1. Who We Are
winbox8 ("we", "us", "our") operates the online gaming platform accessible at winbox8.lat. We provide sports betting, live casino games, slots, Dragon Tiger, Mix Parlay, and related gaming services to players in Malaysia and other permitted jurisdictions. This Privacy Policy applies to all users who access or use any part of the winbox8 platform, including our website, account portal, and customer support channels.
By registering an account or using any winbox8 service, you acknowledge that you have read and understood this Privacy Policy. If you have questions about anything outlined here, you are welcome to reach out to us at the contact details provided at the end of this document.
2. Data We Collect
We collect personal data only when it is reasonably necessary for the operation of our services. The categories of data we may collect include:
- Account Registration Data: Full name, date of birth, email address, mobile number, preferred currency (MYR), and a username of your choice.
- Identity Verification Data: A copy of your Malaysian identity card (MyKad) or passport, and selfie verification images where required for Know Your Customer (KYC) compliance.
- Financial Data: Bank account details, e-wallet identifiers (such as Touch n Go or Boost), deposit and withdrawal history, and transaction records. We do not store full card numbers on our servers.
- Device and Technical Data: IP address, browser type, operating system, device identifiers, and referral source. This data is collected automatically when you visit winbox8.lat.
- Usage Data: Game history, betting records, session duration, pages visited, and interaction patterns within the platform.
- Communications Data: Records of messages sent to our customer support team via live chat or email, including timestamps and conversation logs.
- Geolocation Data: Approximate location data derived from your IP address, used to verify that you are accessing the platform from a permitted region.
3. How We Use Your Data
winbox8 uses the personal data we collect for the following purposes:
- To create, verify, and maintain your winbox8 account.
- To process deposits, withdrawals, and all financial transactions accurately.
- To verify your identity and age (players must be 21 years or older) in accordance with our regulatory obligations.
- To detect and prevent fraud, money laundering, and other illicit activity.
- To provide personalised gaming experiences, promotions, and bonus offers relevant to your activity on the platform.
- To operate our responsible gaming tools, including self-exclusion and deposit limit features.
- To deliver customer support and resolve account-related queries.
- To comply with applicable laws, licensing requirements, and regulatory directives.
- To send service-related communications, such as transaction confirmations and account security alerts.
- To send marketing communications, where you have provided consent to receive them.
- To analyse platform performance and improve our products, features, and user experience.
4. Legal Basis for Processing
Where applicable data protection laws require us to identify a legal basis for processing your personal data, we rely on the following:
- Contractual Necessity: Processing is required to fulfil the contract we have with you — namely, to provide you with the winbox8 gaming services you have signed up for.
- Legal Obligation: Certain processing activities (such as identity verification, transaction monitoring, and record retention) are mandated by applicable law or regulatory requirements.
- Legitimate Interests: We process certain technical and usage data on the basis of our legitimate interests in operating a safe, secure, and commercially viable platform, provided those interests are not overridden by your rights.
- Consent: For marketing communications and optional cookies, we rely on your freely given consent. You may withdraw your consent at any time without affecting the lawfulness of prior processing.
5. Data Sharing and Disclosure
winbox8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients where necessary:
- Payment Processors and Banking Partners: To facilitate deposits and withdrawals through Maybank, CIMB, Public Bank, Touch n Go eWallet, Boost, GrabPay, and USDT TRC20 channels.
- Identity Verification Providers: Third-party KYC service providers who assist with document verification and fraud prevention.
- Customer Support Platforms: Tools and software used to manage support tickets, live chat, and multilingual communications.
- Analytics and Performance Tools: Aggregated, anonymised data may be processed by analytics platforms to help us understand site performance. This data does not identify individual users.
- Regulatory and Law Enforcement Authorities: Where required by law, court order, or government directive, we may disclose information to the relevant authorities.
- Corporate Transactions: In the event of a merger, acquisition, or restructuring, your data may be transferred to a successor entity, subject to equivalent privacy protections.
All third parties who receive data from winbox8 are bound by appropriate confidentiality and data processing obligations.
6. Data Retention
winbox8 retains your personal data for as long as your account remains active and for a reasonable period thereafter, in accordance with our legal obligations. Specifically:
- Account data and KYC records are typically retained for a minimum of five (5) years following account closure, in line with anti-money laundering regulations.
- Transaction records are retained for a minimum of seven (7) years for financial compliance purposes.
- Support communication logs are retained for up to three (3) years.
- Marketing consent records are retained for the duration of the consent and for one (1) year thereafter for audit purposes.
Once the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be linked to you personally.
7. Cookies and Tracking Technologies
winbox8 uses cookies and similar tracking technologies to operate the platform effectively and improve your browsing experience. The types of cookies we use include:
- Strictly Necessary Cookies: Required for the website to function. These include session authentication cookies and security tokens. They cannot be disabled.
- Functional Cookies: Remember your preferences, such as language settings, display options, and recently viewed games.
- Analytics Cookies: Help us understand how players navigate the platform, which pages are most visited, and where technical issues occur. Data is collected in aggregated form.
- Marketing Cookies: Used to serve relevant promotions and offers based on your activity. These are only placed where you have given consent.
You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect some features of the winbox8 platform.
8. Your Rights
As a winbox8 player, you have the following rights with respect to your personal data:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may ask us to correct inaccurate or incomplete data.
- Right to Erasure: You may request deletion of your data, subject to our legal retention obligations.
- Right to Restriction: You may ask us to restrict certain processing activities while a dispute is being resolved.
- Right to Data Portability: You may request your data in a structured, machine-readable format where technically feasible.
- Right to Object: You may object to processing based on legitimate interests or direct marketing at any time.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. This does not affect the validity of processing carried out before withdrawal.
To exercise any of these rights, contact our support team at the email address listed at the bottom of this policy. We will respond to valid requests within 30 days. In certain cases, we may need to verify your identity before processing your request.
9. Data Security
winbox8 takes data security seriously. We implement a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:
- SSL/TLS encryption for all data transmitted between your device and our servers.
- Encrypted storage of sensitive account credentials and financial information.
- Access controls ensuring that only authorised winbox8 personnel can access personal data, and only on a need-to-know basis.
- Regular security audits and vulnerability assessments.
- Two-factor authentication options available to players for enhanced account security.
While we make every reasonable effort to protect your data, no system is completely impenetrable. In the unlikely event of a data breach that poses a risk to your rights, we will notify you and the relevant authorities as required by law.
10. Minors and Age Verification
winbox8 services are strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from minors. All new accounts are subject to age verification as part of the KYC process. If we discover that a player under the legal gambling age has opened an account, that account will be suspended immediately and any funds deposited will be returned in accordance with our procedures.
If you believe a minor has registered an account on winbox8, please contact us immediately so we can take appropriate action.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When material changes are made, we will notify registered players by email or through a prominent notice on the winbox8 platform. The "Last updated" date at the top of this page indicates when the policy was most recently revised.
Continued use of winbox8 services after any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how we handle your data.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the way winbox8 handles your personal data, you may reach our Data Protection team at:
Email: support@winbox8.lat
We aim to respond to all privacy-related inquiries within five (5) business days.