Official Data Protection Document

Privacy Policy Winbox H
Your Privacy Is Our Priority

Winbox h is committed to protecting every piece of personal information you share with us. This privacy policy clearly explains how we collect, use, store, and safeguard your data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: January 2026
256-bit
SSL Encryption
Data Protection
PDPA
Act Compliance
Malaysia 2010
0
Data Sold
to Third Parties
24/7
Monitoring
Active Security
Our Commitment: Winbox h has never and will never sell, rent, or disclose your personal data to any third party for marketing purposes without your explicit consent. Your trust is our most valued asset.
1
Introduction and Scope of Privacy Policy

This Privacy Policy ("Policy") is published by winbox h ("we", "platform") and applies to all users who register, browse, or use any services provided on the winbox h platform. It has been drafted in accordance with the requirements of the Malaysian Personal Data Protection Act 2010 (PDPA) and international data protection best practice standards.

This privacy policy explains in detail the types of personal data we collect from you, why we need it, how it is used, who it may be shared with, and what rights you have over that data. We believe full transparency is the foundation of trust between winbox h and every Malaysian player we serve.

By registering a winbox h account or continuing to use our platform, you acknowledge that you have read and understood this privacy policy. If you disagree with any part of it, please stop using our platform and contact us for further discussion.

2
Types of Personal Data We Collect

Winbox h only collects data that is strictly necessary to provide you with a safe, responsible, and high-quality service. Below are the categories of data we may collect:

Data Category Sample Information Requirements
Identity Information Full name, MyKad number, date of birth, gender Mandatory (KYC)
Contact Information Email address, phone number, residential address Mandatory
Financial Information Payment methods (Touch 'n Go, GrabPay, DuitNow, FPX), transaction records Mandatory
Platform Activity Data Betting records, game history, gaming preferences Mandatory
Technical Data IP address, device type, web browser, operating system Automatic
Communications Data Support correspondence, complaints, and feedback Voluntary
Note: We do not collect sensitive category data such as health information, religious beliefs, or political affiliations unless you voluntarily provide it in a context relevant to our services.
3
How We Collect Your Personal Data

Winbox h collects personal data through several different channels, depending on how you interact with our platform:

  • Account Registration: When you register a new winbox h account, you will be asked to complete a form with your full name, email address, phone number, and date of birth.
  • Identity Verification (KYC): For anti-money laundering (AML) compliance and age verification purposes, we may request a copy of your MyKad or other official identification document.
  • Financial Transactions: Data is collected automatically when you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and when you make a withdrawal.
  • Gaming Activity: Every action on the platform — football betting, baccarat, roulette, slots, or e-sports — is automatically logged for security and audit purposes.
  • Support Communications: When you contact our support team via live chat, email, or WhatsApp, the conversation is saved for reference and service improvement.
  • Cookies and Tracking Technologies: Our platform uses cookies and similar technologies to automatically collect technical data while you browse our website.
4
How We Use Your Personal Data

Winbox h uses collected personal data solely for legitimate and transparent purposes, as outlined below:

  • Account Management: Allows you to create an account, log in, manage your personal settings, and access all features on the winbox h platform.
  • Transaction Processing: To ensure deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, FPX, and other Malaysian payment methods are processed quickly and securely.
  • Legal Compliance: To meet KYC, AML, and financial regulatory compliance requirements applicable in Malaysia.
  • Platform Security: Detecting and preventing fraud, account misuse, suspicious betting activity, and unauthorised access attempts.
  • Customer Support: To provide technical support, resolve complaints, and respond to your enquiries more effectively.
  • Service Improvement: Analysing usage patterns to improve the user experience, develop new features, and optimise platform performance.
  • Marketing Communications: To send promotional information, the latest bonuses, and exclusive offers — only if you have given your consent to receive them. You may unsubscribe at any time.
Purpose Limitation Principle: winbox h will not use your personal data for any purpose beyond those stated above without first obtaining your renewed consent.
5
Third-Party Data Sharing and Disclosure

Winbox h does not sell, rent, or disclose your personal data to third parties for marketing purposes. Your personal data may only be shared in the following limited circumstances:

  • Payment Service Providers: Required transaction data is shared with e-wallet and banking providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks solely for the purpose of processing your financial transactions.
  • Game Providers: Basic account information required to access third-party gaming platform providers (slots, live casino, sports) is shared with those providers to enable your access to their games.
  • Statutory Authorities: Winbox h will disclose required data to law enforcement agencies or regulatory bodies when mandated by applicable Malaysian law.
  • Technology Provider: Companies that provide the technical infrastructure, cybersecurity, and cloud services required to operate the winbox h platform — all bound by strict confidentiality agreements.
  • Business Transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred to the new entity, and you will be notified in advance.

All third parties handling winbox h user data are required to sign a data protection agreement and comply with security standards equal to or higher than those of winbox h itself.

6
Data Security Measures

Winbox h invests seriously in security infrastructure to ensure your personal data remains protected at all times. Our security measures include:

  • 256-bit SSL Encryption: All communications between your device and winbox h servers are encrypted using the latest TLS/SSL protocols, ensuring your data cannot be intercepted in transit.
  • Data-at-Rest Encryption: Sensitive data stored in our databases — including financial information and identity documents — is encrypted using the AES-256 algorithm.
  • Strict Access Controls: Only staff with specifically granted authorisation may access user personal data, and every access is logged and continuously monitored.
  • Two-Factor Authentication (2FA): We encourage and provide the option of two-factor authentication for your account as an added layer of security.
  • 24/7 Monitoring: An automated threat detection system operates at all times to identify and block any suspicious activity before it can compromise your data.
  • Regular Security Audits: Winbox h conducts regular penetration testing and security audits by independent experts to identify and address potential vulnerabilities.
In the Event of a Data Breach: In the event of a security incident affecting your personal data, winbox h is committed to notifying you and the relevant authorities within 72 hours of detection, in line with data protection best practices.
7
Data Retention Period

Winbox h retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required under applicable Malaysian law.

  • Active Account Data: Retained for as long as your account remains active and for a period of 5 years following account closure for audit and compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's anti-money laundering (AML) legislation and tax requirements.
  • Support Communication Records: Retained for 2 years after the last interaction for reference and service improvement purposes.
  • Cookie and Technical Log Data: Stored between 30 days and 13 months depending on the type of cookie and its purpose.
  • KYC Documents: Retained for 5 years after the business relationship ends, in line with PDPA and AML requirements.

Once the retention period expires or upon your request for deletion, winbox h will securely delete or anonymise your data using industry-standard methods.

8
Your Rights Under Malaysia's PDPA

As a winbox h user based in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA), which we fully respect:

🔍
Right of Access
You may request a copy of the personal data we hold about you at any time. Requests will be processed within 21 working days.
✏️
Right to Rectification
If your data is inaccurate or outdated, you have the right to request a correction or update at no charge.
🚫
Right to Withdraw Consent
You may withdraw your consent for certain data processing activities — particularly marketing communications — at any time.
🗑️
Right to Erasure
You may request deletion of your personal data, subject to any legal obligations that remain in force.
📦
Data Portability Right
You have the right to receive your personal data in a machine-readable format for transfer to another platform, should you wish to do so.
📩
Right to Complain
If you are unhappy with how we handle your data, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, please submit a written request to privacy@winboxh.com along with your account number and a copy of your MyKad for identity verification purposes.

9
Cookies and Tracking Technologies

The winbox h platform uses cookies and similar tracking technologies to enhance your experience and gather analytics data that helps us improve our services. Below are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled.
  • Performance Cookies: Collects anonymous data on how users interact with our platform to help us identify areas for improvement.
  • Functional Cookies: Stores your preferences such as chosen language, display settings, and login information to make repeat visits more convenient.
  • Marketing Cookies: Used to display more relevant promotions to you based on your interests and activity on the platform — with your consent only.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the winbox h platform.

10
Child Data Protection

Winbox h is an adult betting platform intended solely for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from minors under the age of 18.

If we discover that personal data belonging to someone under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their child is using the winbox h platform are encouraged to contact us immediately at support@winboxh.com.

Parental Controls: We encourage parents to use parental control software to restrict children's access to online gambling websites. Winbox h fully supports all efforts to protect minors from gambling-related content.
11
Changes to This Privacy Policy

Winbox h reserves the right to update or amend this privacy policy at any time to reflect changes in our practices, new legal requirements, or service improvements. Whenever material changes are made, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending notifications to your registered email address for changes that materially affect your privacy rights
  • Displaying a prominent notice on the winbox h platform for at least 14 days following any changes

Your continued use of the winbox h platform after any changes are published constitutes your acceptance of the updated privacy policy. We encourage you to review this page periodically to stay informed.

12
Contact Our Data Protection Officer

Winbox h has appointed a Data Protection Officer responsible for ensuring compliance with this privacy policy. If you have any questions, concerns, or complaints regarding your data privacy, please contact us via:

  • Privacy Email: privacy@winboxh.com
  • General Support Email: support@winboxh.com
  • 24/7 Live Chat: Available directly on the winbox h platform

All privacy-related enquiries will be responded to within 3 working days. For data access or deletion requests that require identity verification, the processing period is up to 21 working days in accordance with PDPA requirements.

If you are not satisfied with our response, you have the right to lodge a complaint directly with Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.

Why Your Privacy Is Safe With Winbox H

Six concrete commitments from winbox h to protect the personal data of every Malaysian player

🔐
Military-Grade Encryption
Your data is protected with 256-bit SSL and AES-256 encryption — the same technology used by leading financial institutions worldwide. All your DuitNow, FPX, and e-wallet transactions are processed in a fully encrypted environment.
🇲🇾
Malaysia PDPA Compliance
Winbox h is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the full right to access, correct, and request deletion of your data at any time.
🚫
No Data Sales
Winbox h has never and will never sell players' personal data to third parties for marketing purposes. Your information is used solely to provide you with a better service.
👁️
24/7 Threat Monitoring
Our automated cybersecurity system operates around the clock to detect unauthorised access attempts, cyberattacks, and suspicious activity that could compromise your data.
⚖️
Appointed Data Protection Officer
Winbox h has a dedicated Data Protection Officer (DPO) appointed to ensure all data processing practices comply with applicable laws and privacy policies.
🔔
Data Breach Notification
In the event of a security incident, winbox h is committed to notifying you within 72 hours. Full transparency is our promise to every player who trusts this platform.
Safe & Trusted

Join Winbox H Today —
Platform that Respecting Your Privacy

Your data is protected, your privacy is respected, and your gaming experience is secure. Register a free winbox h account today and enjoy a welcome bonus of up to RM 600.

Malaysia PDPA Compliance 256-bit SSL Encryption No data sales 24/7 privacy support
Bahasa Melayu