win box Official Documents

Win box Privacy Policy – Personal Data Protection for Malaysian Players

This Privacy Policy explains how win box collects, uses, stores and protects your personal data as a member of the platform. Your privacy is our priority, and we are committed to ensuring that every piece of information you share with us is held to the highest security standards.

Updated: 1 January 2026  |  Language: Bahasa Melayu (ms-MY)

256-bit SSL Encryption
No Data Sales
Personal Data Control
Standards Compliance

Win box's Six Data Protection Principles

Win box's Privacy Policy is built on six core principles that ensure every Malaysian member's personal data is handled with integrity and accountability.

Minimum Data Collection

Win box only collects personal data that is strictly necessary to manage your account, process financial transactions, and ensure legal compliance. We do not collect information that is excessive or irrelevant to platform operations.

Use for Specific Purposes

All data collected by win box is used solely for the purposes clearly stated in this Privacy Policy. We do not use your data for any other purpose without first obtaining your explicit consent through a clear and easily understood mechanism.

Advanced Security

All data stored and transmitted through the win box platform is protected by 256-bit SSL encryption – the same standard used by Malaysia's leading financial institutions such as Maybank and CIMB. Our servers are also secured with firewalls and up-to-date intrusion detection systems.

Explicit User Consent

Win box obtains your consent before collecting or processing any personal data beyond basic operational needs. You have the right to withdraw consent at any time, and this process is made as straightforward as possible with no conditions that would discourage you from doing so.

Ongoing Data Accuracy

Win box takes reasonable steps to ensure that the personal data we hold is accurate, complete and up to date. You may update your personal information at any time through your account settings or by contacting our support team.

Full Control in Your Hands

As a win box member, you have the full right to access, correct, transfer, or request the deletion of your personal data. win box provides a straightforward and transparent mechanism for exercising these rights without putting you through a lengthy or complicated process.

Important: This Privacy Policy forms part of win box's Terms & Conditions and is legally binding. By registering for or using the win box platform, you confirm that you have read and agreed to all terms set out herein. Please read this document carefully and contact us if you have any questions.

Introduction: win box ("we", "the platform" or "win box") is the data controller for all information collected through the online entertainment platform at winbox-jit.com. We operate in compliance with applicable data protection laws and regulations, and are committed to safeguarding the privacy of every registered member in Malaysia.

1. Personal Data We Collect

Win box collects various types of personal data during the registration process, through your use of the platform, and each time you interact with our services. This data is collected directly from you or automatically through your use of the platform.

Data you provide directly:

  • Registration information: Your full name, Malaysian phone number, email address and chosen password when opening a win box account.
  • Identity verification information: Your identity card number (MyKad), date of birth and any other supporting documents requested during the KYC (Know Your Customer) process to meet legal compliance requirements.
  • Financial information: Payment method details you use, including eWallet or bank account numbers linked to Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX. win box does not store debit or credit card numbers directly — transactions are processed through licensed, secure payment gateways.
  • Communication information: Messages, enquiries and complaints you send to the win box support team via Live Chat or email.
  • Preference information: Your game preferences, account settings, and marketing preferences as indicated by you.

Automatically collected data:

  • Technical data: IP address, browser type, operating system, device type, and screen resolution.
  • Activity data: Pages visited, games played, session duration, betting history, and transaction records.
  • Location data: General location information based on your IP address for geographic compliance and account security purposes.
  • Cookie data: Information collected through cookies and similar tracking technologies – described in further detail in the Cookie Policy section below.

2. How win box Uses Your Personal Data

Win box uses the personal data collected for the following purposes, which are necessary to operate the platform and provide you with the best possible service:

  • Account management: Creating, verifying, and maintaining your win box account; processing logins and safeguarding your account against unauthorised access.
  • Transaction processing: Securely processing deposits and withdrawals through your chosen Malaysian local payment method; maintaining transaction records for accounting and compliance purposes.
  • Provision of gaming services: Giving you access to more than 700 games including slots, Live Casino, Blackjack and roulette; storing your game history and winnings.
  • Legal compliance: To fulfil KYC and AML (Anti-Money Laundering) obligations; verify the minimum age of 18; and comply with reporting requirements to relevant authorities.
  • Security & fraud prevention: Identifying and investigating suspicious activity; preventing fraud, money laundering, and platform access by ineligible individuals.
  • Service communications: Sending important notifications relating to your account, transactions and policy updates; providing customer support via Live Chat and email.
  • Marketing and promotions: Sending you information about win box promotions, bonuses and offers that may interest you – subject to your consent. You may opt out of marketing communications at any time through the email preferences settings in your account.
  • Platform improvements: Analysing aggregated and anonymised usage patterns to understand how the platform is used and identify opportunities to improve the user experience.

