Privacy Policy winbox8 — Your Personal Data Security

1 Introduction and Scope of This Policy

Winbox8 ("we", "Platform") takes our responsibility to protect every member's privacy seriously. This Privacy Policy explains in detail how we collect, process, store, share, and protect your personal information when you register or use our services.

This policy applies to all users of the Winbox8 website, our mobile app, and any related services we offer. It covers information you provide directly, information we collect automatically during use, and information we receive from legitimate third-party sources.

Winbox8 complies with applicable data protection laws including Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to handling your information with full transparency, integrity, and accountability.

2 Personal Data We Collect

We collect various types of information to provide, improve, and protect our services. This information falls into several main categories:

To meet regulatory requirements and prevent money laundering, we implement a KYC (Know Your Customer) process that requires identity verification. This is standard procedure in the financial services and online gambling industry worldwide.

We do not collect special category data such as health information, religious beliefs, or political views unless specifically required and you have given explicit consent for that purpose.

3 How We Use Your Personal Data

Every piece of information we collect has a clear and legitimate purpose. winbox8 uses your personal data for the following purposes:

• Account Management: Creating, verifying, and managing your member account, including the registration process, login, and identity verification.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Service Provision: Providing access to all games, sports, and winbox8 platform features of your choice.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, and security breaches.
• Service Communications: Sending important notifications related to your account, transactions, and policy updates.
• Marketing and Promotions: Sending bonus offers, promotions, and related information — only if you have consented to receive them.
• Platform Improvements: Analyzing usage patterns to improve the user experience, platform performance, and new features.
• Legal Compliance: Meeting legal and regulatory obligations, including reporting to relevant authorities when required.
• Responsible Gaming: Monitoring wagering patterns to identify and assist members who may be experiencing problem gambling.

We only process your data on a valid legal basis: your consent, contractual necessity, legal obligation, or our legitimate interests that do not override your fundamental rights.

4 Data Sharing with Third Parties

Winbox8 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, we may share your data in the following limited circumstances:

• Trusted Service Providers: Companies we engage to assist our operations — such as payment processors, cloud hosting providers, and analytics services — all of whom are bound by strict confidentiality agreements.
• Game Providers: Game developer companies that require minimal data to allow you to access their games through our platform.
• Regulatory Authorities: Government agencies, law enforcement, or regulatory bodies when required by law or court order.
• Fraud Prevention: Specialist agencies or services that help us detect and prevent fraud, money laundering, and other illegal activities.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to a new entity — you will be notified in advance.

5 Data Security and Protection Measures

We invest seriously in security infrastructure to ensure your personal data remains protected at all times. The technical and organizational measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is protected by military-grade encryption that cannot be compromised.
• Encryption of Stored Data: Sensitive information such as passwords and financial details is stored in encrypted form using irreversible hashing algorithms.
• Two-Factor Authentication (2FA): An additional security layer to protect your account from unauthorized access.
• 24/7 Monitoring: An automated security monitoring system that operates around the clock to detect any suspicious activity in real time.
• Penetration Testing: Regular security audits by independent experts to identify and patch any system vulnerabilities.
• Internal Access Controls: Only authorized personnel may access member personal data, and every access is recorded in an audit log.
• Incident Response Plan: A rapid response procedure in the event of a data breach, including notification to affected members within the timeframe required by law.

While we take all reasonable precautions, no system can guarantee 100% absolute security. We therefore encourage you to also practise good cyber hygiene, such as using strong, unique passwords and not sharing your login details with anyone.

6 Cookies and Tracking Technologies

Winbox8 uses cookies and similar tracking technologies to improve your user experience and help us understand how our platform is used. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how users interact with our platform — pages visited, time spent, and errors encountered — to help us improve our services.
• Functionality Cookies: Storing your preferences such as preferred language, display settings, and saved login information for your convenience.
• Analytics Cookies: Helping us understand usage patterns in aggregate and anonymized form for product improvement purposes.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality of some Winbox8 platform features.

7 Your Rights as a User

As a winbox8 member, you have specific rights regarding your personal data. We fully respect these rights and provide straightforward mechanisms for you to exercise them:

• Right of Access: You have the right to request a copy of all personal information we hold about you.
• Right to Rectification: If your information is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: Under certain circumstances, you have the right to request deletion of your personal data — subject to our legal obligations to retain certain records.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain situations, such as when you are disputing the accuracy of that information.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Data Portability Right: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: If the processing of your data is based on consent, you may withdraw that consent at any time without affecting the validity of prior processing.

To exercise any of the above rights, please contact our support team via live chat or email. We will process your request within 30 business days. For complex cases, we may require additional time and will notify you accordingly.

8 Data Retention and Deletion

Winbox8 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

Standard Retention Period:

• Active Account Data: For the full duration your account is active, plus any additional period required by law.
• Financial Transaction Records: Minimum 7 years as required by Malaysian legislation on financial records and anti-money laundering.
• Communication Logs: 3 years for support chat records and emails related to disputes or complaints.
• KYC Data: 5 years after account termination or as required by the relevant regulatory authority.
• Security Logs: 12 months for access logs and platform activity records for security investigation purposes.

Once the retention period expires, your personal data will be securely deleted or permanently anonymised using methods that ensure it cannot be re-identified. Our deletion process complies with recognised information security standards.

9 Third-Party Links and Services

The winbox8 platform integrates third-party services including game providers, payment gateways, and analytics tools to enhance your experience. Please note that each third-party provider manages their own privacy policies.

Winbox8 is not responsible for the privacy practices or content of any third-party websites or services that may be accessible through our platform. We encourage you to read the privacy policy of each third-party service provider you use.

All third-party providers we work with have undergone a security assessment process and are required to sign data processing agreements ensuring they handle our members' information to a standard consistent with this Privacy Policy.

10 Changes to This Privacy Policy

Winbox8 reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technology, or our business operations. Whenever changes are made, the "Updated" date at the top of this page will be revised.

For significant changes that directly affect your privacy rights, we will provide clear notice through:

• In-platform notification upon your next login
• Email to the address registered in your account
• A prominent notice on our website's home page

Your continued use of the winbox8 platform after changes take effect constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 7.

11 Contact Us Regarding Privacy

If you have any questions or concerns, or wish to exercise your privacy rights, our team is available through a range of convenient communication channels:

• 24/7 Live Chat: The fastest way — available directly on the Winbox8 website and app
• Privacy Email: [email protected] (Response within 3 business days)
• General Support: [email protected]
• WhatsApp & Telegram: Through official channels available on our platform

When contacting us regarding privacy, please provide your full name, registered email address, and a clear description of your request or concern. This helps us process your request more quickly and accurately.

We take every privacy inquiry seriously and will respond within the promised timeframe. Your satisfaction and trust are our priority.