winbox77 Privacy Policy

1. Introduction

winbox77 ("winbox77", "we", "us", "our") operates the online gaming platform accessible at winbox77.one and is committed to protecting the privacy and personal data of all players and users of our services. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by winbox77.

This Policy is intended to be read in conjunction with the winbox77 Terms & Conditions, which govern your use of the winbox77 platform. Terms not otherwise defined in this Policy have the meanings ascribed to them in the Terms & Conditions.

If you have any questions about how winbox77 handles your personal data, you may contact us at any time via Live Chat or by email at [email protected].

2. Personal Data We Collect

winbox77 collects the following categories of personal data from players:

2.1 Identity & Contact Information

• Full legal name
• Date of birth
• Email address
• Mobile phone number
• Residential address
• Identity document details (where required for verification)

2.2 Financial Information

• Payment method details (e.g., bank account identifiers associated with Maybank, CIMB, Public Bank, Hong Leong; e-wallet identifiers associated with Touch n Go eWallet, Boost)
• Transaction history — deposit amounts, withdrawal requests, dates and times
• Account balance information

2.3 Gaming Activity Data

• Game history, bet amounts, and outcomes
• Session duration and frequency data
• Bonus and promotion redemption records
• Responsible gaming limit settings and self-exclusion records

2.4 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Session identifiers and authentication tokens
• Log data including access times, pages visited, and errors encountered

3. How We Collect Your Data

winbox77 collects personal data through the following means:

• Direct provision by you — when you register a winbox77 account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automated collection — through cookies, session tokens, server logs, and similar technologies as you interact with the winbox77 platform.
• Third-party sources — from identity verification service providers, payment processors, fraud detection partners, and publicly available sources, where necessary to fulfil our legal obligations or to verify the accuracy of information you have provided.

4. Purpose & Legal Basis for Processing

The following table sets out the purposes for which winbox77 processes your personal data and the legal basis relied upon for each processing activity:

Where winbox77 relies on legitimate interests as the legal basis for processing, we have assessed that our legitimate interests are not overridden by your fundamental rights and freedoms. You may request further information about this assessment by contacting us.

5. Sharing Your Personal Data

winbox77 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors and e-wallet operators — including the operators of Touch n Go eWallet, Boost, and Malaysian banking partners, for the purpose of processing deposits and withdrawals.
• Game providers — licensed game studios that provide games available on the winbox77 platform, to the extent necessary to deliver game services.
• Identity verification providers — third-party KYC service providers used to verify the identity and age of winbox77 account holders in accordance with our regulatory obligations.
• Fraud and security service providers — for the purposes of preventing, detecting, and investigating fraud and other financial crime.
• Regulatory authorities and law enforcement — where disclosure is required by applicable law, court order, or regulatory obligation.
• Professional advisers — legal, financial, and auditing advisers bound by confidentiality obligations, where necessary for the operation of our business.

All third-party recipients are contractually required to process your personal data only for the specified purpose and to implement appropriate technical and organisational security measures.

6. Cookies & Tracking Technologies

6.1 What We Use

The winbox77 platform uses cookies and similar tracking technologies, including session cookies, persistent cookies, and local storage tokens, to operate and improve the platform, maintain your login session, and analyse usage patterns.

6.2 Types of Cookies

• Essential cookies — strictly necessary for the winbox77 platform to function, including authentication cookies that maintain your logged-in session.
• Functional cookies — used to remember your preferences, such as language settings and responsible gaming limit configurations.
• Analytics cookies — used to collect aggregated, anonymised data about how players navigate the winbox77 platform, allowing us to identify and resolve usability issues.

6.3 Cookie Control

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to access and use the winbox77 platform. Disabling analytics and functional cookies will not prevent you from using winbox77 but may affect your user experience.

7. Data Retention

winbox77 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, and thereafter for as long as required by applicable law or regulatory obligation. In practice, this means:

• Account data and identity verification records are retained for a minimum of five (5) years following account closure, in compliance with applicable anti-money laundering record-keeping requirements.
• Transaction and gaming activity records are retained for a minimum of five (5) years.
• Marketing preferences and communication records are retained until you withdraw consent, and for a reasonable period thereafter to demonstrate compliance.
• Technical log data is generally retained for a period not exceeding twelve (12) months, except where a longer retention period is required for security investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you.

8. Data Security

winbox77 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and winbox77 servers.
• Encryption of sensitive data fields at rest within winbox77 databases.
• Access controls limiting personal data access to winbox77 staff with a genuine business need.
• Regular security assessments and penetration testing of the winbox77 platform infrastructure.
• Device-based login verification and session timeout controls.

While winbox77 takes all reasonable precautions to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your winbox77 account credentials. If you suspect any unauthorised access to your account, please contact winbox77 Live Chat support immediately.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data processed by winbox77:

• Right of access — you may request a copy of the personal data that winbox77 holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data held about you.
• Right to erasure — you may request deletion of your personal data where winbox77 no longer has a legal basis for retaining it, subject to our legal record-keeping obligations.
• Right to restrict processing — you may request that we restrict our processing of your data in certain circumstances.
• Right to data portability — where processing is based on your consent or a contract, you may request a machine-readable copy of the personal data you have provided to winbox77.
• Right to withdraw consent — where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object — you may object to processing based on legitimate interests where you consider that your fundamental rights override those interests.

To exercise any of these rights, please contact winbox77 via Live Chat or email at [email protected]. winbox77 will respond to all data rights requests within a reasonable timeframe and in any event within thirty (30) days of receipt, unless an extension is required and communicated to you.

10. Children's Privacy

The winbox77 platform is strictly for adults aged 21 years and over. winbox77 does not knowingly collect personal data from individuals under 21 years of age. If winbox77 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted and the associated account closed immediately. If you believe a minor has registered a winbox77 account, please contact us immediately via Live Chat.

11. Cross-Border Data Transfers

winbox77 operates as an international gaming platform and may transfer your personal data to recipients located outside of Malaysia, including to our game provider partners, infrastructure providers, and identity verification service providers located in various jurisdictions globally. Where such transfers occur, winbox77 ensures that appropriate safeguards are in place to protect your personal data, including contractual provisions that require recipients to maintain data protection standards equivalent to those applicable in Malaysia.

12. Third-Party Links

The winbox77 platform does not contain links to external third-party websites other than those necessary to operate the platform's payment and gaming services. This Privacy Policy applies solely to the winbox77 platform. winbox77 is not responsible for the privacy practices of any third-party payment processor or game provider. Players are encouraged to review the privacy policies of any third-party services with which they interact.

13. Changes to This Privacy Policy

winbox77 reserves the right to amend this Privacy Policy at any time. Material changes to the Policy will be communicated to registered players via email or on-platform notification prior to the amendment taking effect. The most current version of this Privacy Policy is always available at winbox77.one/privacy-policy. Your continued use of the winbox77 platform following notification of an amendment to this Policy constitutes your acceptance of the revised terms.

14. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by winbox77, please contact us through the following channels:

• Live Chat: Available 24/7 via the winbox77 platform
• Email: [email protected]

winbox77 takes privacy enquiries seriously and will respond to all substantiated requests within the timeframes stated in Section 9 of this Policy. For matters of suspected data breach or urgent security concerns, please use the Live Chat channel to enable the fastest possible response from the winbox77 team.