Win box will not use your personal data for any purpose beyond those stated above without first obtaining fresh consent from you.

3. Sharing of Personal Data

Win box does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Your data is only shared in the following limited circumstances:

  • Service providers: win box works with a select group of third-party service providers to operate the platform — including payment gateways for processing transactions via Touch 'n Go eWallet, GrabPay, DuitNow, and FPX; Live Casino game providers; cloud service providers; and customer support providers. All service providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific services they provide.
  • Legal requirements: win box will disclose your personal data to the relevant authorities when required by Malaysian law, court order, or direction from a legitimate regulatory body. win box will endeavour to notify you prior to such disclosure, except where doing so is prohibited by law.
  • Fraud prevention: In circumstances where there is reasonable suspicion that your account has been used for fraudulent activity or money laundering, win box may share relevant information with law enforcement agencies or financial institutions involved.
  • Business transfers: In the event of a merger, acquisition, or sale of win box assets, user data may be transferred as part of that transaction. You will be notified by email or via a prominent notice on the platform before your data becomes subject to a different privacy policy.

In all of the data-sharing scenarios described above, win box ensures that any party receiving your personal data is bound by data protection obligations that are equivalent to, or stricter than, the standards we hold ourselves to.

4. Data Security & Protection

Win box makes serious investments in security infrastructure to ensure your personal data is protected at all times. Our technical and organisational security measures include:

  • 256-bit SSL encryption: All data transmitted between your browser and win box's servers is encrypted using the latest TLS protocol. This means any data intercepted in transit cannot be read by unauthorised parties.
  • Secure data storage: Personal data is stored in databases protected by strict access controls. Only win box staff with a legitimate professional need are permitted to access your personal data.
  • Two-factor authentication: win box offers two-factor authentication (2FA) for account login to provide an additional layer of security beyond your password.
  • Continuous security monitoring: Our systems are monitored around the clock to detect unusual activity or unauthorised access attempts.
  • Regular security audits: win box conducts regular internal and external security audits to identify and address vulnerabilities before they can be exploited.
  • Staff training: All win box staff who handle personal data receive comprehensive data protection training and are bound by strict confidentiality agreements.

While win box takes all reasonable steps to protect your data, no security system can be guaranteed 100% foolproof. In the event of a data breach that affects the security of your personal information, win box will notify you within a reasonable timeframe and take appropriate remedial action.

You are also responsible for protecting your account by using a strong password, keeping your login credentials confidential, and notifying us immediately if you suspect unauthorised access to your account.

5. Cookie Policy (Cookies)

Win box uses cookies and similar tracking technologies to enhance your experience on the platform, understand how it is being used, and deliver more relevant content and advertisements. Cookies are small text files stored on your device when you visit the win box platform.

Types of cookies used by win box:

You can control and manage cookies through your browser settings. Most browsers allow you to view, delete or block cookies from specific websites. Please note that blocking essential cookies may affect the functionality of the win box platform and your gaming experience.

6. Your Rights as a Data Subject

As a win box member, you have the following rights regarding the personal data we hold about you. win box is committed to respecting and facilitating the exercise of these rights within a reasonable timeframe:

1
Right of Access

You have the right to request a copy of the personal data win box holds about you at any time. Data access requests can be submitted via email to support@winbox-jit.com, and we will process your request within 14 business days.

2
Right to Rectification

If you find that any personal data win box holds about you is inaccurate or incomplete, you have the right to request a correction. You can update basic information directly through your account settings, or contact our support team for more complex corrections.

3
Right to Erasure

You may request the deletion of your personal data from win box's systems — known as the "right to be forgotten". Such requests will be processed subject to legal obligations that require us to retain certain data for periods stipulated by financial and anti-money laundering regulations.

