Data Protection & Privacy

Privacy Policy

WinboxVIP is committed to protecting the privacy and personal data of every Member. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you hold over your data as a Member of our platform.

Effective Date: 1 January 2026  |  Last Updated: 1 January 2026
01

Introduction

This Privacy Policy ("Policy") sets out the data protection practices of WinboxVIP ("the Platform", "we", "us", "our") with respect to the collection, use, storage, sharing, and protection of personal data belonging to registered Members and visitors to the WinboxVIP platform accessible at https://winboxvip.cam/ ("the Service").

WinboxVIP respects the privacy of every individual who uses our Service. We recognise that personal data is sensitive information, and we are committed to handling it responsibly, transparently, and in accordance with the standards required by our international gaming licence and general data protection principles.

This Policy applies to all personal data collected by WinboxVIP through your use of the Service, including data provided during account registration, identity verification (KYC), financial transactions, customer support interactions, and general platform use. By registering a WinboxVIP Account and using the Service, you acknowledge that you have read this Policy and consent to the data processing activities described herein.

Scope: This Policy applies to all Members and visitors regardless of their location. It is of particular relevance to users accessing WinboxVIP from Malaysia and other jurisdictions where the Platform's services are offered.

02

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

Term Meaning
"Personal Data" Any information that relates to an identified or identifiable natural person, including name, email address, date of birth, financial details, and device identifiers.
"Processing" Any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
"Data Controller" WinboxVIP, which determines the purposes and means of processing personal data collected through the Service.
"Data Processor" A third party that processes personal data on behalf of WinboxVIP in accordance with our instructions and this Policy.
"Member" / "User" Any individual who has registered an Account on WinboxVIP or who accesses the Service as a visitor.
"KYC Documents" Identity and address verification documents submitted by Members as part of the Know Your Customer process, including government-issued identification and proof of address.
"Cookies" Small text files placed on a user's device by a website to store information about their session, preferences, or activity.
03

Data We Collect

WinboxVIP collects personal data in the following categories. We collect only the data that is necessary for the stated purposes of the Service.

3.1 Registration & Account Data

  • Full legal name
  • Date of birth
  • Email address
  • Mobile phone number
  • Username and encrypted password
  • Preferred currency (Malaysian Ringgit / MYR by default for Malaysian Members)

3.2 Identity Verification (KYC) Data

  • Government-issued photo identification (Malaysian MyKad, Driver's License, or Passport)
  • Proof of residential address (utility bill, bank statement — issued within three months)
  • Selfie photograph holding the identity document
  • Payment method verification evidence (screenshot or statement confirming name ownership of the payment account)

3.3 Financial & Transaction Data

  • Deposit and withdrawal transaction history
  • Payment method details (e-wallet identifiers, bank account information — stored only to the extent necessary for transaction processing and fraud prevention)
  • Bonus and promotion redemption history
  • Account balance records

3.4 Gaming & Behavioural Data

  • Game history (titles played, wager amounts, session duration, winnings and losses)
  • Sports betting market activity and bet records
  • Platform interaction logs (pages visited, features accessed, session timestamps)
  • Responsible gambling tool usage (deposit limits set, self-exclusion requests)

3.5 Technical & Device Data

  • IP address
  • Device type, operating system, and browser information
  • Device fingerprint (for fraud and duplicate account detection)
  • Geolocation data (country/region level, for restricted jurisdiction compliance)
  • Cookie and session data

3.6 Customer Support Data

  • Live chat and email correspondence transcripts
  • Support ticket content and resolution records
  • Feedback and complaint records
04

How We Collect Data

WinboxVIP collects personal data through the following channels:

  • Directly from you: Information you provide during account registration, KYC submission, deposit and withdrawal requests, customer support interactions, and promotional entries.
  • Automatically: Technical and behavioural data collected automatically when you access and use the Platform, including through cookies, server logs, and device fingerprinting technologies.
  • From payment processors: Transaction confirmation data and payment status information received from our integrated payment providers, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network services.
  • From fraud prevention services: Risk signals and verification data shared by authorised third-party fraud detection providers for the purpose of protecting Members and the Platform.
  • From third-party identity verification providers: Document authentication and identity confirmation data where third-party KYC services are engaged.
05

Purpose of Data Processing

WinboxVIP processes personal data for the following specific purposes:

Purpose Data Categories Used
Account registration and management Registration data, device data
Identity verification (KYC) and age confirmation KYC documents, registration data
Processing deposits and withdrawals Financial data, KYC data
Delivering gaming services and sports betting markets Account data, gaming data
Fraud prevention and anti-money laundering compliance All data categories
Responsible gambling monitoring and tool provision Gaming data, account data
Customer support and dispute resolution Support data, account data
Compliance with licensing and legal obligations All data categories
Platform improvement and analytics (aggregated, anonymised) Technical data, behavioural data
Promotional communications (with consent) Registration data, contact details

WinboxVIP does not use your personal data for unsolicited third-party marketing, and we do not sell your personal data to any external organisation.

