Winbox88my Privacy Policy – Malaysia Player Data Protection

1Information We Collect

Winbox88my collects various types of information from our members for stated, legitimate purposes. Generally, the information we collect can be grouped into three main categories:

Information You Provide Directly:

• Full name as stated on your MyKad identification card or passport.
• MyKad identity card number or passport number.
• Date of birth for age verification.
• A valid email address and active Malaysian mobile number.
• Malaysian residential address.
• E-wallet account information (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) or bank account details (Maybank, CIMB) for deposit and withdrawal purposes.
• Photos or copies of identity documents submitted during the KYC process.

Automatically Collected Information:

• The IP address of your device when accessing the winbox88my platform.
• The type and version of the web browser or application you are using.
• Device type (smartphone, tablet, computer) and operating system.
• Gaming activity records — including bets placed, games played, and session duration.
• Deposit and withdrawal transaction data.
• Error logs and technical diagnostic data.

Information from Third Parties:

• Identity verification information from recognised KYC service providers.
• Payment verification data from Malaysia's local e-wallet and banking service providers.
• Information you have provided to third parties that is subsequently shared with winbox88my with your consent.

2Purpose of Data Use

Winbox88my uses your personal data only for legitimate, relevant, and reasonable purposes. The following are the primary purposes for which your data is used on the winbox88my platform:

• Account Management: Creating, verifying, and managing your winbox88my account, including the KYC process to meet legal compliance requirements.
• Transaction Processing: Processing your deposits and withdrawals quickly and securely through the local Malaysian payment methods available on winbox88my.
• Service Provision: Giving you access to all games and services on winbox88my — from EPL and Liga Super Malaysia Sports Betting, Live Casino, to slots and e-sports.
• Fraud Prevention: Identifying and preventing fraud, money laundering, and any unlawful activity that may occur on the winbox88my platform.
• Customer Support: Providing technical assistance and resolving any issues or complaints you raise with the winbox88my support team.
• Service Communications: Sending important notifications relating to your account, changes to terms, or security issues that require immediate attention.
• Platform Improvement: Analysing usage patterns in aggregate (not individually) to improve the user experience on winbox88my.
• Legal Compliance: Fulfilling legal obligations under Malaysia's PDPA and other applicable laws, including reporting to authorities where required.

Winbox88my does not use your data for purposes beyond those stated above without first obtaining your additional consent. Should we wish to use your data for a new purpose that is materially different, you will be notified and given the option to decline.

3Data Sharing with Third Parties

Winbox88my understands that your trust depends on how we handle your information. The following are the circumstances under which your data may be shared with other parties:

• Payment Service Providers: Transaction data is shared with Malaysian e-wallet service providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and banking partners (Maybank, CIMB) solely for the purpose of processing your deposits and withdrawals.
• KYC Provider: Your identity information is shared with recognised third-party identity verification service providers to meet legal compliance requirements.
• Game Provider: Required account information may be shared with winbox88my's partnered live casino and slots game software providers to enable access to those games.
• Legal Requirements: winbox88my may be required to disclose your data to Malaysian government authorities, law enforcement agencies, or courts when lawfully requested under applicable legislation.
• Fraud Prevention: In cases of suspected fraud or money laundering, relevant information may be shared with the appropriate regulatory bodies or anti-fraud authorities.

All third parties that receive your data from winbox88my are contractually bound to protect that data and use it only for the specified purposes. Winbox88my does not permit our third-party service providers to use your data for their own purposes unrelated to the services they provide to us.

4Data Retention Period

Winbox88my retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy, or as required under applicable Malaysian law. Specifically:

• Active Account Data: For as long as your winbox88my account remains active, we retain all your personal data and transaction history to ensure uninterrupted service delivery.
• Data After Account Closure: When your winbox88my account is closed, we retain your personal data and transaction records for a minimum of 7 years in accordance with Malaysia's financial record-keeping legal requirements.
• Log & Technical Data: Server logs and technical data are retained for a maximum of 12 months before being automatically deleted, unless required for an ongoing security investigation.
• KYC Data: Identity verification documents are retained for 7 years from the date of verification or account closure, whichever is later, in accordance with anti-money laundering (AML) compliance requirements.

Once the required retention period has expired and there is no legal obligation to retain the data further, winbox88my will securely delete or dispose of your data using industry-recognised procedures. Deleted data cannot be recovered.

5Use of Cookies

The winbox88my platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates correctly. Cookies are small text files stored on your device when you visit the winbox88my website or use the app.

