commercially transfer your personal data to any third party for that party's own commercial purposes. Any sharing of data with third parties is limited to the operational purposes described in this Policy and is governed by appropriate data processing agreements.

winbox01 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law.

• Active account data — retained for the duration of your account's active status plus such additional period as may be required by applicable AML, tax, and regulatory record-keeping obligations.
• Financial transaction records — retained for a minimum of five (5) years following the date of the transaction, in accordance with applicable financial record-keeping requirements.
• KYC verification documents — retained for a minimum of five (5) years following account closure, or such longer period as required by applicable AML legislation.
• Customer support records — retained for three (3) years following the resolution of the relevant support interaction, or such longer period as required for dispute resolution purposes.
• Technical and session logs — retained for a maximum of twelve (12) months, after which they are anonymised or deleted.

Following the expiration of the applicable retention period, personal data will be securely deleted or anonymised in manner that prevents identification of the individual concerned.

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device across sessions and store certain preferences or session data. winbox01 uses cookies and similar technologies to operate the Platform effectively and securely.

9.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These cookies enable secure login sessions, maintain your account authentication state, and support core platform security features. These cannot be disabled without impairing Platform functionality.
• Security Cookies: Used to detect fraudulent activity, prevent cross-site request forgery (CSRF), and monitor for suspicious session behaviour.
• Analytics Cookies: Used to collect anonymised data about how visitors use the Platform, including page views, session duration, and navigation paths. This data is used in aggregate form only to improve the Platform.
• Preference Cookies: Used to remember your language preferences, display settings, and other personalisation choices within the Platform.

9.3 Third-Party Cookies

winbox01 does not permit third-party advertising networks to place cookies on your device through the Platform. Any analytics cookies in use are configured to anonymise IP addresses and are not used to build individual user profiles for advertising purposes.

9.4 Managing Cookies

You may control cookie preferences through your browser settings. Please note that disabling essential cookies will impair the functionality of the winbox01 Platform, including your ability to log in and conduct transactions. Instructions for managing cookies are available in your browser's help documentation.

winbox01 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the winbox01 servers.
• Encrypted storage of sensitive personal data, including financial records and identity documents, at rest.
• Role-based access controls limiting staff access to personal data on strict need-to-know basis.
• Two-factor authentication (2FA) options for Player accounts to reduce the risk of unauthorised access.
• Regular third-party penetration testing and security vulnerability assessments.
• Continuous server monitoring for anomalous activity, intrusion attempts, and data exfiltration patterns.
• Documented incident response procedures for data breaches, including Player notification protocols.

Whilst winbox01 takes all reasonable steps to secure your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying winbox01 immediately if you suspect any unauthorised activity on your account.

As a registered Player or user of the winbox01 Platform, you hold the following rights with respect to your personal data. These rights may be exercised by contacting the winbox01 support team: