Official winbox88my Documents

Privacy Policy Winbox88my – How We Protect the Personal Data of Malaysian Players

Your privacy is our priority. The winbox88my Privacy Policy clearly outlines the types of data we collect, how it is used, who it may be shared with, and your rights as the owner of that data. Please read it carefully before using our platform.

Updated: January 2026

Six Ways winbox88my Protects Your Privacy

Before reading the full policy, here are winbox88my's core commitments to the privacy and personal data security of our Malaysian members.

Data Is Never Sold to Third Parties

Winbox88my has never sold, rented, or transferred member personal data to any third party for marketing purposes, and never will, without your explicit consent. Your data belongs to you — it is not a business asset of ours.

No Data Selling
Minimum Data Access

Only winbox88my staff who genuinely require access to your data to carry out their duties — such as the customer support and finance teams — are permitted to view members' personal information, and all access is logged and audited.

Audited & Logged
Privacy Controls in Your Hands

Winbox88my provides privacy settings that allow you to manage your marketing communication preferences, tracking permissions, and data deletion requests directly from your account or through our Bahasa Malaysia support team.

Self-Manageable
Clear Data Retention Periods

Winbox88my does not retain your data indefinitely without a clear purpose. Transaction data is retained in accordance with applicable Malaysian legal requirements, while marketing data will be deleted once you withdraw your consent. We are transparent about how long your data is kept.

Clear Time Limits
Compliance with the Malaysian Personal Data Protection Act

Winbox88my operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how the personal data of Malaysians is collected, used, and stored. Compliance with this Malaysian legislation is a core commitment of winbox88my.

Malaysia PDPA
1
Personal Data We Collect
Types of information winbox88my collects from you

Winbox88my collects your personal data only when it is necessary to provide our platform services safely and effectively. We do not collect irrelevant or excessive information. Below are the categories of data we collect and the purposes for which they are collected:

Data Category Example Information Primary Purpose
Identity Data Full name, date of birth, identification card number (if requested for verification) Identity verification, legal compliance
Contact Data Malaysian phone number, email address Account communications, transaction notifications, customer support
Financial Data EWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow details, FPX bank account Processing deposits and withdrawals in MYR
Technical Data IP address, device type, operating system, web browser version, device identifier Account security, fraud detection, platform optimisation
Usage Data Betting records, games played, session duration, transaction history Account management, responsible gaming compliance, platform analytics
Communication Data Live Chat conversation records, emails sent to winbox88my support Complaint resolution, service quality improvement

1.1 Data You Provide Directly

Most of the data winbox88my holds about you is data you have provided directly during the account registration process, identity verification, deposit or withdrawal forms, or when contacting our support team. Winbox88my will never ask for your online banking password or eWallet password.

1.2 Data Collected Automatically

When you use the winbox88my platform — whether via the website or mobile app — our systems automatically record certain technical information such as your IP address, device type and activity logs required for security and fraud detection purposes. This data is analysed in aggregate and is not used to identify you personally except in the course of a security investigation.

Important Note: winbox88my does not collect sensitive data such as health information, religious beliefs, political views or biometric data. Should winbox88my need to collect any additional data beyond what is listed above in the future, you will be informed and your consent will be sought beforehand.
2
How Winbox88my Uses Your Data
The purpose and legal basis for the use of personal data

Winbox88my uses your personal data only for legitimate purposes directly related to the services you use. We do not use your data for purposes you would not expect or that are unrelated to the winbox88my platform.

2.1 To Operate Your Account and Services

This is the primary and most important purpose. Your data is used to process your winbox88my account registration, verify your identity, process deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, process withdrawals of your winnings to the same account, display your betting and transaction history within your account, and provide customer support whenever you contact us.

2.2 For Security and Fraud Prevention

Winbox88my uses technical and usage data to identify suspicious activity, prevent unauthorised access to your account, detect and investigate fraud, and maintain the integrity of gaming and betting on our platform. This includes monitoring unusual betting patterns, detecting logins from unfamiliar devices or locations, and identifying multiple account usage.