We use three main types of cookies:

You can manage cookie settings through your web browser preferences. Please note, however, that disabling essential cookies will prevent you from using the winbox88my platform to its full extent. For more information on managing cookies in popular browsers, refer to your browser's help documentation.

6Data Security

Winbox88my invests seriously in security infrastructure to protect your personal data. The security measures we have implemented include:

• Data Encryption in Transit: All data transmitted between your device and winbox88my servers is encrypted using TLS 1.3 protocol with AES-256 encryption.
• Stored Data Encryption: Sensitive data such as identification card numbers and payment account information is stored in encrypted form within the winbox88my database.
• Access Controls: Access to winbox88my member data is restricted to staff with a legitimate business need. All access is logged and continuously monitored.
• Regular Security Testing: The winbox88my platform undergoes regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• 24/7 Monitoring: Automated monitoring systems keep watch over the winbox88my platform around the clock to detect any suspicious activity or unauthorised access attempts.
• Incident Response Plan: winbox88my has a comprehensive incident response procedure in place to address any data breaches swiftly and effectively.

While winbox88my takes all reasonable technical and organisational measures to protect your data, no security system can guarantee 100% protection against every threat. In the event of a material data breach involving your information, winbox88my will notify you within the timeframe prescribed by Malaysia's PDPA and take appropriate remedial action.

You also play an important role in keeping your winbox88my account secure. Please ensure your password is strong and unique, enable two-factor authentication where available, and never share your login credentials with anyone.

7Your Rights Under PDPA

As a winbox88my member whose personal data is processed by us, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of the above rights, please contact the winbox88my Data Protection Officer by email at support@winbox88my.biz specifying the right you wish to exercise and the information required to verify your identity.

8Children's Privacy

The winbox88my platform is restricted to individuals aged 21 years and above only. winbox88my does not knowingly collect personal data from individuals under the age of 21.

Should we become aware that we have collected personal data from an individual below the stipulated age limit without valid parental or guardian consent, we will take immediate steps to delete that data from our records and close the associated account.

If you believe that someone under the age of 21 has registered an account on winbox88my, please report this to us immediately at support@winbox88my.biz so that appropriate action can be taken.

9Links to Third-Party Websites

The winbox88my platform may contain links or references to third-party websites or services in certain contexts. winbox88my's Privacy Policy does not apply to those third-party websites or services.

Winbox88my does not control and is not responsible for the privacy practices or content of any third-party websites you may access through our platform. We encourage you to read and understand the privacy policy of any third-party website you visit.

Please note that any information you share with those third-party websites is subject to their own privacy policies, not winbox88my's. winbox88my has no control over or responsibility for data you provide to third parties.

10Cross-Border Data Transfers

As a digital entertainment platform operating in Malaysia, winbox88my processes and stores your personal data primarily on servers located in Malaysia or the Asia-Pacific region.

In certain circumstances — particularly involving international game or technology service providers that partner with winbox88my — your data may be transferred to and processed in other countries. When this occurs, winbox88my ensures:

• Data transfers are only made to countries or entities that provide a level of data protection equivalent to or greater than Malaysia's PDPA.
• Contractually binding data protection agreements are signed with all recipients of data outside Malaysia.
• Your rights as a data subject remain protected regardless of where your data is processed.

11Changes to the Privacy Policy

Winbox88my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes to this Privacy Policy:

• We will update the "Updated" date at the top of this document.
• We will send a notification to the email address registered to your winbox88my account at least 14 days before the changes take effect.
• In-app or on-site notifications on winbox88my will be displayed to inform you of any relevant changes.

Your continued use of the winbox88my platform after the effective date of any Privacy Policy changes will be considered your acceptance of the updated terms. If you do not agree with the changes, you have the right to close your winbox88my account and request deletion of your data in accordance with the procedures set out.

It is recommended that you review the winbox88my Privacy Policy page periodically to ensure you are always up to date with the latest terms governing the processing of your personal data.

12Contact Us – Privacy Enquiries

If you have any questions, concerns, or complaints regarding the winbox88my Privacy Policy or how we handle your personal data, please do not hesitate to get in touch with us:

• Privacy Email: support@winbox88my.biz (please state "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24/7 via the winbox88my platform
• Response Time: winbox88my is committed to responding to all privacy-related enquiries within 5 business days

If you are not satisfied with how winbox88my has handled your privacy complaint after going through our internal process, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Multimedia Malaysia, in accordance with the procedures set out under the PDPA.

Winbox88my takes every privacy complaint seriously and is committed to resolving all issues in a fair, transparent, and timely manner. Your trust is our most valued asset.