Privacy Policy winbox1 – Data Protection Malaysia Users

When you register and use the winbox1 platform, we collect several categories of information necessary to provide a secure, seamless service that meets your needs as a user.

Information you provide directly:

• Full name as stated on official identification documents.
• MyKad number or passport number for identity verification (KYC) purposes.
• Active email address and mobile phone number.
• Bank account or e-wallet information for processing deposits and withdrawals.
• Account password in encrypted form – winbox1 does not store passwords in plain text.

Information collected automatically:

• IP address and device information during platform access.
• Usage data such as pages visited, access times and actions within the platform.
• Technical information such as browser type, operating system and screen resolution.

The personal data we collect is used solely for purposes related to winbox1 operations and improving user experience. winbox1 does not use your data for unrelated purposes without your permission.

• Identity verification – Ensuring only eligible and legitimate users access the winbox1 platform.
• Transaction processing – Processing deposits, withdrawals and your financial transaction history.
• Service communications – Sending important notifications regarding your account, security and relevant promotions.
• Platform improvements – Analyzing usage patterns in aggregate to improve winbox1 functionality and interface.
• Fraud prevention – Detecting and preventing suspicious activity to protect all users.
• Legal compliance – Meeting reporting and compliance requirements mandated by relevant authorities.

Winbox1 does not sell user personal data. We only share necessary information with the following parties and only under limited and specified circumstances:

• Payment processors – Authorized payment service providers to complete your financial transactions.
• Technology service providers – Infrastructure partners that help operate the winbox1 platform securely.
• Regulatory authorities – When required by law or valid court order.
• Licensed game providers – Minimum information required to verify identity in games.

All third parties we work with are bound by strict data protection agreements and are not permitted to use your information for their own purposes.

Winbox1 continuously invests in security infrastructure to ensure your personal and financial data is protected at the highest level. Below are the key security measures we implement:

• 256-bit SSL/TLS encryption for all communication between users and winbox1 servers.
• Password storage uses strong hashing algorithms – passwords cannot be read even by winbox1 staff.
• Two-factor authentication (2FA) for additional security layer during login.
• Real-time monitoring of suspicious activity with automated threat detection systems.
• Periodic security testing by internal security teams and independent external audits.
• Strict internal access controls – winbox1 staff only access data necessary for their duties.

Winbox1 uses cookies and similar tracking technologies to enhance platform functionality and user experience. Cookies are small text files stored on your device when you visit the winbox1 site.

Types of cookies we use:

• Essential Cookies – Required for core platform functions such as login and session management. Cannot be disabled.
• Performance Cookies – Helps us understand how users interact with the platform for improvement purposes.
• Preference Cookies – Storing user preferences such as language and display settings for your convenience.

You can manage or delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the winbox1 platform.

As a winbox1 user, you have rights regarding your personal data that winbox1 is committed to respecting and facilitating.

Winbox1 stores user personal data only as long as it is needed for the purposes stated in this policy or as required by applicable law.

• Active account data – Stored as long as your account is active and for a specified period after account closure.
• Financial transaction records – Stored for a minimum of seven (7) years in accordance with financial legal requirements.
• Security activity log – Stored for 12 months for security incident investigation purposes if necessary.
• Customer support communication data – Stored for two (2) years for reference and service improvement.

After the retention period expires, your data will be securely deleted or anonymised so it can no longer be personally linked to you.

Winbox1 is a platform exclusively for adult users aged 18 and above only. We do not knowingly collect or process personal data of individuals under 18 years of age.

If we discover or suspect that data collected belongs to a minor, winbox1 will take the following actions immediately:

• Suspending the account immediately while investigation is conducted.
• Deleting all personal data associated with that account.
• Returning any remaining balance according to established procedures.

Winbox1 reserves the right to update or amend this privacy policy from time to time to reflect changes in our practices, legal requirements or relevant technological developments.

When material amendments occur, winbox1 will:

• Updating the amendment date at the top of this page.
• Sending notification to the user via email or in-platform notice.
• In case of major amendments, request renewed consent from users if required.

Continued use of the winbox1 platform after policy amendments are published is considered acceptance of the updated terms. We encourage you to review this page regularly.

If you have any questions, concerns or requests related to privacy and your personal data at winbox1, our team is ready to assist through the following channels:

• Live Chat – The fastest way to get an immediate response, available 24/7 within the winbox1 platform.
• Email – Send your privacy inquiries to [email protected] for response within 1–2 working days.

For requests related to user rights (access, correction, deletion), please include the following information in your request: full name, account email address and specific details of your request. This helps us process requests faster and more accurately.