Privacy Policy Winbox Asia – Your Data, Our Responsibility

Winbox asia respects the privacy of every user on our platform. This Privacy Policy is designed to explain clearly and transparently how we manage your personal information — from how it is collected and the purposes it is used for, to the security measures we take to protect it.

This policy applies to all users who access the winbox asia website, use our mobile app, or interact with any of our services. By registering an account or continuing to use this platform, you consent to our collection and processing of your personal information in accordance with the terms stated here.

Winbox asia operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take this legal obligation seriously and consistently strive to meet or exceed the established standards for user data protection.

Winbox asia collects various types of information to enable us to provide a safe, efficient, and high-quality service. The information we collect can be grouped into several categories:

Information You Provide Directly:

• Full name as stated in your official identification document.
• Date of birth for age verification purposes.
• Active email address used for account communications.
• Mobile phone number for two-factor authentication and notifications.
• Current residential address for KYC requirements.
• Bank account or e-wallet details for processing deposits and withdrawals.
• A copy of your identification document such as MyKad or passport when requested.

Information Collected Automatically:

• Your device's IP address and general location information.
• Device type, operating system, and web browser version in use.
• Login history and session activity within the platform.
• Usage data including pages visited and browsing duration.
• Information related to cookies and tracking technologies.

Every piece of information we collect is used solely for legitimate purposes necessary for the operation of the winbox asia platform. The following are the primary purposes for which your personal data is used:

• Account Management: To create, verify, and maintain your account on the winbox asia platform, including the mandatory KYC process.
• Transaction Processing: To process deposits, withdrawals, and any other financial transactions you carry out through the platform.
• Platform Security: To detect and prevent fraud, money laundering, multiple account usage, and any other suspicious activity.
• Service Communications: To send important notifications regarding your account, transactions, terms updates, and security information.
• Experience Enhancement: To understand how users interact with the platform and to make continuous improvements.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including reporting requirements to the relevant authorities.
• Responsible Gaming: To monitor gaming patterns and provide support to players who may need help managing their playing habits.

Winbox asia does not sell, rent, or disclose your personal information to third parties for their own commercial purposes. However, in the course of operating the platform, there are certain situations where we need to share data with trusted partners:

• Payment Providers: Required transaction information is shared with payment service providers such as FPX, Touch 'n Go, GrabPay, and DuitNow solely to process your financial transactions.
• Identity Verification Providers: KYC data is shared with licensed third-party identity verification platforms to ensure compliance with legal requirements.
• Technology Service Providers: Cloud infrastructure and security providers that help operate our platform — all bound by strict confidentiality agreements.
• Relevant Authorities: When required by law, court order, or a directive from a legitimate regulatory authority, we will comply with the stipulated disclosure requirements.

All third parties we work with are required to comply with data protection standards equal to or higher than those we practise. Data sharing is carried out only within the necessary scope and does not exceed what is stated.

Protecting your personal data is winbox asia's highest priority. We continuously invest in the latest security infrastructure to ensure your information is safeguarded against cyber threats, unauthorized access, and data breaches.

The security measures we implement include:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and winbox asia servers.
• At-rest data encryption for all personal and financial information stored in our databases.
• Two-factor authentication (2FA) available for all accounts as an additional layer of protection.
• 24/7 real-time monitoring by an automated security system that detects and blocks suspicious access attempts.
• Regular security audits by independent cybersecurity experts to identify and address any vulnerabilities.
• Role-based access control ensuring that only authorised personnel can access user data, and only within the scope of their responsibilities.

While we take all reasonable measures, no system on the internet can be guaranteed 100% secure. In the event of a security incident involving your data, winbox asia will notify you within the timeframe required by applicable law.

Winbox asia uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

We use several types of cookies:

• Essential Cookies: Required for core platform operations — including login session verification, security, and essential functionality. These cookies cannot be disabled.
• Performance Cookies: Collects information on how users interact with our platform to help us make improvements. All data is collected in aggregate and does not identify individuals.
• Functional Cookies: Saves your preferences such as language, display theme, and other personal settings to provide a more comfortable experience.

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the full functionality of the winbox asia platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data, all of which winbox asia fully respects:

Winbox asia retains your personal data only for as long as it is needed for the purposes stated in this policy or as required by applicable law. The following are the general data retention guidelines we practise:

• Active Account Data: Retained for as long as your account is active and you continue using winbox asia services.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for the period required under applicable anti-money laundering (AML) regulations.
• Security Logs: Retained for 12 months for fraud detection and dispute resolution purposes.
• Closed Account Data: Basic data is retained for the period required by law following account closure before being securely deleted.

When data is no longer needed and there is no legal obligation to retain it, winbox asia will securely delete or re-encrypt it using safe, non-recoverable methods.

The winbox asia platform may contain information or references related to third-party services such as payment providers. winbox asia is not responsible for the privacy practices or content of any third-party platform you may access in the context of using our services.

We recommend that you read and understand the privacy policy of each third-party platform you use. Your interactions with payment providers and other service partners are subject to their own terms and privacy policies.

If you have any questions, concerns, or requests regarding this Privacy Policy or how winbox asia handles your personal data, we encourage you to contact us directly.

You can reach our data protection team via:

• Live Chat: Available directly within the winbox asia platform, 24 hours a day, 7 days a week.
• Support Email: [email protected] (displayed as text only — please copy and paste manually into your email client).

We are committed to responding to all privacy-related inquiries within a reasonable timeframe. For formal requests under the PDPA, we will process your request in accordance with the prescribed legal requirements.

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal requirements. You will be notified of any material changes via your registered email or a prominent notice on the platform.