Personal Data Protection

Privacy Policy Winbox77 — Your Data, Our Responsibility

Winbox77 is committed to protecting the privacy of every Malaysian member. This document transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Effective: 1 January 2026
Updated: 15 June 2026
PDPA 2010 Compliance
PDPA 2010 Compliance

All of winbox77's data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010 — the country's primary data privacy legislation.

256-Bit SSL Encryption

All personal data and financial transactions are protected by industry-standard 256-bit SSL encryption — the same standard used by banking institutions.

No Data Sales

Winbox77 has never and will never sell, rent, or transfer your personal data to third parties for marketing purposes without your consent.

Your Data Access Rights

You have the right to access, correct, delete, or transfer your personal data held by winbox77 at any time.

Secure Data Storage

Member data is stored on strictly secured servers with layered access controls, continuous monitoring, and daily backups to prevent data loss.

Data Breach Notification

In the event of any data breach affecting your information, winbox77 will notify you within 72 hours and take immediate action.

1. Introduction

Welcome to the winbox77 Privacy Policy. This document provides a comprehensive explanation of how winbox77 ("we", "Platform") handles your personal data as a member or visitor of winbox77.ws.

Your privacy is not merely a legal obligation for us — it is a core value we have upheld since winbox77 first launched. We understand that the trust you place in us by sharing your personal information is not something to be taken lightly. Every decision we make regarding your data is guided first and foremost by your interests and safety.

This Privacy Policy applies to all users who register, browse, or use any winbox77 services, including the web platform, mobile app, and all official communication channels. By using winbox77 services, you agree to the collection and use of information as described in this Policy.

Legal Basis: The winbox77 Privacy Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in commercial transactions in this country.

2. Personal Data We Collect

Winbox77 only collects personal data that is strictly necessary to provide our services to you. The following are the categories of data we may collect:

2.1 Information You Provide Directly

  • Identity information: Full name, identification number (MyKad), date of birth, gender, and nationality.
  • Contact information: Email address, mobile number, and mailing address.
  • Financial information: Bank account numbers, account holder names, and e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow).
  • Verification documents: MyKad or passport copy, bank statement (required for KYC on certain transactions).
  • Communications: The content of messages you send to our support team via live chat, email, or WhatsApp.

2.2 Information Collected Automatically

  • Usage data: Pages visited, games played, betting markets selected, time spent, and actions taken within the platform.
  • Technical data: IP address, device type, operating system, browser type, and language settings.
  • Location data: General location based on IP address (state or city) — not precise GPS coordinates.
  • Cookie data: Information stored on your device to enhance user experience and platform security.
Data Category Primary Purpose Retention Period
Identity informationAccount verification & KYC5 years after account closure
Financial informationTransaction processing7 years (tax requirement)
Usage dataService improvements2 years
Technical dataSecurity & fraud prevention1 year
Communication recordsComplaint resolution3 years

3. How We Use Your Data

Winbox77 uses collected personal data solely for legitimate and necessary purposes in operating our services. The following are our primary purposes:

  • Account management: Creating, verifying, and managing your winbox77 member account, including the mandatory KYC (Know Your Customer) process.
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u / CIMB Clicks), as well as withdrawals to your Malaysian bank account.
  • Service provision: Gives you full access to all winbox77 games and services, including EPL and Malaysia Super League Sports Betting, Live Casino, baccarat, jackpot slots, virtual sports, and e-sports.
  • Fraud prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse that could harm other members.
  • Customer support: Processing and responding to your enquiries, complaints, and support requests.
  • Legal compliance: Meeting reporting obligations to relevant Malaysian authorities when required by law.
  • Platform communications: Sending account-related notifications, relevant promotions, system updates, and other important information about winbox77's services.
  • Platform improvements: Analysing usage patterns to improve the interface, introduce new games, and enhance the overall player experience.
Our Commitment: winbox77 does not use your data for third-party marketing purposes or to build profiles for sale. All data use is limited strictly to what is necessary to provide you with the best possible service.

4. Data Sharing & Disclosure

Winbox77 does not sell, rent, or transfer your personal data to third parties for commercial purposes. However, there are specific situations where we may need to share data with authorised parties:

4.1 Trusted Service Providers

Winbox77 may share personal data with selected third-party service providers to support our platform operations. These include local Malaysian payment gateway providers, identity verification service providers, and cloud storage providers. All such providers are bound by strict data protection agreements and are permitted to use the data only for the specified purpose.

