🔒 Winbox77 Data Protection Document

Winbox77 Privacy Policy – Personal Data Protection for Malaysian Players

Winbox77 is fully committed to protecting the privacy and security of every member's personal data. This document transparently outlines how we collect, use, store, and safeguard your information as a player on our platform in Malaysia.

Last updated: 1 January 2026 Bahasa Melayu (ms-MY) Compliant with Malaysia's PDPA 256-bit SSL Encryption
PDPA Compliant
Personal Data Protection Act 2010
Data Not Sold
Not shared with third parties
Full Access Rights
View, edit, or delete your data
Data Kept Confidential
End-to-end encryption

Winbox77's Privacy Commitment to Malaysian Players

Six core principles that guide how winbox77 manages your personal data on a daily basis.

Purpose-Driven Data Collection

Winbox77 only collects personal data that is strictly necessary for platform operations and the provision of services to our Malaysian members. We do not collect information irrelevant to those purposes, nor do we retain data for longer than is required.

Enterprise-Grade Data Security

All winbox77 member data is protected with 256-bit SSL encryption, multi-layered firewalls, and a round-the-clock threat monitoring system. Our servers are housed in certified data centres with strict access controls and regular security audits.

No Sale of Data to Third Parties

Winbox77 has never and will never sell, rent, or transfer members' personal data to any third party for marketing or commercial purposes without your explicit consent. Your data belongs to you — it is not a business asset for us to sell to anyone.

Members' Full Rights Over Their Data

As a Winbox77 member, you have the full right to access, correct, update, or request the deletion of your personal data at any time. We provide a straightforward and transparent process for exercising these rights through your account or our customer support.

Malaysia PDPA Compliance

The winbox77 Privacy Policy is designed and regularly updated to ensure full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant data protection legislation in force in Malaysia.

Data Breach Notification

In the event of a data breach that affects your personal information, Winbox77 is committed to notifying you within 72 hours of becoming aware of the incident, in line with international data protection best practices.

How Is Your Data Used?

Winbox77 uses your personal data only for legitimate and necessary purposes. The chart on the right shows the percentage breakdown by purpose category — all in the interest of your safety and experience as our member in Malaysia.

We never use your data for purposes outside the categories stated here without first obtaining your specific consent.

Account Management & Security100%
Transaction Processing (Deposits/Withdrawals)100%
Fraud Prevention & Anti-Money Laundering100%
Customer Support & Service Communications85%
Platform Improvement & User Experience70%
Promotional Communications (with your consent)40%

IMPORTANT NOTE: By registering and using the Winbox77 platform, you confirm that you have read and understood this Privacy Policy. We encourage you to read this document carefully. If you have any questions, our support team is available 24/7 to help.

1 Introduction

Winbox77 ("we", "our platform") operates the website winbox77.biz and all associated digital services. We understand how important privacy is to every Malaysian player, and we take that responsibility seriously. This Privacy Policy details how winbox77 handles the personal information you provide when registering and using our platform.

This policy applies to all registered Winbox77 members and any individual accessing or using our platform in Malaysia, regardless of the method of access — whether via a web browser on a desktop, smartphone, or tablet. We are committed to protecting your privacy in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia.

2 Types of Personal Data Collected

Winbox77 collects various types of personal information depending on how you interact with our platform. The following are the categories of data we may collect:

2.1 Registration & Identity Information

  • Full name as stated on your Malaysian identity document (MyKad or passport)
  • Date of birth and gender
  • An active Malaysian phone number
  • Personal email address
  • National identity card number (MyKad) — only when required for KYC verification
  • Account passwords in encrypted form (we do not store passwords in plain text)

2.2 Financial & Transaction Information

  • Malaysian bank account number or digital wallet number linked to your Winbox77 account
  • Deposit and withdrawal history in Malaysian Ringgit (RM)
  • Payment method details such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX
  • Complete transaction records for audit and fraud prevention purposes

2.3 Gaming Activity Data

  • Gaming history including slots, Live Casino, table games, jackpot, lottery, and Sports Betting
  • Win and loss records
  • Game preferences and platform usage patterns
  • Bonus and promotional information received, and rollover status

