Last Updated: June 2026
1. Introduction
This Privacy Policy ("Policy") describes how winboz ("winboz", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("Player", "User", "you") who access and use the winboz platform at winboz.app and all associated services.
winboz is committed to protecting the privacy of all players, including those accessing the platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, Kota Kinabalu, and all other parts of Malaysia. This Policy is designed to give you a clear and honest account of how your data is handled from the moment you visit the winboz website through to account closure.
By registering an account with winboz or using the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the winboz Terms & Conditions.
2. Data We Collect
winboz collects personal data that you provide directly and data generated through your use of the platform. The categories of data we collect include:
- Registration Data: Full name, date of birth, email address, username, and password (stored in hashed, non-reversible form) provided at the time of account creation.
- Identity Verification Data: Government-issued identification documents (such as a MyKad or passport), proof of address, and selfie photographs where required for KYC (Know Your Customer) verification under anti-money laundering obligations.
- Financial Data: Payment method details, transaction history, deposit amounts, withdrawal requests, and account balance information. Full card numbers are never stored by winboz — payment processing is handled by certified third-party payment processors.
- Gaming Activity Data: Game session logs, bet history, wagering patterns, win and loss records, bonus usage, and gameplay duration across all winboz products including slots, live casino, and sportsbook.
- Technical Data: IP address, device type, browser type and version, operating system, screen resolution, session timestamps, referral URL, and clickstream data collected automatically when you access winboz.app.
- Communication Data: Records of your interactions with the winboz support team via live chat or email, including the content of those communications.
- Responsible Gaming Data: Deposit limits, session limits, cool-off periods, and self-exclusion elections made via your winboz account dashboard.
3. How We Use Your Data
winboz uses the personal data collected for the following purposes:
- Account Management: Creating and maintaining your winboz account, verifying your identity and age, and providing you with access to the platform's gaming and betting services.
- Payment Processing: Processing deposits and withdrawals in MYR via approved Malaysian payment channels including Touch 'n Go eWallet, Boost, DuitNow, and FPX-linked bank accounts at Maybank, CIMB, Public Bank, and others.
- Legal & Regulatory Compliance: Meeting our obligations under applicable anti-money laundering legislation, responsible gaming requirements, and the terms of our international gaming authority licensing framework, including filing required reports with relevant authorities.
- Platform Security & Fraud Prevention: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, multi-accounting, and other prohibited activities described in the winboz Terms & Conditions.
- Responsible Gaming: Monitoring gaming behaviour for indicators of problem gambling and applying responsible gaming interventions including deposit limit enforcement, session timeout triggers, and self-exclusion processing.
- Service Improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and game offering at winboz.
- Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw consent at any time via your account settings or by contacting support.
- Customer Support: Responding to and resolving queries, complaints, and account issues raised via the winboz live chat and email support channels.
4. Legal Basis for Processing
winboz processes your personal data on the following legal bases:
- Contractual Necessity: Processing necessary for the performance of the account agreement between you and winboz, including providing access to gaming services, processing transactions, and managing your account.
- Legal Obligation: Processing required to comply with applicable anti-money laundering legislation, responsible gaming regulations, and international gaming authority requirements, including identity verification and transaction monitoring.
- Legitimate Interests: Processing necessary for the legitimate interests of winboz, including fraud prevention, platform security, abuse detection, and service improvement, provided those interests are not overridden by your data protection rights.
- Consent: Processing of your data for marketing communications and optional enhanced personalisation features, in each case subject to your explicit opt-in consent, which may be withdrawn at any time.
5. Data Sharing & Disclosure
winboz does not sell, rent, or trade your personal data to third parties for commercial purposes. Your data may be shared only in the following limited circumstances:
- Service Providers: Trusted third-party suppliers engaged by winboz to provide specific services necessary for platform operation, including payment processors, KYC identity verification providers, fraud detection services, cloud infrastructure providers, and customer support tools. These providers are contractually bound to process data only for the purposes specified by winboz and to maintain appropriate data protection standards.
- Gaming Software Providers: Game data (including bet amounts and outcomes) is shared with winboz's licensed game suppliers — including JILI, Pragmatic Play, PG Soft, and other providers — to the extent necessary for game functionality and audit purposes. These providers do not receive identifying personal information beyond what is technically necessary.
- Regulatory & Law Enforcement Authorities: winboz will disclose personal data to competent authorities where required by applicable law, court order, or regulatory direction, including anti-money laundering disclosures.
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the winboz platform's assets, player data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.
winboz will not share your data with any third party for that third party's own marketing purposes without your explicit consent.
6. Cookies & Tracking Technologies
winboz uses cookies and similar tracking technologies on the winboz.app website. Cookies are small data files stored on your device that help winboz deliver a functional and personalised experience.