4.2 Legal Requirements

Winbox77 may disclose your personal data to Malaysian authorities — including the police, courts, or regulatory bodies — when required by law or a valid court order. In such circumstances, we will endeavour to notify you in advance unless prohibited from doing so by law.

4.3 Business Transfer

Should winbox77 be involved in any merger, acquisition, or asset transfer, user data may be transferred as part of that transaction. In such circumstances, we will ensure that the receiving party upholds data protection standards equivalent to or higher than those set out in this Privacy Policy.

Important: winbox77 never shares your personal data with advertisers, data brokers, social media platforms, or any third party for marketing purposes without your explicit prior consent.

5. Cookie Policy

Winbox77 uses cookies and similar tracking technologies to enhance platform functionality, maintain security, and deliver a better experience for you. Cookies are small text files stored on your device when you visit our website.

You can manage and delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of the winbox77 platform and you may be unable to log in or use certain features normally.

6. Personal Data Security

Winbox77 continuously invests in security infrastructure to ensure your personal data remains protected at all times. Key security measures we have implemented include:

  • End-to-end encryption: All communications between your device and winbox77's servers are encrypted using 256-bit SSL/TLS.
  • Layered access controls: Only authorised winbox77 staff with a legitimate operational need are permitted to access members' personal data.
  • 24/7 Monitoring: Our systems are continuously monitored by our cybersecurity team to detect and respond to any threats or suspicious activity.
  • Regular security audits: Winbox77 conducts regular penetration testing and security audits carried out by independent security experts.
  • Data segregation: Sensitive data such as financial information and passwords are stored in isolated environments and protected with additional encryption.
  • Daily backups: All data is backed up daily to a secure location to prevent loss resulting from technical failures or cyberattacks.
Shared Responsibility: While winbox77 takes all reasonable steps to protect your data, the security of your account also depends on your own actions — including using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to us.

7. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you as the data subject have the following rights regarding the personal data we hold about you:

1
Access Rights

You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 business days from the date the request is received.

2
Right to Rectification

If you find that any personal data we hold about you is inaccurate or outdated, you may request that we correct or update it promptly.

3
Right to Erasure

You may request the deletion of your personal data under certain circumstances — for example, when the data is no longer needed for the purpose for which it was originally collected. Such requests are subject to applicable legal retention requirements.

4
Right to Withdraw Consent

You may withdraw consent given to winbox77 to process your data at any time. Withdrawing consent does not affect the validity of any processing carried out prior to the withdrawal.

5
Data Portability Rights

You may request that we provide your personal data in a machine-readable format so you can transfer it to another service provider of your choice.

To exercise any of the above rights, please contact the winbox77 data protection team by email at privacy@winbox77.ws or via live chat within the platform. We will process your request within the timeframe required by law.

8. Data Retention Period

Winbox77 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law. Our general principle is to keep data no longer than needed.

Once your account is closed or your data is no longer needed, we will delete or anonymise it using appropriate security procedures. However, certain data may need to be retained for longer for the following reasons:

  • Tax and accounting requirements under Malaysian law — typically up to 7 years.
  • Ongoing investigations by authorities or active legal proceedings.
  • Protection against potential legal claims that may arise in the future.

9. Changes to This Privacy Policy

Winbox77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or technological developments. Each new version will be published on this page with a clear effective date.

For changes deemed material — that is, changes that significantly alter how we handle your personal data — winbox77 will endeavour to notify you via your registered email or in-platform notification at least 14 days before the changes take effect.

Continued use of the winbox77 platform after the effective date of any updates constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

Version 2.4.0 Effective: 1 January 2026 Updated: 15 June 2026

10. Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the winbox77 Data Protection Officer:

  • Dedicated privacy email: privacy@winbox77.ws
  • General support email: support@winbox77.ws
  • Live Chat: Available 24/7 within the winbox77 platform — state the subject "Data Privacy Enquiry"

We are committed to responding to all privacy-related enquiries within 5 business days. For formal data access or deletion requests, please submit a written request via email along with a copy of your identification for verification purposes.

If you are dissatisfied with how winbox77 has handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection, Ministry of Communications Malaysia, which is the PDPA regulatory authority in Malaysia.

Your Data Is Safe with Winbox77

Register with confidence — your privacy and data security are our absolute top priority from day one.

Bahasa Melayu