2.4 Technical Data

  • IP address and approximate geographic location
  • Device type, operating system, and web browser used
  • Cookie data and session identifiers
  • Platform access logs and usage timestamps
Data CategoryExampleRequirements
IdentityName, date of birth, MyKadRequired for KYC
ContactPhone, emailRequired for account
FinancialBank account number, RM historyRequired for transactions
GamesSlots, casino, and sports historyPlatform operations
TechnicalIP, device, cookiesSecurity & Analytics

3 How We Collect Data

Winbox77 collects your personal data through several different methods:

  • Directly from you: When you register an account, complete your profile, make a deposit or withdrawal, contact customer support, or fill in any promotional offer form
  • Automatically: When you access the winbox77 platform via browser or app, our system automatically records certain technical data such as your IP address, device type, and navigation patterns
  • Through cookies and tracking technologies: Our platform uses session cookies, preference cookies, and analytics cookies to enhance the user experience
  • From authorised third-party sources: In certain situations such as identity verification, we may receive information from approved third-party KYC service providers

4 Purpose of Data Use

Winbox77 uses collected personal data solely for legitimate and necessary purposes, including:

  • Account management: Registration, identity verification, profile management, and account recovery
  • Financial transaction processing: Managing deposits in MYR (RM) via Touch 'n Go, GrabPay, DuitNow, FPX, and more, along with secure withdrawal processing
  • Gaming services provision: Gives you access to all winbox77 games including slots, Live Casino, table games, jackpot, lottery, and Sports Betting covering Malaysia Super League, EPL, badminton, and more
  • Security and fraud prevention: Detecting and preventing unauthorised access, money laundering, and other fraudulent activities
  • Customer support: Responding to enquiries, resolving technical issues, and providing assistance to members
  • Legal compliance: Meeting reporting obligations required under applicable Malaysian law
  • Platform improvements: Analysing usage patterns to improve Winbox77 performance and user experience
  • Promotional communications: Sending Winbox77 bonus offers and promotional information to members who have consented to receive such communications

Winbox77 will not use your personal data for purposes beyond those stated above without first obtaining your explicit consent. You have the right to withdraw that consent at any time.

5 Data Sharing with Third Parties

Winbox77 does not sell, rent, or disclose members' personal data to third parties for marketing purposes. However, in certain limited situations, we may need to share information with the following parties:

  • Payment service provider: Providers such as Touch 'n Go, GrabPay, DuitNow, and Malaysian banks to process your deposit and withdrawal transactions
  • Licensed game providers: Gaming software providers such as Evolution Gaming and Pragmatic Play may receive the minimum session data required for the technical operation of their games
  • KYC service providers: Approved third-party identity verification companies for the Know Your Customer (KYC) process
  • Statutory authorities: When required by Malaysian law or a valid court order
  • Law enforcement: Where required for criminal investigations involving our platform

Warning: Winbox77 will never request your bank account information or password via email, SMS, or phone call. If you receive any such communication claiming to be from Winbox77, please contact our support team immediately.

6 Data Security & Protection Measures

Winbox77 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

Technical Measures

  • Data encryption in transit using 256-bit SSL/TLS
  • Data encryption at rest using AES-256 standard
  • Multi-layered firewall and intrusion detection system (IDS/IPS)
  • 24/7 real-time security monitoring
  • Two-factor authentication (2FA) is available for all member accounts
  • Regular security audits by certified independent third parties

Organisational Measures

  • Employee data access is granted on a need-to-know basis only
  • Regular information security training for all winbox77 staff
  • Binding confidentiality agreements for all employees and contractors
  • Documented security incident response procedures

7 Cookies & Tracking Technologies

The Winbox77 platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage, and enable certain features to function correctly. We use several types of cookies:

  • Session Cookie: Temporary cookies deleted when you close your browser, used to maintain your login session
  • Preference Cookies: Saves your preferences such as language and display settings for future visits
  • Analytics Cookies: Helps us understand how members use the platform for improvement purposes
  • Security Cookies: Helping detect and prevent fraudulent activity and ensuring account security

You can manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Winbox77 platform. Essential cookies for security and session authentication cannot be disabled without impacting your ability to log in to your account.