2.3 For Legal Compliance

Winbox88my has certain legal obligations that require the use and retention of specific data — including financial transaction records required under applicable Malaysian legislation, mandatory reporting to relevant authorities in cases of confirmed illegal activity, and age verification to ensure the platform is only accessed by individuals aged 18 and above.

2.4 For Service Communications

Winbox88my uses your phone number and email to send important account-related notifications – such as deposit confirmations, withdrawal confirmations, account security alerts, and relevant promotional updates (if you have consented to receive them). You can manage your marketing communication preferences at any time through your account settings.

winbox88my will not use your data to send third-party advertisements or promotions unrelated to the winbox88my platform without your explicit prior consent.

2.5 To Improve the winbox88my Platform

Aggregated and anonymised usage data is used by winbox88my's technology team to understand how players use the platform, identify areas for improvement, optimise mobile and web app performance, and make better product design decisions for the Malaysian player experience.

3
Data Sharing with Third Parties
Who may access your data and under what circumstances

Winbox88my does not sell, rent, or transfer member personal data to third parties for marketing purposes. However, there are limited situations where winbox88my needs to share certain data with trusted parties in order to operate our services:

3.1 Payment Service Providers

To process your deposits and withdrawals, winbox88my is required to share the necessary transaction information with payment service providers such as the FPX gateway and integration providers for Touch 'n Go eWallet and GrabPay. This sharing is limited strictly to the information needed to complete the transaction, and all such providers are bound by strict data confidentiality agreements with winbox88my.

3.2 Malaysian Legal Authorities

Winbox88my will disclose member personal data to the relevant Malaysian authorities when required to do so by a valid court order, police investigation request, or other legal compliance obligation. In such circumstances, winbox88my will only disclose the information specifically required by that request.

3.3 Technology and Platform Service Providers

Winbox88my works with trusted third-party technology providers to handle specific aspects of our platform — including server infrastructure providers, casino and poker gaming software vendors, and analytics tools. All providers are bound by strict data protection terms and may only use shared data for the purposes specified in their agreements with winbox88my.

winbox88my Guarantee: We never sell members' personal data to any party for marketing, advertising or any commercial purpose not directly related to the winbox88my services you use. This is a core commitment that will not change.

3.4 Cross-Border Data Transfers

Some of the technology service providers that winbox88my uses may operate outside Malaysia. In such cases, winbox88my ensures that any data transfers are protected by data transfer agreements that meet or exceed the protection standards required under Malaysia's PDPA.

4
Data Security at winbox88my
Technical and procedural measures we employ

4.1 Data Encryption

All communications between your device and the winbox88my platform are secured using TLS 1.3 with AES-256 encryption — the highest standard currently available and equivalent to the protection used by Malaysia's leading financial institutions. This means that even if someone were to intercept your data packets, they would be unreadable without the encryption key held solely by winbox88my and your device.

4.2 Internal Access Controls

Winbox88my member personal data is only accessible to staff with a legitimate business need to access it. All staff access to member data is logged and regularly audited. winbox88my staff are also subject to strict confidentiality agreements and mandatory data protection training before being permitted to handle member data.

4.3 Continuous Security Monitoring

Winbox88my operates 24/7 infrastructure security monitoring using automated threat detection systems that identify and respond to intrusion attempts, cyberattacks, and suspicious activity in real time. Any security incident affecting member data will be reported to the affected members within the timeframe required by applicable law.

4.4 Secure Password Management

Winbox88my does not store your account password in plain text. Passwords are stored using one-way hashing, which means even winbox88my itself cannot read your password. This means that if you forget your password, it must be reset — it cannot be retrieved. winbox88my also supports two-factor authentication (2FA) as an additional layer of security, and we encourage all members to enable it.

If you suspect your winbox88my account has been accessed without authorisation, change your password immediately and contact our support team via Live Chat. We will take prompt action to secure your account.
5
Cookies & Tracking Technologies
How winbox88my uses cookies and similar technologies

5.1 What Are Cookies and Why We Use Them

Cookies are small text files stored on your device when you visit the winbox88my website. Winbox88my uses cookies to ensure the platform functions correctly, save your user preferences, securely verify your login session, and collect analytics data that helps us improve the user experience.

