Privacy Policy – winbox8 Malaysia Online Casino

Last Updated: 1 January 2026

This Privacy Policy ("Policy") describes how winbox8 ("winbox8", "we", "us", "our") collects, uses, discloses, stores, and protects the personal data of individuals ("Player", "User", "you") who access or use the winbox8 website at winbox8.net and all associated products and services (collectively, the "Platform"). This Policy forms part of the winbox8 Terms & Conditions and should be read alongside that document.

winbox8 is committed to protecting the personal data of its players. We operate under international gaming authority oversight, which imposes specific obligations on us regarding the handling of player data. We do not sell, rent, or trade your personal data to third-party marketers under any circumstances. The data we hold about you is used exclusively for the purposes of operating your winbox8 account, meeting our regulatory obligations, preventing fraud, and improving the Platform experience for all Malaysian players.

By registering a winbox8 account or continuing to use the Platform, you confirm that you have read this Policy and consent to the collection and use of your personal data as described herein.

1. Personal Data We Collect

In the course of operating your winbox8 account and providing access to our Platform, we collect the following categories of personal data:

1.1 Identity & Registration Data

Full legal name as it appears on your identity document
Date of birth (for age verification — winbox8 is strictly 21+)
Gender
Nationality and country of residence
Government-issued identification number (Malaysian MyKad number or passport number)
Copy of identity document submitted during KYC verification

1.2 Contact Data

Email address (primary account identifier)
Malaysian mobile phone number (for two-factor authentication and account alerts)
Residential address (where required for KYC verification)

1.3 Financial & Transaction Data

Payment method details (e-wallet account references for Touch n Go eWallet and Boost; bank account references for FPX; partial card numbers for card payments)
Transaction history including all deposits, withdrawals, and bonus adjustments
MYR account balance history

1.4 Gaming & Behavioural Data

Game session records including bets placed, outcomes, and session durations
Responsible gaming tool preferences (deposit limits, cooling-off periods, self-exclusion status)
Customer support interaction records
Promotional preferences and bonus claim history

1.5 Technical & Device Data

IP address and approximate geolocation at time of login
Device type, operating system, and browser type
Session timestamps and duration
Cookie identifiers and similar tracking data (see Section 8)

2. How We Collect Your Data

winbox8 collects personal data through the following channels:

Direct submission: Information you provide when registering your winbox8 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or opting into promotions.
Automated collection: Technical and behavioural data collected automatically as you browse and use the winbox8 Platform, through cookies, session logs, and device fingerprinting technologies.
Third-party sources: Identity verification data from KYC document processing partners; fraud screening data from anti-money laundering service providers; payment confirmation data from payment gateway providers processing Touch n Go, Boost, and FPX transactions.

3. Purposes of Processing

winbox8 processes your personal data for the following purposes:

Registering and maintaining your winbox8 account
Verifying your identity and age in compliance with our international gaming authority licence obligations
Processing deposits, withdrawals, and bonus transactions in MYR
Providing access to all Platform products including casino games, sports betting, slots, Lottery 4D, and Fisher Game
Detecting, investigating, and preventing fraud, money laundering, and other prohibited conduct
Enforcing our Terms & Conditions and Responsible Gaming policies
Providing customer support and resolving disputes
Sending transactional communications (account alerts, password resets, withdrawal confirmations)
Sending promotional communications where you have opted in to receive them
Improving the Platform and personalising your experience
Complying with legal, regulatory, and audit obligations

4. Legal Basis for Processing

winbox8 processes personal data under the following legal bases:

Contractual necessity: Processing required to fulfil our obligations under the winbox8 Terms & Conditions, including account management, payment processing, and game access.
Legal obligation: Processing required to comply with anti-money laundering regulations, KYC requirements, and other obligations imposed by our international gaming authority licence.
Legitimate interests: Processing for fraud prevention, security monitoring, and Platform improvement, where those interests are not overridden by your data protection rights.
Consent: Processing for marketing communications and non-essential cookies, where you have provided specific, informed consent that you may withdraw at any time.

5. Disclosure to Third Parties

winbox8 does not sell, rent, or trade your personal data to third-party marketers. We may disclose your personal data to the following categories of recipients only to the extent necessary for the stated purpose:

Payment processors: Touch n Go eWallet, Boost, FPX banking partners (Maybank, CIMB, Public Bank), and card payment gateways, for the purpose of processing your MYR deposits and withdrawals.
KYC and identity verification providers: Third-party services that assist winbox8 in verifying the authenticity of identity documents submitted during account registration.
Anti-fraud and AML service providers: Compliance technology providers that screen transactions and account activity against fraud and money laundering risk indicators.
Game software providers: Licensed game studios (including Evolution Gaming, Pragmatic Play, Microgaming, and Habanero) who operate games accessed through the winbox8 Platform, and who may receive technical session data necessary to operate game rounds.
Regulatory authorities: Winbox8's international gaming authority and relevant law enforcement agencies, where disclosure is required by law, court order, or regulatory directive.
Professional advisers: Lawyers, auditors, and accountants retained by winbox8 for legal, compliance, and financial audit purposes, under strict confidentiality obligations.

winbox8 requires all third-party recipients of personal data to process that data only for the purpose for which it was disclosed and to maintain appropriate technical and organisational security measures.

