Privacy Policy

1 Introduction

Winbox777 is committed to protecting the privacy and personal information of all individuals who interact with our Platform — whether as registered players, prospective members, or visitors to our website. This Privacy Policy has been prepared to inform you clearly and transparently about how we handle personal data in connection with our online casino, sports betting, and gaming services targeting the Malaysian market.

This Policy applies to all personal data collected through the Winbox777 website at winbox777.cam, mobile applications, customer support channels, and any other touchpoints through which you interact with us. It covers data collected during account registration, deposit and withdrawal transactions involving Malaysian payment channels such as DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, Maybank, CIMB, Public Bank, and Hong Leong, as well as data generated through your gaming and betting activity on the Platform.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. Where applicable, the terms defined in our Terms & Conditions carry the same meaning in this Policy.

2 Definitions

For the purposes of this Privacy Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, identification number, payment details, IP address, device identifiers, and behavioural data.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Subject" — the identified or identifiable natural person to whom the personal data relates (i.e., you, the Player).
• "Data Controller" — the entity that determines the purposes and means of processing personal data. Winbox777 acts as the Data Controller for personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under written instruction.
• "Consent" — any freely given, specific, informed, and unambiguous indication of agreement by which a Data Subject signifies acceptance of personal data processing.
• "KYC" — Know Your Customer; the identity and age verification process required for account compliance.
• "Cookies" — small data files placed on your device by the Platform to facilitate functionality, analytics, and personalisation.

3 Data Controller

For the purposes of this Privacy Policy, the Data Controller responsible for your personal data is Winbox777, operating the online gaming platform accessible at winbox777.cam. All data collected through the Platform is processed under the direction and responsibility of Winbox777.

If you have any queries relating to how your personal data is processed, or wish to exercise any of the rights described in Section 11 of this Policy, please contact our Data Privacy team at the address provided in Section 15.

4 Categories of Personal Data We Collect

Winbox777 collects the following categories of personal data in connection with your use of the Platform:

5 How We Collect Personal Data

5.1 Directly from You

The majority of personal data we hold is provided directly by you during: account registration; completion of KYC verification procedures; deposit and withdrawal transactions; customer support interactions via live chat, email, or telephone; responses to surveys or promotional campaigns; and voluntary updates to your account profile.

5.2 Automatically Through Platform Use

When you access and use the Winbox777 Platform, we automatically collect technical and behavioural data through cookies, web beacons, server logs, and similar tracking technologies. This data includes your IP address, device identifiers, session information, pages visited, features used, and gaming activity. Please refer to Section 9 of this Policy for detailed information on our use of cookies.

5.3 From Third Parties

In certain circumstances, we may receive personal data about you from third parties, including: payment processors and financial institutions (e.g., Maybank, CIMB, Public Bank, Hong Leong, DuitNow service providers) in connection with transaction processing; identity verification service providers engaged for KYC compliance; fraud prevention and anti-money laundering screening services; and analytics providers who assist us in understanding aggregate Platform usage patterns.

6 Purposes of Processing & Legal Basis

Winbox777 processes your personal data for the following purposes, each supported by a distinct legal basis:

• Account Creation and Management: To register, maintain, and administer your Winbox777 account, including authentication and access control. Legal basis: Performance of a contract.
• Transaction Processing: To process deposits and withdrawals via Malaysian payment channels including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and local bank transfers. Legal basis: Performance of a contract.
• Identity Verification (KYC): To verify your identity and age (minimum 21 years) in compliance with applicable legal and regulatory obligations. Legal basis: Legal obligation.
• Anti-Money Laundering (AML) Compliance: To monitor transactions, detect suspicious activity, and fulfil reporting obligations under applicable anti-money laundering laws. Legal basis: Legal obligation.
• Fraud Prevention & Platform Security: To detect, investigate, and prevent fraudulent activity, abuse of bonuses, and unauthorised access to accounts. Legal basis: Legitimate interest.
• Customer Support: To respond to queries, complaints, and support requests in a timely and effective manner. Legal basis: Performance of a contract; legitimate interest.
• Responsible Gambling: To monitor gaming patterns, implement deposit limits, self-exclusion requests, and other responsible gambling tools to protect player welfare. Legal basis: Legal obligation; legitimate interest.
• Marketing Communications: To send you promotional offers, bonuses, and platform updates, where you have provided your consent or where permitted by applicable law. Legal basis: Consent (you may withdraw at any time).
• Platform Improvement: To analyse usage patterns, improve game offerings, and optimise platform performance through aggregated and anonymised analytics. Legal basis: Legitimate interest.

7 Data Sharing & Disclosure

Winbox777 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process data on our behalf under strict contractual data processing agreements. These include: payment processors facilitating transactions via local Malaysian banking channels; KYC and identity verification providers; fraud prevention and AML screening services; cloud hosting and infrastructure providers; and customer support platform operators. All processors are contractually required to process data only for the stated purpose and to maintain appropriate security standards.