5.2 Types of Cookies winbox88my Uses

  • Essential Cookies: Required for the winbox88my platform to function – including maintaining your login session, processing transactions, and ensuring account security. These cookies cannot be disabled without affecting core platform functionality.
  • Performance Cookies: Collects information on how users interact with the winbox88my platform – which pages are visited most frequently, page load times, and any errors encountered. This data is used in aggregate to improve platform performance.
  • Functional Cookies: Saves your preferences such as odds display format (decimal, fractional or moneyline), selected language and other display settings, so you do not need to reconfigure them each time you log in.
  • Marketing Cookies: Used to display relevant winbox88my promotions and offers to you based on your interests and betting activity on the platform. This type of cookie is only activated with your consent.

5.3 How to Manage Cookies

You can manage or disable non-essential cookies through your web browser settings or via the cookie preference panel available on the winbox88my website. Please note that disabling essential cookies may affect the functionality of the winbox88my platform, including your ability to log in to your account securely.

Note on Mobile App: The winbox88my app for Android and iOS uses device identifiers and mobile analytics technologies that function similarly to cookies to enhance the user experience. You can manage these permissions through your device settings.
6
Your Rights as a Data Subject
Your rights over your personal data at winbox88my

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several protected rights regarding your personal data held by winbox88my. We fully respect and facilitate the exercise of these rights:

Right of Access

Request a copy of the personal data winbox88my holds about you.

Right to Rectification

Request the correction of any inaccurate or incomplete personal data held about you.

Right to Erasure

Request the deletion of your personal data under certain circumstances provided by law.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Restriction

Request that winbox88my restrict the processing of your data in certain circumstances.

Right to Portability

Receive your data in a machine-readable format for portability if required.

6.1 How to Exercise Your Rights

To exercise any of the rights above, contact the winbox88my support team via Live Chat or by email at support@winbox88my.click, clearly stating the right you wish to exercise along with your account information for identity verification purposes. winbox88my will acknowledge your request within 3 business days and provide a full response within 21 business days in accordance with PDPA requirements.

6.2 Exceptions and Limitations

There are situations where winbox88my may not be able to fulfil your request in full – for example, data deletion cannot be carried out on records that winbox88my is legally required to retain under Malaysian law, such as financial transaction records. In such cases, winbox88my will explain the reason and the applicable retention period to you.

7
Data Retention & Deletion
How long winbox88my retains your data

Winbox88my does not retain your personal data for longer than is necessary for the purpose it was collected, or to fulfil any related legal obligations. The following are the general data retention guidelines at winbox88my:

  • Active Account Data: Account data is retained for as long as your account remains active on winbox88my. If an account has been inactive for more than 3 consecutive years, winbox88my will send you a notice before taking any further action.
  • Financial Transaction Records: Deposit, withdrawal, and betting records are retained for 7 years in accordance with applicable Malaysian financial legislation, even after an account is closed.
  • Communication Records: Customer support conversation records are retained for 2 years from the date of communication for reference in the event of any subsequent dispute.
  • Identity Verification Data: Identity verification documents are retained for the duration of the active account and for up to 5 years after account closure, in compliance with anti-money laundering requirements.
  • Marketing Data: Data collected for marketing and promotional purposes is deleted immediately upon withdrawal of your marketing consent or closure of your account.
After Account Closure: When you close your winbox88my account, we will delete or anonymise your personal data that is no longer required for legal purposes within 90 days of the account closure date. Data that must be retained for legal compliance will be isolated and access restricted to authorised personnel only.
8
Contact winbox88my About Privacy
How to contact us about any data privacy matter

If you have any questions, concerns or complaints about how winbox88my handles your personal data, or if you wish to exercise any of the data protection rights set out in this document, please contact us through the following channels:

  • Live Chat: Available 24/7 directly through the winbox88my website or app. This is the fastest channel and our first preference for privacy-related enquiries requiring an immediate response. Our support team operates in Bahasa Malaysia.
  • Email: support@winbox88my.click — for formal requests relating to data protection rights, privacy complaints, or any matter requiring written documentation. Please include "Data Privacy Request" in your email subject line to ensure it is handled by the right team.