- Strictly Necessary Cookies: Essential for platform operation, including maintaining your authenticated login session, session security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
- Functional Cookies: Used to remember your language preferences, regional settings, and personalisation choices within the winboz platform.
- Analytics Cookies: Collect anonymised data about how players navigate and interact with winboz.app, allowing us to improve page performance, identify technical errors, and optimise the user experience.
- Marketing Cookies: Used only where you have given explicit consent to track engagement with winboz promotional campaigns. These cookies can be disabled via your browser settings or by withdrawing marketing consent in your account settings.
You can manage or delete cookies via your browser settings at any time. Disabling cookies may affect your ability to use certain features of the winboz platform, including maintaining a logged-in session.
7. Data Retention
winboz retains personal data for the period necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and audit obligations. Specific retention periods include:
- Account Data: Retained for the duration of your winboz account and for a minimum of five (5) years following account closure, in accordance with applicable anti-money laundering record-keeping requirements.
- Transaction & Gaming Records: Retained for a minimum of five (5) years from the date of each transaction or gaming session, consistent with applicable financial record-keeping obligations.
- KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
- Support Communications: Retained for three (3) years from the date of the most recent communication in a support thread.
- Marketing Data: Retained until you withdraw consent to receive marketing communications, at which point your data will be removed from active marketing lists promptly.
Data that is no longer required for any lawful purpose will be securely deleted or anonymised.
8. Data Security
winboz implements comprehensive technical and organisational security measures to protect the personal data of all players against unauthorised access, loss, alteration, and disclosure. These measures include:
- 256-bit SSL/TLS encryption on all data transmitted between player devices and the winboz platform.
- Hashing of all account passwords using industry-standard one-way cryptographic algorithms. winboz staff cannot access your plaintext password.
- Access controls restricting internal access to personal data on a strict need-to-know basis, with all access logged and audited.
- Regular independent security audits and penetration testing of the winboz platform infrastructure.
- Multi-factor authentication requirements for all winboz staff with access to production systems containing player data.
- Intrusion detection and anomaly monitoring systems operating continuously across the winboz platform.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, winboz will notify affected players and relevant regulatory authorities in accordance with applicable data protection law.
9. Your Data Rights
As a winboz player, you have the following rights with respect to your personal data:
- Right of Access: You may request a copy of the personal data held by winboz about you at any time.
- Right to Rectification: You may request correction of inaccurate or incomplete personal data in your winboz account.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to winboz's legal obligations to retain certain records.
- Right to Restrict Processing: You may request that winboz restricts the processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved.
- Right to Data Portability: You may request a copy of personal data you have provided to winboz in a structured, machine-readable format.
- Right to Object: You may object to the processing of your personal data on the basis of legitimate interests, including profiling for marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of the above rights, contact the winboz support team via the 24/7 live chat or at [email protected]. winboz will respond to all data rights requests within 30 calendar days.
10. Children & Minors
The winboz platform is strictly restricted to persons aged 21 years and above. 21+ winboz does not knowingly collect personal data from any person under the age of 21. Registration is subject to mandatory age verification, and winboz will close and investigate any account where there is reasonable suspicion that the account holder is under the minimum age.
If you believe that a person under the age of 21 has registered an account with winboz or has provided personal data to the platform, please notify winboz immediately via [email protected]. All such reports will be treated as a priority and investigated promptly.
11. International Data Transfers
winboz may transfer personal data to service providers and infrastructure partners located outside Malaysia in the course of providing its gaming and account services. Where such transfers take place, winboz implements appropriate safeguards to ensure that your personal data receives a level of protection equivalent to that provided under this Policy, including the use of standard contractual clauses and vendor data processing agreements.
By using the winboz platform and providing your personal data, you consent to the transfer of your data to jurisdictions outside Malaysia for the purposes described in this Policy.
12. Third-Party Links
The winboz platform may contain links to third-party websites or resources. This Privacy Policy applies solely to the winboz.app platform and its associated services. winboz has no control over and accepts no responsibility for the privacy practices or content of any third-party website. We encourage you to review the privacy policies of any external sites you visit.
13. Changes to This Privacy Policy
winboz reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, winboz will notify registered players via email to the address on file, or via a prominent notice on the platform, prior to the changes taking effect.
The "Last Updated" date at the top of this document reflects the date of the most recent revision. Continued use of the winboz platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease use of the platform and contact support to close your account.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way winboz handles your personal data, please contact our Data Protection team:
- Live Chat: Available 24 hours a day, 7 days a week via the chat widget on any page of winboz.app
- Email: [email protected]
winboz aims to respond to all privacy-related enquiries within 5 business days and to resolve data rights requests within 30 calendar days of receipt.