7.2 Legal and Regulatory Disclosure

We may disclose personal data to government authorities, regulators, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory requirement. This includes compliance with anti-money laundering reporting obligations and responses to legally valid requests from Malaysian authorities.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the Winbox777 business, personal data held by the Platform may form part of the transferred assets. Affected Players will be notified via email prior to any such transfer, and the acquiring entity will be bound to honour the commitments set out in this Privacy Policy.

7.4 Aggregated and Anonymised Data

We may share aggregated, anonymised statistical data about platform usage, game preferences, and betting patterns with game studio partners and analytics providers. This data does not identify individual players and cannot be used to re-identify any specific person.

8 International Data Transfers

Some of our third-party service providers — including cloud infrastructure providers and certain KYC verification platforms — may process data in jurisdictions outside of Malaysia. Where such transfers occur, Winbox777 takes appropriate measures to ensure that your personal data receives a level of protection equivalent to that provided under Malaysian data protection principles.

These measures may include executing standard contractual clauses with the relevant service providers, ensuring the recipient jurisdiction maintains an adequate data protection framework, or obtaining your explicit consent where required. If you would like more information about the specific safeguards applicable to any international transfer of your data, please contact our support team.

9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They enable the website to recognise your device on subsequent visits, remember your preferences, maintain your logged-in session, and gather analytical information about how the site is used.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your login session and enabling core gaming functions. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Allow the Platform to remember your preferences (such as language settings, preferred game categories, and deposit limit settings) for a more personalised experience.
• Analytics Cookies: Help us understand how players interact with the Platform — which games are most popular, how long sessions typically last, and where players encounter difficulties. This data is aggregated and anonymised.
• Security Cookies: Used for fraud detection and prevention, including identifying suspicious login patterns and protecting against session hijacking.

9.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the Winbox777 Platform, including your ability to maintain a logged-in session or access personalised features.

10 Data Retention

Winbox777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. Our general retention guidelines are as follows:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, for regulatory and legal compliance purposes.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, as required under applicable anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the last interaction, unless the record forms part of an ongoing dispute or investigation.
• Marketing consent records: Retained for as long as your consent remains active, plus a further three (3) years after consent is withdrawn as evidence of the consent record.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any specific individual.

11 Your Data Rights

As a Data Subject, you have the following rights in relation to the personal data Winbox777 holds about you. We are committed to facilitating the exercise of these rights in a straightforward and timely manner.

Right of Access: You have the right to request a copy of the personal data Winbox777 holds about you, along with information about how it is used and with whom it has been shared.

Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction or supplementation.

Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn (and no other legal basis applies), or where the data has been processed unlawfully. Please note that this right may be subject to overriding legal obligations — for example, we are required to retain KYC and transaction records for a minimum statutory period.

Right to Restrict Processing: You may request that we temporarily suspend processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.

Right to Data Portability: Where processing is based on your consent or a contract with you, you may request that we provide your personal data in a structured, commonly used, and machine-readable format, and/or transmit it directly to another service provider where technically feasible.

Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interest, including for direct marketing purposes. Upon receipt of a valid objection, we will cease the relevant processing activity unless compelling legitimate grounds exist that override your rights.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time by contacting our support team or updating your account preferences. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

12 Children's Privacy & Age Restrictions

The Winbox777 Platform is intended exclusively for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and have reason to believe that your child has registered an account on Winbox777 or provided personal data to the Platform without your consent, please contact us immediately at the details provided in Section 15. We will investigate and take appropriate action without undue delay.

13 Security Measures

Winbox777 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• TLS/SSL Encryption: All data in transit between your device and our servers is protected by 256-bit Transport Layer Security encryption.
• Encrypted Data Storage: Sensitive personal data, including financial information and identification documents, is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff who access player data undergo background checks and receive regular privacy and data security training.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security.
• Fraud and AML Monitoring: Automated systems continuously monitor for unusual account activity, suspicious transaction patterns, and potential security breaches.
• Regular Security Audits: Winbox777 conducts periodic internal and external security reviews to identify and remediate potential vulnerabilities in our systems and processes.

While we take all reasonable precautions to protect your data, no internet-based system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your own login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

14 Amendments to This Policy

Winbox777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. All amendments will be published on this page with an updated "Last Updated" date at the top of the document.

Where changes are material — for example, changes to the purposes for which we use your data or to your rights as a Data Subject — we will provide advance notice via email to registered Players at least fourteen (14) days before the changes take effect. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how Winbox777 handles your personal data. If you have any concerns about a specific change, please contact our support team before the amendment's effective date.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Winbox777 processes your personal data, please contact us using the following details:

• Data Privacy Enquiries Email: [email protected] — plain text only, not a clickable link.
• Subject Line: Please use "Privacy Policy Enquiry" or "Data Rights Request" in the subject line of your email to ensure prompt routing to the appropriate team.
• Live Chat: Available 24/7 on the Platform; live chat agents can also log formal privacy requests on your behalf.
• Response Time: Standard enquiries — within 24 hours. Formal data rights requests — within 30 calendar days.

For responsible gambling enquiries, including self-exclusion and deposit limit requests, please visit our Responsible Gambling page.

For all other account or service enquiries, please refer to our FAQ page or contact our support team via live chat.