Privacy Policy Winbox VIP – Malaysia Personal Data Protection

1 Introduction

Winbox VIP understands that privacy is of the utmost importance to every user on our platform. We are committed to handling all your personal information responsibly, transparently, and in full accordance with the applicable data protection laws in Malaysia, in particular the Personal Data Protection Act (PDPA) 2010.

This Privacy Policy details what types of data we collect, why we need it, how we use it, who may receive it, how long we retain it, and what rights you hold regarding your personal data.

This policy applies to all services provided by Winbox VIP — including the winboxvip.bet website, mobile platform, Sports Betting (Malaysia Super League, EPL, badminton, e-sports), Live Casino, poker and all our entertainment products.

If you have any questions after reading this document, please contact our Data Privacy Officer by email at privacy@winboxvip.bet or via the in-platform 24/7 Live Chat.

2 Personal Data We Collect

Winbox VIP only collects data that is strictly necessary to deliver our services. Below are the categories of data we collect and their sources:

Data Category	Example Information	Source
Identity Information	Full name, MyKad/passport number, date of birth, gender	Provided by members during registration / KYC
Contact Information	Phone number, email address, residential address	Provided by the member upon registration
Financial Data	E-wallet accounts (Touch 'n Go, GrabPay), bank account numbers, deposit and withdrawal transaction history	During financial transactions
Usage Data	Betting history, games played, sport types (football, badminton, poker), and session times	Automatically generated during use
Technical Data	IP address, browser type, device type, operating system, session cookies	Automatically collected upon accessing the platform
Communication Information	Records of interactions with customer support, emails sent to us, feedback	During interactions with our team

3 Purposes for Using Personal Data

Winbox VIP uses the personal data collected for the following purposes:

• Account Management: Processing registrations, verifying member identities, managing logins, and keeping your account secure.
• Financial Transaction Processing: Processes deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u and CIMB Clicks, and handles withdrawals securely.
• Age Verification and KYC: Ensuring all members meet the minimum age requirement of 18 and conducting necessary legal compliance checks.
• Service Provision: Ensuring you have access to all games and services Winbox VIP that you are entitled to.
• Experience Personalisation: Personalising game recommendations, betting odds and relevant promotions based on your usage habits.
• Customer Service: Responding to enquiries, resolving complaints, and providing technical assistance to members.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Legal Compliance: Meeting reporting obligations to regulatory bodies and authorities as required by law.
• Analytics & Improvement: Understanding how users interact with the platform to improve the overall experience and develop new features.
• Marketing (with Consent): Sending promotional information, bonus offers, and platform updates to members who have given their consent.

4 Data Sharing with Third Parties

Winbox VIP does not sell, rent, or trade your personal data to any party for marketing purposes. However, in certain limited circumstances, we may need to share data with the following parties:

• Payment Processing Providers: Service providers such as Touch 'n Go, DuitNow, GrabPay and FPX banks receive transaction data necessary to process your deposits and withdrawals. All processing is conducted under strict confidentiality agreements.
• Game Software Providers: Casino, slots and poker game providers may receive session data necessary to operate the games. No full identity data is shared.
• Identity Verification Services: Approved third-party KYC providers may receive identity documents for the purposes of age verification and anti-money laundering compliance.
• Legal Authority: Winbox VIP will disclose personal data when required by a court, the police, Bank Negara Malaysia, or other regulatory bodies with lawful authority to request such information.
• Business Transfer: In the event of a merger, acquisition or sale of assets Winbox VIP, user data may be transferred to the new entity, subject to notification to members and compliance with the terms of this privacy policy.

5 Data Storage & Transfer

Member personal data Winbox VIP stored on secure servers within or outside Malaysia. Servers outside Malaysia are subject to contractual protections equivalent to the PDPA 2010 standard.

Data retention periods are as follows:

• Active Account: Data is retained for as long as your account is active and is used to provide our services.
• After Account Closure: Financial and identity data is retained for 7 years after account closure to meet anti-money laundering legal requirements and financial audit obligations.
• Usage Data and Logs: System logs and technical records are retained for 2 years for security purposes and dispute resolution.
• Marketing Data: Data collected for marketing purposes is retained until you withdraw your consent.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.

6 Data Security Measures

Winbox VIP implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, damage or disclosure:

• 256-bit SSL/TLS Encryption: All data communications between your browser and our servers are protected by bank-grade encryption.
• Data-at-Rest Encryption: Sensitive personal data is stored in encrypted form on our servers.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of account security.
• Internal Access Controls: Only staff with specific authorisation may access member personal data, and all access is logged for audit purposes.
• Regular Security Scans: Our systems are regularly tested through penetration testing conducted by independent security experts.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect and respond to any security threats.

7 Your Privacy Rights

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and internal policy Winbox VIP, you have the following rights regarding your personal data:

• Right to Access: You have the right to request and receive a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data under certain circumstances, subject to our legal obligations.
• Right to Restrict Processing: You may request that we limit how we use your data under certain circumstances.
• Right to Withdraw Consent: You may withdraw consent for certain data processing activities (particularly for marketing purposes) at any time.
• Right to Complain: You have the right to lodge a complaint with the relevant data protection regulatory authority if you believe your privacy rights have been violated.

To exercise any of the above rights, please submit a written request to privacy@winboxvip.bet or via our platform's Live Chat. Requests will be processed within 14 business days from the date of receipt.

8 Cookie Policy

Winbox VIP uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage or disable optional cookies at any time through your browser settings. Disabling certain cookies may affect some platform functionality.

9 Child Protection

Winbox VIP takes the protection of minors in the online environment very seriously. Our platform is strictly for users aged 18 and above, with no exceptions.

We do not intentionally collect or store any personal data from individuals under the age of 18. Should we discover that data has been collected from someone under 18, the account will be terminated immediately and all related data will be deleted from our systems within 48 hours.

If you are a parent or guardian and believe your child under the age of 18 has accessed our platform, please contact us immediately at privacy@winboxvip.bet.

10 Contacting the Winbox VIP Data Privacy Officer

For any enquiries, concerns or requests relating to this Privacy Policy or the handling of your personal data by Winbox VIP, please contact us through the following channels:

• Privacy Email: privacy@winboxvip.bet
• General Support Email: support@winboxvip.bet
• Live Chat: Available 24/7 on the winboxvip.bet platform
• Response Time: Privacy enquiries will be responded to within 14 business days

We welcome any concerns you may have and are committed to addressing them seriously and with respect.