4
Right to Restrict Processing

Under certain circumstances, you have the right to request that win box restrict the processing of your personal data – for example, while the accuracy of the data is being verified or while your objection to its processing is under review by our team.

5
Right to Data Portability

You have the right to receive the personal data you have provided to win box in a structured, machine-readable format, and to transfer that data to another operator under certain circumstances as provided by applicable law.

6
Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time without providing any reason. For other purposes, the right to object is subject to certain conditions and win box will assess each case individually.

To exercise any of the rights above, please contact win box's Data Protection Officer via email support@winbox-jit.com stating the right you wish to exercise and providing sufficient account information for us to verify your identity. win box will respond within 14 business days of receiving a complete request.

7. Data Retention Period

Win box retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations. General data retention guidelines are as follows:

  • Active account data: Retained for as long as your account remains active on win box. If you have not logged in for 24 consecutive months, win box reserves the right to archive or delete your data after providing appropriate notice.
  • Financial transaction data: Retained for a minimum of seven years from the transaction date in accordance with Malaysian accounting and anti-money laundering legal requirements.
  • KYC and identity verification data: Retained for a minimum of five years following account closure, in accordance with financial compliance requirements.
  • Customer support communication logs: Retained for two years from the date of interaction for quality control and dispute resolution purposes.
  • Marketing data: Retained until you withdraw your marketing consent or request deletion, whichever comes first.

Once the relevant retention period has expired, win box will securely and irreversibly delete or anonymise your personal data.

8. Protection of Children's Data

Win box is an online entertainment platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process any personal data relating to children or minors under the age of 18.

If you are a parent or guardian who believes your minor child has provided personal data to win box without your knowledge, please contact us immediately at support@winbox-jit.com. win box will take prompt steps to delete the data and close the associated account upon verification.

Win box employs an age verification system during the registration process and reserves the right to request proof of age at any time. If an account is found to have been registered by an underage individual, it will be closed immediately and any remaining balance refunded upon completion of the verification process.

9. Amendments to the Privacy Policy

Win box reserves the right to amend, update, or replace this Privacy Policy at any time. Such changes may be necessary due to updates in data protection legislation, technological developments, changes in business operations, or new compliance requirements.

When we make material changes to this Privacy Policy, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Displaying a prominent notice on the win box platform's main page regarding the changes.
  • Sending email notifications to all active members outlining the key changes made.

Your continued use of the win box platform following the publication of any amendments to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we manage your personal data.

10. Contact Us About Data Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how win box handles your personal data, please don't hesitate to reach out to us through the following channels:

  • Live Chat: Available directly within the win box platform, 24 hours a day, 7 days a week, with a response time of under 90 seconds.
  • Email: support@winbox-jit.com – for data privacy enquiries and subject access right requests.

Win box takes your data privacy seriously and is committed to resolving all privacy-related enquiries or complaints within a reasonable timeframe in a fair and transparent manner. We aim to provide a full response to all privacy enquiries within 14 business days of receipt.

This Privacy Policy should be read together with: This document forms part of the overall agreement between you and win box, together with Terms & Conditions and Responsible Gaming Policy us. Reading all three documents will give you a complete picture of how win box operates and our commitment to every member.

Other Policies You Should Know About

This Privacy Policy is part of win box's complete set of policy documents. Please also read the following documents for a full overview.

Win box Terms & Conditions

A comprehensive user agreement covering account terms, deposits, withdrawals, bonuses, and game rules for all win box members in Malaysia.

Read Terms & Conditions
Responsible Gaming

A complete guide to win box's self-exclusion tools, game limits, and support resources — designed to help you maintain a healthy and controlled gaming experience.

Learn More
Frequently Asked Questions (FAQ)

Answers to the most frequently asked questions by win box members — from registration and deposits to technical questions about privacy and data security.

View FAQ
Responsible Gaming at win box

Win box is committed to promoting healthy and responsible gaming. Set deposit and time limits before you start your session. Online gaming is entertainment – not a source of income. Players must be 18 years of age or older. For more information, visit the Responsible Gaming us.

Your Data Is Safe with win box

Register for free today and enjoy over 700 of the best games on a secure, licensed platform that fully respects the privacy of every Malaysian member.

Bahasa Melayu