Winbox5 Privacy Policy – Malaysian Player Personal Data Protection

Winbox5 collects your personal data through three main methods: information you provide directly, data generated during your use of the platform, and information from trusted third parties in certain circumstances.

Information you provide directly:

• Full name, date of birth, identity card or passport number.
• Email address, phone number and residential address.
• Payment method details such as bank account numbers or digital wallet information (stored in encrypted form).
• Identity verification documents (KYC) such as a copy of your ID card, utility bill or bank statement for verification purposes.
• Communications you send to our support team.

Data generated automatically during use:

• IP address, web browser type, operating system and device used.
• Login history, session duration, pages visited and actions taken within the platform.
• Records of all wagering, wins, losses, and financial transactions.
• Approximate location data based on IP address.
• Cookie and similar tracking technology data.

The data we collect is used for the following purposes:

• Account management — Creating, verifying and maintaining your player account at winbox5.
• Transaction processing — Processing deposits, withdrawals and any other financial transactions on the platform.
• Customer Support — Handling enquiries, complaints and assistance requests you submit to our support team.
• Security & Fraud Prevention — Detecting and preventing fraudulent activity, money laundering and platform abuse.
• Legal compliance — Meeting applicable legal and regulatory obligations including KYC and reporting requirements.
• Platform improvements — Analysing usage patterns to improve the user experience, identify bugs and develop new features.
• Service Communications — Sending important notifications related to your account, transactions and policy changes.
• Responsible gaming — Monitoring playing patterns to identify players who may need responsible gambling support.

Winbox5 does not use your data to make automated decisions that negatively affect you without human intervention.

Winbox5 does not sell, does not rent and does not trade your personal data to any third party for commercial purposes. Data sharing only occurs in the following limited situations:

• Contracted service providers — Companies we engage to support platform operations, such as payment processors, cloud service providers and identity verification firms. They are bound by strict confidentiality agreements.
• Game providers — To enable you to play third-party games within the winbox5 platform, a minimum amount of technical data is shared with the respective game provider.
• Legal Obligations — When required by law, court order or a legitimate regulatory authority.
• Fraud prevention — In certain circumstances, we may share information with fraud prevention agencies or relevant authorities to protect players and the platform.

Winbox5 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

Winbox5 implements multiple layers of technical security controls and procedures to protect your personal data from unauthorised access, loss, disclosure or alteration:

• Data encryption in transit — All communications between your device and winbox5 servers are protected with 256-bit SSL/TLS encryption.
• Data encryption at rest — Sensitive data such as financial information and KYC documents is encrypted when stored on our servers.
• Role-based access control — Only staff who require access to specific data to perform their duties are permitted to do so, based on the principle of least privilege.
• Two-Factor Authentication (2FA) — winbox5 internal systems require multi-factor authentication for access to databases containing player data.
• Continuous security monitoring — An active intrusion detection system monitors for suspicious activity around the clock.
• Regular security audits — Security assessments and penetration testing are conducted periodically by independent third parties.

The winbox5 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly.

• Essential Cookies — Required for core platform functions such as login verification and session security. Cannot be disabled.
• Functional Cookies — Saving your preferences such as language and display settings for a more personalised experience.
• Analytical Cookies — Helping us understand how players use the platform so we can continuously improve it. Data is collected in aggregate and does not identify you individually.
• Performance Cookies — Enabling us to detect technical errors and monitor platform performance to ensure a smooth experience.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the winbox5 platform. Refer to your browser's documentation for information on how to manage cookies.

Winbox5 respects and upholds your rights over your personal data. You have the following rights, which you may exercise at any time:

• Right to access — You have the right to request a copy of the personal data we hold about you.
• Right to rectification — You have the right to request correction of inaccurate or incomplete data.
• Right to erasure — In certain circumstances, you have the right to request deletion of your personal data ("right to be forgotten"), subject to our legal obligations.
• Right to restrict processing — You have the right to request that we restrict how we use your data in certain circumstances.
• Right to data portability — You have the right to receive your data in a structured, machine-readable format.
• Right to object — You have the right to object to the processing of your data for specific purposes such as direct marketing.

To exercise any of the above rights, contact the winbox5 support team via live chat or our support email. We will process your request within 30 business days.

In the course of its operations, winbox5 may transfer your personal data to other countries for processing or storage purposes, particularly in relation to server infrastructure and international service providers.

Every cross-border data transfer carried out by winbox5 is subject to appropriate protection mechanisms, including:

• Standard data processing agreements compliant with international protection standards.
• Transfers only to countries or parties that provide an equivalent or higher level of data protection.
• Risk assessment conducted before each new data transfer is approved.

Winbox5 ensures that all cross-border data transfers are carried out with adequate safeguards and in compliance with applicable data protection laws.

Winbox5 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements or the way we handle data.

• You will be notified of any material changes via in-platform notification or your registered email at least 7 days before they take effect.
• The "last updated" date at the top of this document will always reflect the latest version.
• Continued use of the platform after changes take effect constitutes your acceptance of the updated Privacy Policy.
• You are encouraged to review this page periodically to stay informed about how we protect your data.

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, you may contact the winbox5 team through the following channels:

• Live Chat — Available 24/7 directly within the winbox5 platform. This is the fastest way to get a response.
• Email — Email our privacy team at [email protected] with the subject line "Privacy Enquiry".

We are committed to responding to all privacy-related enquiries within 5 business days. For formal data rights requests (such as data access or erasure), we will complete these within 30 business days.