Winbox88my is committed to responding to all privacy-related enquiries within the timeframes stipulated under Malaysia's PDPA. For complaints that cannot be resolved satisfactorily directly through winbox88my, you have the right to escalate the matter to the relevant Malaysian Personal Data Protection Department.

This Privacy Policy may be updated from time to time to reflect changes in our data practices or applicable law. The latest version is always available on this page. Material changes will be communicated to members via in-account notices or email at least 14 days before they take effect.

Thank you for taking the time to read the winbox88my Privacy Policy. Your trust is the foundation of our relationship — and winbox88my remains committed to safeguarding and protecting your privacy at every stage of your experience on our platform.

Register for a winbox88my Account – Safe & Secure

We have explained how we protect your data. Register your free account today and enjoy a safe, fair, and trusted Malaysia sports betting experience.

Touch 'n Go
GrabPay
DuitNow
Maybank2u
CIMB Clicks
Boost & ShopeePay
winbox88my Privacy Policy Summary

Winbox88my protects all your personal data with 256-bit SSL encryption. We do not sell your data to third parties. You have the right to access, correct, and request deletion of your data at any time. By using the winbox88my platform, you agree to this Privacy Policy and Terms & Conditions us. For privacy-related enquiries, contact us at support@winbox88my.click.

Responsible Gaming

Winbox88my Cares About Your Wellbeing

Betting and casino games should be an enjoyable form of entertainment, not a source of financial stress or problems in your daily life. Winbox88my provides daily and weekly deposit limits, session time limits, and self-exclusion options to help you stay in control. Only individuals aged 18 and above are permitted to use this platform. If gaming starts to negatively affect your life, please use our self-control tools or contact the winbox88my support team. Learn more on the page Responsible Gaming.

Frequently Asked Questions About the Winbox88my Privacy Policy

Answers to the most frequently asked questions about how winbox88my handles and protects the personal data of Malaysian members.

No. winbox88my does not sell, rent or transfer members' personal data to advertisers or third parties for marketing purposes. Your data is shared only in very limited circumstances — with payment service providers that process your transactions (such as the Touch 'n Go eWallet, GrabPay or FPX gateways), with platform technology providers who are bound by strict confidentiality agreements, and with Malaysian legal authorities when required by a court order. None of these situations involve your data being used for third-party advertising purposes.

You may request a copy of the personal data winbox88my holds about you by contacting our support team via Live Chat or by emailing support@winbox88my.click with the subject line "Data Access Request". winbox88my will first verify your identity before providing the requested information, and will respond within 21 business days. Data will be provided in a readable format such as PDF or CSV depending on the type of data requested. No fee is charged for the first request within any 12-month period.

When you close your winbox88my account, personal data that is no longer required for legal purposes will be deleted or anonymised within 90 days of the account closure date. Certain data must be retained for longer periods based on Malaysian legal requirements – for example, financial transaction records are kept for 7 years and identity verification records for up to 5 years after account closure. Retained data is stored with strictly limited access and is not used for any marketing or active service purposes.

Yes, you can opt out of marketing emails and notifications from winbox88my at any time. There are two ways to do this: first, click the "Unsubscribe" link found at the bottom of any marketing email you receive from winbox88my; or second, log in to your account, go to notification settings, and turn off marketing communications. Changes will take effect within 48 hours. Please note that opting out of marketing communications will not stop important account-related notices such as transaction confirmations, security alerts, and critical service notifications.

winbox88my applies multiple layers of protection to members' financial information. First, all financial data transmitted between your device and winbox88my's servers is encrypted using TLS 1.3 and AES-256 — the same standard used by Maybank and CIMB. Second, full eWallet account numbers such as those for Touch 'n Go or GrabPay are not permanently stored in winbox88my's systems after a transaction is completed — only a token or transaction reference is retained. Third, access to members' financial data within winbox88my's systems is restricted to specific authorised staff, with access logs that are regularly audited. Additionally, winbox88my will never ask for your eWallet password or bank PIN — if anyone claiming to represent winbox88my requests such information, please report it to our support team immediately.
Bahasa Melayu