06

Legal Basis for Processing

WinboxVIP processes personal data on the following legal bases:

  • Contractual necessity: Processing required to perform the contract between WinboxVIP and the Member — including account management, payment processing, and game delivery.
  • Legal obligation: Processing required to comply with applicable legal obligations under our international gaming licence, anti-money laundering requirements, and fraud prevention regulations.
  • Legitimate interests: Processing for fraud prevention, platform security, and the improvement of our services, where such interests are not overridden by your rights and interests.
  • Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.
07

Data Sharing & Disclosure

WinboxVIP does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited and controlled circumstances:

7.1 Payment Processors

We share the minimum necessary financial and identity data with our integrated payment providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network processors — solely for the purpose of processing transactions initiated by you. These providers are bound by their own data protection obligations and are not permitted to use your data for any other purpose.

7.2 Identity Verification & Fraud Prevention Providers

We may engage authorised third-party KYC and fraud detection services to assist with identity verification and risk assessment. These providers act as Data Processors under our instruction and are contractually prohibited from using your data beyond the scope of their engagement with WinboxVIP.

7.3 Regulatory & Legal Authorities

WinboxVIP may disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, court order, or in connection with our obligations under our gaming licence. We will notify you of any such disclosure where legally permitted to do so.

7.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving WinboxVIP, personal data may be transferred to the successor entity subject to the same or equivalent data protection commitments as set out in this Policy.

No Third-Party Marketing: WinboxVIP will never share your personal contact details — email address or phone number — with any external party for unsolicited advertising or marketing communications.

08

Cookies & Tracking Technologies

WinboxVIP uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session continuity, prevent fraud, and gather aggregated analytics data. The following categories of cookies are used:

  • Essential cookies: Strictly necessary for the Platform to function. These enable secure login sessions, session management, and basic fraud prevention. They cannot be disabled without impairing Platform functionality.
  • Analytics cookies: Used to collect aggregated, anonymised data about how Members use the Platform — including pages visited and features accessed — to help us understand usage patterns and improve the Service. These do not identify you personally.
  • Security cookies: Used for device fingerprinting and fraud detection to identify and prevent unauthorised account access and duplicate account creation.
  • Preference cookies: Used to remember your Platform settings and preferences (e.g., language or display preferences) between sessions.

You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the WinboxVIP Platform.

09

Data Retention

WinboxVIP retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

Data Category Retention Period
Account registration data Duration of active membership, plus 5 years following account closure
KYC documents (identity & address verification) 5 years from date of verification, or as required by licensing authority
Financial transaction records Minimum 5 years, in accordance with anti-money laundering requirements
Gaming history records 3 years from the date of the relevant gaming session
Customer support correspondence 3 years from the date of the last support interaction
Technical and device logs 12 months from date of collection
Marketing consent records Until consent is withdrawn, then deleted within 30 days

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.

10

Data Security

WinboxVIP implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

  • 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the WinboxVIP servers is encrypted using 256-bit Transport Layer Security — the same standard used by major Malaysian financial institutions including Maybank and CIMB.
  • Encrypted data storage: Sensitive data, including KYC documents and financial records, is stored using encryption at rest to prevent unauthorised access in the event of a storage breach.
  • Access controls: Access to personal data is restricted to authorised personnel only, on a need-to-know basis. All staff with access to personal data undergo data protection training.
  • Two-factor authentication: Available for all Member accounts to provide an additional layer of security against unauthorised login attempts.
  • Regular security audits: Our technical infrastructure undergoes periodic security reviews to identify and address potential vulnerabilities.
  • Incident response: WinboxVIP maintains a documented incident response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected Members without undue delay.

While we implement strong security measures, no platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials. Never share your WinboxVIP password with any person or entity.

11

Your Rights (User Rights)

Subject to applicable law and the conditions of our gaming licence, you have the following rights with respect to your personal data held by WinboxVIP. You may exercise any of these rights by contacting us via the details provided in Section 16.

Right of Access

Request a copy of the personal data we hold about you, along with information about how it is being processed.

Right to Rectification

Request correction of inaccurate or incomplete personal data held in your Account.

Right to Erasure

Request deletion of your personal data, subject to legal retention obligations and ongoing contractual requirements.

Right to Restriction

Request that we restrict the processing of your personal data in certain circumstances, such as while a dispute is being investigated.

Right to Portability

Request a copy of data you have provided to us in a structured, commonly used, machine-readable format.

Right to Object

Object to the processing of your personal data for direct marketing, or to processing based on our legitimate interests.

Right to Withdraw Consent

Withdraw consent for any data processing activity based on your prior consent, without affecting the lawfulness of prior processing.