6. Data Retention

winbox8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

Account registration and KYC documentation: retained for a minimum of 5 years following account closure, in accordance with anti-money laundering regulatory requirements.
Financial transaction records: retained for a minimum of 7 years from the date of the transaction.
Gaming activity logs: retained for a minimum of 3 years from the date of the session.
Customer support records: retained for a minimum of 3 years from the date of the last interaction.
Marketing consent records: retained until consent is withdrawn and for a reasonable period thereafter for compliance audit purposes.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with winbox8's data destruction procedures.

7. Data Security

winbox8 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

TLS 1.3 encryption for all data in transit between your device and the winbox8 Platform
Encryption at rest for all personal data stored on winbox8 servers
Password hashing using industry-standard cryptographic algorithms (your winbox8 password is never stored in plain text)
Role-based access controls restricting staff access to personal data on a need-to-know basis
Regular security audits and penetration testing of the winbox8 Platform infrastructure
Intrusion detection systems and 24/7 security monitoring

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winbox8 will notify affected players and, where required, the relevant regulatory authority within the timeframes prescribed by applicable data protection law.

8. Cookies & Tracking Technologies

winbox8 uses cookies and similar tracking technologies on the Platform for the following purposes:

Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your winbox8 account and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
Performance and analytics cookies: Used to understand how players navigate the winbox8 Platform, which pages are most visited, and where technical errors occur. This data is aggregated and does not identify individual players. These cookies are enabled by default but can be disabled.
Preference cookies: Used to remember your Platform settings and language preferences. Disabling these cookies may affect the personalisation features of your winbox8 session.
Marketing cookies: Used to track whether you arrived at winbox8 via a promotional channel and to manage affiliate attribution. These cookies require your specific consent and can be declined or withdrawn at any time via your account settings.

You can manage your cookie preferences through your winbox8 account settings or your browser's built-in cookie management tools. Note that disabling strictly necessary cookies will prevent you from using the Platform.

9. Your Data Rights

As a winbox8 player, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, contact winbox8 customer support via live chat or at the email address listed in Section 12.

Right of Access

You have the right to request a copy of the personal data winbox8 holds about you. We will provide this within 30 days of a verified request.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data held on your winbox8 account.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.

Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances, such as while we verify a rectification request.

Right to Data Portability

Where processing is based on your consent or contractual necessity, you may request a machine-readable copy of the personal data you have provided to winbox8.

Right to Withdraw Consent

Where processing is based on consent (e.g. marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting prior lawful processing.

10. Minors & Age Restriction

The winbox8 Platform is strictly intended for individuals aged 21 and above. winbox8 does not knowingly collect personal data from individuals under the age of 21. If you have reason to believe that a minor has created a winbox8 account or submitted personal data to the Platform, please contact winbox8 customer support immediately. Any account found to belong to a person under 21 years of age will be permanently closed and all associated data will be deleted in accordance with applicable law, except where retention is required for regulatory compliance.

11. Changes to This Policy

winbox8 reserves the right to update or replace this Privacy Policy at any time. Material changes will be communicated to registered players via email to the address on file prior to the change taking effect. Continued use of the winbox8 Platform following the effective date of an updated Policy constitutes your acceptance of the revised terms. The date of the most recent revision is displayed at the top of this document. We encourage you to review this Policy periodically.

12. Contact & Data Enquiries

For questions, access requests, correction requests, or complaints regarding winbox8's handling of your personal data, please contact our customer support team:

Live Chat: Available 24/7 via the winbox8 Platform — the fastest channel for urgent data queries
Email: [email protected]

winbox8 will acknowledge data rights requests within 5 business days and aim to resolve all requests within 30 days. If you are dissatisfied with winbox8's response to a data privacy complaint, you may escalate the matter to the dispute resolution body designated by winbox8's international gaming authority.

winbox8 Privacy Commitments

No Data Sales

winbox8 does not sell, rent, or trade your personal data to any third-party marketer, data broker, or advertising network — ever. Your data is used only to operate your account and meet our regulatory obligations.

End-to-End Encryption

All data transmitted between your device and the winbox8 Platform is encrypted with TLS 1.3. All stored personal data is encrypted at rest. Your winbox8 password is hashed and cannot be recovered by anyone.

Your Rights, Respected

Access, rectify, export, restrict, or delete your winbox8 personal data at any time. Data rights requests are acknowledged within 5 business days and resolved within 30 days without charge.

Licence-Mandated Compliance

winbox8's international gaming authority licence imposes independent data handling obligations. We undergo regular compliance audits to ensure our data practices meet the standards required of a licenced operator.

Clear Retention Periods

winbox8 retains personal data only for as long as legally required — no indefinite storage. Transaction records are retained for 7 years per AML requirements. All other data is deleted or anonymised at the end of its retention period.

Cookie Transparency

winbox8 uses only the cookies necessary to operate the Platform. Non-essential marketing cookies require your specific consent. You can manage all cookie preferences from within your winbox8 account settings at any time.

winbox8 Privacy Policy

Table of Contents