8 Cross-Border Data Transfers

In the course of operating the Winbox77 platform, there are situations where your personal data may be processed or stored on servers located outside Malaysia — for example, in the context of licensed international gaming software providers. In all such situations, Winbox77 ensures that:

  • Data transfers are made only to parties with data protection standards equivalent to or higher than Malaysia's requirements
  • Appropriate and legally binding data processing agreements are signed with all vendors who receive data
  • Transfers are carried out only to the extent necessary for the provision of Winbox77 services to you

9 Data Retention Period

Winbox77 does not retain your personal data for longer than is necessary for the purposes stated in this policy or as required by Malaysian law. General data retention guidelines are as follows:

Data TypeRetention PeriodReason
Active Account DataFor the duration of active accountOperational requirements
RM Transaction Records7 years after transactionLegal requirements
Game Records3 yearsAudit & disputes
Security Logs2 yearsSecurity investigation
Customer Support Data3 yearsService references
After account closure5-year minimumRegulatory requirements

Once the relevant retention period has expired, data will be securely deleted or anonymised in accordance with Winbox77's documented procedures.

10 Your Privacy Rights as a Winbox77 Member

As a Winbox77 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request the correction of inaccurate or incomplete data
  • Right to Erasure: Request the deletion of your data under certain circumstances
  • Right to Object: Object to the processing of your data for specific purposes
  • Right to Withdraw Consent: Withdraw your consent for certain processing at any time
  • Right to Portability: Request your data in a machine-readable format

To exercise any of these rights, please contact our privacy team by email at support@winbox77.biz clearly stating your request. We will process it within 30 business days.

11 Child Protection

The Winbox77 platform is not intended for children or individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If we discover that a child's personal data has been collected without verified parental or guardian consent, we will take immediate steps to delete that data.

If you know or have reason to believe that someone under the age of 18 is using or attempting to use the Winbox77 platform, please contact us immediately at support@winbox77.biz.

12 Contact Us About Privacy

If you have any questions, concerns, or requests regarding Winbox77's Privacy Policy or the handling of your personal data, please do not hesitate to reach us through the following channels:

  • Privacy Email: support@winbox77.biz — for privacy-specific enquiries and data rights requests
  • Live Chat: Available 24/7 on the Winbox77 platform — for general enquiries
  • Response Time: We are committed to responding to all privacy-related enquiries within 72 business hours

Winbox77 may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. You will be notified of any material changes via email or a notice on the platform. The effective date at the top of this document will be updated whenever changes are made.

FAQ — Winbox77 Data Privacy

Answers to the questions our Malaysian members ask most about data protection.

No. Winbox77 does not share your bank account information or financial details with any party other than the payment providers directly involved in processing your transactions — such as Touch 'n Go, GrabPay, DuitNow, or your own bank via FPX. All financial information is encrypted and protected to the highest standard. We do not have access to your digital wallet passwords or PINs, or your bank account credentials.

Yes, you may request the deletion of your personal data by contacting us at support@winbox77.biz. However, certain categories of data are required to be retained under Malaysian law — in particular, financial and transaction records must be kept for a minimum of 7 years in accordance with applicable legal requirements. Outside of these legal obligations, we will fulfil your deletion request within 30 business days.

When you close your Winbox77 account, we will initiate the anonymisation and deletion of your data in accordance with our established retention schedule. Data required for legal or regulatory purposes will be retained for the minimum period prescribed by Malaysian law before being permanently deleted. You may request a report on what data is still held and the reasons for its retention at any time after account closure.

You can opt out of Winbox77 promotional emails at any time by clicking the "Unsubscribe" link found at the bottom of every promotional email we send. You may also update your communication preferences through your Winbox77 account settings or by contacting our support team. Please note that essential account-related emails — such as transaction confirmations and security notices — cannot be disabled, as they form part of Winbox77's core service.
🛡️

Your Data Is Safe with Winbox77

Join over two million Malaysian players who have trusted Winbox77 to safeguard their privacy and data security. Our platform is built with security as the top priority — not an afterthought.

Register Free Login
PDPA Compliant 256-bit SSL Data Not Sold 24/7 Support
Terms & Conditions Responsible Gaming
Bahasa Melayu