Right to Complain

Lodge a complaint with the relevant data protection supervisory authority in your jurisdiction if you believe your rights have been violated.

WinboxVIP will respond to all verified data subject requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We may request proof of identity before processing your request to protect against unauthorised access to your data.

12

Children & Minors

WinboxVIP is strictly an adult platform. Our services are available only to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data belonging to persons under the age of 21.

If we become aware that personal data has been collected from a person under 21 — whether through misrepresentation during registration or any other means — we will immediately suspend the relevant Account, delete all associated personal data to the extent permitted by law, and forfeit any balances held therein in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a person under 21 has registered an Account on WinboxVIP, please contact us immediately at [email protected] so that we may take prompt action.

13

International Data Transfers

WinboxVIP operates under an international gaming licence and utilises infrastructure, payment processors, and service providers that may be located in jurisdictions outside Malaysia. As a result, your personal data may be transferred to, stored in, or processed in countries other than Malaysia.

Where personal data is transferred internationally, WinboxVIP takes steps to ensure that appropriate safeguards are in place to protect the security and integrity of your data. These safeguards may include contractual data protection clauses with receiving parties that impose equivalent data protection obligations, or engagement with providers who operate in jurisdictions recognised as providing adequate levels of data protection.

By using the WinboxVIP Service, you acknowledge and consent to the international transfer of your personal data as described in this section.

14

Third-Party Links

The WinboxVIP platform may contain references to third-party services (such as payment providers including Maybank, CIMB, Touch 'n Go eWallet, and DuitNow) whose own privacy practices govern data collected through their platforms. WinboxVIP is not responsible for the privacy practices or content of any third-party website, application, or service.

We encourage you to review the privacy policies of any third-party payment provider or service you interact with in connection with your use of WinboxVIP. Your interactions with those third parties are governed by their own terms, not this Policy.

15

Policy Amendments

WinboxVIP reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the features and functionality of the Service. When material changes are made to this Policy, we will notify registered Members by email and/or through a prominent notice displayed on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We recommend that you review this Policy periodically to remain informed of how we protect your personal data. Your continued use of the WinboxVIP Service following the effective date of any revised Policy constitutes your acceptance of the updated terms.

16

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by WinboxVIP, please contact our Data Protection team using the details below. All privacy-related queries are treated as confidential and handled with priority.

Support Email: [email protected]
Live Chat: Available 24/7 via your Account dashboard. When contacting us about a privacy matter, please include "Privacy Request" in your opening message.
Response Time: Privacy-related requests acknowledged within 24 hours. Full response provided within 30 days in accordance with applicable data protection standards.
Identity Verification: To protect your data from unauthorised disclosure, we may require proof of identity before processing access, rectification, or erasure requests.

For responsible gambling inquiries, self-exclusion requests, or account management matters, please reference our Responsible Gambling page or our Terms & Conditions for the relevant guidance.

How WinboxVIP Protects Your Privacy

Privacy protection is not just a legal obligation for WinboxVIP — it is a core part of how we operate. These are the practical commitments behind our Privacy Policy.

256-Bit SSL Encryption

Every piece of data transmitted between your device and WinboxVIP is protected by 256-bit SSL/TLS encryption — the same security standard used by major Malaysian banks and financial institutions.

No Data Selling — Ever

WinboxVIP will never sell, rent, or trade your personal data to third-party marketing organisations. Your information is used solely to deliver and improve the Service you signed up for.

Strict Access Controls

Access to your personal data within WinboxVIP is restricted to authorised personnel only, operating on a strict need-to-know basis. All staff undergo data protection training and accountability protocols.

Secure KYC Document Handling

Identity documents submitted for KYC are stored in encrypted form and used only for age and identity verification. They are never shared with advertising or marketing partners.

Your Rights, Honoured

Access requests, correction requests, erasure requests, and consent withdrawals are all handled with full respect for your data rights. We respond to verified requests within 30 days.

Breach Notification Commitment

In the event of a data security incident that may affect your personal information, WinboxVIP will notify affected Members promptly and transparently, without undue delay.

Your Privacy is Protected. Your Play is Yours.

Now that you understand how WinboxVIP handles your data, explore the rest of the platform — or learn more about how we protect players through our responsible gambling commitments and transparent terms.

Return to Homepage

Explore WinboxVIP's full platform — live casino, sports betting, slot games, payment methods, and VIP tier rewards.

Visit Homepage
Terms & Conditions

Read the full Terms & Conditions governing your use of WinboxVIP, including account rules, bonus terms, and betting regulations.

Read Terms
Responsible Gambling

Learn about the self-exclusion tools, deposit limits, and responsible gambling resources available to all WinboxVIP Members.

Learn More

🔞 WinboxVIP is strictly for players aged 21 and above. Please gamble responsibly and within your means.