This Privacy Policy explains how winbox1 collects, uses, stores, and protects the personal data of Members and visitors. winbox1 is committed to handling your data transparently, securely, and in accordance with applicable data protection principles.
All data transmissions protected with 256-bit SSL encryption.
winbox1 never sells your personal data to third parties.
Access, correct, or delete your personal data at any time.
Data stored on encrypted servers with restricted access controls.
Manage your cookie preferences directly through your browser.
Unsubscribe from marketing communications at any time.
winbox1 ("winbox1", "we", "us", "our") operates the online gaming platform accessible at https://winbox1.co (the "Platform"). In the course of providing our services — including the sportsbook, live casino, slots, payment processing, and customer support — winbox1 processes personal data relating to our Members and website visitors.
This Privacy Policy describes what personal data winbox1 collects, for what purposes, on what legal basis, and how long it is retained. It also describes your rights as a data subject and how you may exercise them. This Policy applies to all personal data processed by winbox1 in connection with the Platform, regardless of the device or method used to access it.
By registering an account on the winbox1 Platform or by continuing to use our services after this Policy has been published, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices as described herein, you should not use the winbox1 Platform.
winbox1 collects personal data in the following categories, depending on the nature of your interaction with the Platform:
When you create a winbox1 account, we collect: full name, date of birth, residential address, email address, mobile phone number, and username. This information is required to create and administer your account.
To comply with our obligations as a licensed operator and to process withdrawal requests, winbox1 collects: government-issued photo identification (such as MyKad, passport, or driving licence), proof of residential address, and proof of payment method ownership. KYC documents are handled with enhanced security controls and access is restricted to authorised compliance personnel only.
When you make deposits or withdraw funds, winbox1 processes payment transaction data including payment method type (e.g. Touch n Go eWallet, Maybank FPX, CIMB), transaction amounts, and transaction reference numbers. winbox1 does not store full payment card numbers or eWallet PINs.
winbox1 records gaming and betting activity data including: game sessions and outcomes, bet amounts and results, deposit and withdrawal history, bonus claims and wagering activity, and account balance movements. This data is necessary for account administration, dispute resolution, and responsible gaming monitoring.
winbox1 automatically collects certain technical data when you access the Platform, including: IP address, browser type and version, operating system, device identifiers, referring URL, pages visited, and session duration. This data is used for security monitoring, fraud prevention, and platform performance optimisation.
When you contact winbox1's customer support team via live chat, email, or other channels, we retain records of those communications — including the content of your messages and the date and time of contact — for quality assurance, training, and dispute resolution purposes.
| Data Category | Examples | Purpose |
|---|---|---|
| Registration | Name, DOB, email, phone | Account creation & administration |
| KYC / Identity | MyKad, passport, proof of address | Age verification, AML compliance |
| Financial | TnG eWallet, FPX, transaction amounts | Payment processing, fraud prevention |
| Gaming Activity | Bets, game sessions, balances | Account management, responsible gaming |
| Technical | IP address, device type, browser | Security, fraud detection, analytics |
| Communications | Support chat logs, emails | Customer service, dispute resolution |
winbox1 uses the personal data described above for the following purposes:
winbox1 processes personal data on the following legal bases:
winbox1 does not sell your personal data to any third party. We may share your data with the following categories of recipients only where necessary:
We share relevant financial and identity data with payment processors — including Touch n Go, Boost, Maybank, CIMB, and FPX operators — to the extent necessary to process your transactions. These providers are contractually required to handle your data securely and to use it only for transaction processing purposes.
Where technically required for game delivery and fairness certification, certain session and gaming activity data may be shared with our licensed game software providers. These providers operate under confidentiality agreements and applicable licensing requirements.
winbox1 may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where required by law, court order, or regulatory demand. Such disclosures are made only to the extent legally required and, where permitted, winbox1 will endeavour to notify you of any such disclosure.
winbox1 may share certain technical and account data with third-party fraud detection services to identify and prevent fraudulent activity. These services operate under data processing agreements that restrict the use of your data to fraud prevention purposes only.
winbox1 retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods:
Upon expiry of the applicable retention period, winbox1 will securely delete or anonymise your personal data. Where anonymisation is not practicable, data will be retained in a form that does not permit identification of the individual.
winbox1 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, winbox1 will notify affected Members and relevant authorities in accordance with applicable data breach notification obligations.
Cookies are small text files placed on your device by websites you visit. winbox1 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform, remember your preferences, and analyse usage patterns.
You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the winbox1 Platform. Disabling essential cookies will prevent you from logging into your account.
Subject to applicable law, you have the following rights in relation to the personal data winbox1 holds about you:
To exercise any of these rights, please contact winbox1 via live chat or by email at the address shown in Section 13. winbox1 will respond to valid data subject requests within 30 days. Requests may require identity verification before processing.
The winbox1 Platform is strictly not directed at, and should not be used by, any person under the age of 21. winbox1 does not knowingly collect personal data from persons under 21. If we discover or are notified that personal data has been collected from a person under 21, the associated account will be immediately terminated and all personal data deleted in accordance with our data retention procedures. If you believe that a person under 21 has registered an account on the winbox1 Platform, please contact us immediately via the contact details in Section 13.
winbox1 may transfer your personal data to servers and service providers located outside Malaysia in the course of operating the Platform and processing payments. Where such transfers occur, winbox1 ensures that appropriate safeguards are in place — including contractual data protection clauses consistent with applicable data protection standards — to ensure that your data receives a level of protection equivalent to that required in Malaysia.
By using the winbox1 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than Malaysia, subject to the protections described in this Policy.
winbox1 reserves the right to update this Privacy Policy at any time. Material changes — such as changes to the categories of data collected, changes to how data is shared, or changes to your rights — will be communicated to registered Members via email or in-platform notification at least 14 days before taking effect. The updated Policy will be published on this page with a revised effective date.
Continued use of the winbox1 Platform after an updated Policy has taken effect constitutes your acknowledgment of the revised terms. If you do not agree with the updated Policy, you should cease using the Platform and contact us to request account closure.
For any enquiries, requests, or concerns relating to this Privacy Policy or winbox1's data practices, please contact us via:
winbox1 will acknowledge data-related enquiries within 48 hours and provide a substantive response within 30 calendar days, unless the complexity of your request requires additional time, in which case we will notify you of the extended timeframe.
Join Malaysia's fastest-cashout gaming platform — 3,000+ games, 1–2 hour TnG eWallet payouts, and your data protected by 256-bit SSL encryption.
21+ Only. Please gamble responsibly. Responsible Gaming