Official Documents
Winbox2 takes your privacy seriously. This document transparently explains how we collect, use, store, and protect your personal information as a player on our platform. No confusing language – just clear, straightforward explanations.
These are the core commitments that guide how winbox2 handles every piece of information you entrust to us.
All data transmitted between your device and winbox2 servers is protected by 256-bit SSL encryption — the same security technology used by Malaysia's leading commercial banks, including Maybank and CIMB. No one can read your data while it is in transit, including winbox2 itself.
Winbox2 never sells, rents, or trades your personal data with any external company for marketing purposes. Information you provide to winbox2 remains within the winbox2 ecosystem – used only for purposes to which you have given implied or explicit consent at the time of registration.
You have the right to access, correct, and request the deletion of your personal data held by winbox2. We provide straightforward mechanisms for you to exercise these rights – simply contact our support team and your request will be processed within a reasonable timeframe.
Your personal and financial data is stored on servers protected by multiple layers of security – including tiered firewalls, strict access controls, and real-time threat monitoring. Only winbox2 staff who genuinely need access to your data to perform their duties are authorised to do so.
The winbox2 Privacy Policy is drafted with Malaysia's Personal Data Protection Act 2010 (PDPA) in mind. We comply with all legal requirements relating to the collection, processing, and storage of personal data as set out under applicable Malaysian law.
In the unlikely event that your data is exposed due to a security incident, winbox2 is committed to notifying you as quickly as possible. We will also take immediate steps to contain and address any data breach as soon as it is detected.
Important Note: This Privacy Policy describes the privacy practices of winbox2 for the platform accessible at winbox2.click. By registering for or using winbox2's services, you agree to the collection and use of information as described in this document. If you do not agree, please do not use the winbox2 platform. For any questions, email us at support@winbox2.click.
Winbox2 collects various types of information to provide you, as a Malaysian player, with a secure, seamless, and relevant experience. We only collect what is strictly necessary for the purposes outlined — nothing more.
When you register or use the winbox2 platform, you provide us with the following information:
When you use the winbox2 platform, our systems automatically record certain technical information required for security and service improvement:
In certain situations, winbox2 may receive information about you from legitimate sources such as payment service providers (to verify transactions) or fraud prevention agencies that help us identify suspicious activity.
Data Minimisation Principle: winbox2 only collects information necessary to provide our services. We do not collect sensitive data such as health information, political views, or religious affiliations. If you have previously provided information that is no longer required, you may request its deletion through our support team.
Every piece of data we collect is used for a defined and legitimate purpose. Below is a full explanation of how winbox2 uses your personal information.
The most fundamental purpose for using your data is to operate the winbox2 service properly:
Winbox2 is legally required to carry out KYC (Know Your Customer) procedures to prevent money laundering and fraud. Your identity verification data is used to confirm that you are who you claim to be, that you are 18 years of age or older, and that your financial transactions are legitimate. This is a mandatory legal requirement — not a discretionary choice by winbox2.
Winbox2 uses your data to detect and prevent fraudulent activity, unauthorised account access, multi-account usage, money laundering, and bonus abuse. winbox2's security systems continuously analyse activity patterns to identify any anomalies that may indicate a security threat to your account or the platform as a whole.
Aggregated, non-identifiable usage data is used to understand how Malaysian players use the winbox2 platform, identify technical issues, and inform decisions about new features to develop. This analysis helps winbox2 become a better platform over time.
Winbox2 may use your email address or phone number to send information about promotions, new bonuses, or important platform updates. You can opt out of marketing communications at any time via your account settings or by contacting our support team – without affecting your access to winbox2's core services.
| Data Types | Purpose of Use | Legal Basis |
|---|---|---|
| Account Information | Identity verification, login, communications | Contract performance |
| Financial Data | Deposit & withdrawal processing | Contract performance, legal obligations |
| Device & IP Data | Security, fraud prevention | Legitimate interests of winbox2 |
| Usage Data | Platform improvement, analytics | Legitimate interests of winbox2 |
| Email & Phone | Service & marketing communications | Consent / legitimate interests |
The winbox2 platform uses cookies and similar technologies to ensure a smooth and secure experience for every player. Below is a transparent explanation of how cookies are used on winbox2.
Cookies are small text files stored in your web browser or device when you visit the winbox2 platform. They help winbox2 recognise you when you return, remember your preferences, and keep your login session secure. Without cookies, you would need to log in again every time you close and reopen your browser.
You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies — particularly security and session cookies — may affect the functionality of the winbox2 platform, including your ability to log in and carry out transactions securely. winbox2 recommends keeping cookies enabled for the best experience.
Winbox2 does not sell your personal data. However, there are limited situations where winbox2 may need to share your information with certain parties — and we want to be fully transparent about those circumstances.
When you make a deposit or withdrawal using Touch 'n Go eWallet, DuitNow, GrabPay, FPX Maybank2u, CIMB Clicks, ShopeePay, or Boost – only the minimum transaction data necessary to process your payment will be shared with the respective payment service provider. This sharing is required and is governed by strict confidentiality agreements with each provider.
Winbox2 uses certain third-party services to operate the platform — including cloud infrastructure providers, email delivery services, and game providers such as Pragmatic Play and PG Soft for slots, and Evolution Gaming for Live Casino. These providers may receive data necessary to deliver their services, but all are bound by strict data protection agreements with winbox2.
Winbox2 may be required to disclose user information to Malaysian government authorities, regulatory bodies, or law enforcement agencies if ordered by a court or required under applicable law. In such cases, winbox2 will disclose only the minimum information necessary and, where permitted by law, will endeavour to notify you in advance.
In the event of a merger, acquisition, or sale of winbox2 assets, user data may be transferred as part of the business assets. You will be notified in advance by email or in-platform notification, and the new owner will be bound by this Privacy Policy or one that provides equal or greater protection.
We Will Never: Selling or renting your data to advertisers or third-party marketing agents. Sharing your data with competitors or companies unrelated to winbox2's operations. Disclosing your financial information without a clear legal requirement or your explicit consent.
Protecting your data from unauthorised access is winbox2's top priority. We invest continuously in robust security infrastructure and take a layered security approach to ensure comprehensive data protection.
Beyond technical measures, winbox2 also enforces strong organisational controls. All staff with access to user data undergo background checks and data protection training. A least-privilege access policy is strictly enforced. Regular internal and external security audits are conducted by independent parties.
Winbox2 provides a two-factor authentication (2FA) feature that you can enable in your account settings. With 2FA active, every login attempt requires a one-time OTP code sent to your registered phone number — ensuring that even if your password is compromised, your account remains secure. winbox2 strongly encourages all players to enable this feature.
Important Security Note: While winbox2 implements the strongest security measures, the safety of your account also depends on you. Never share your password with anyone, use a strong and unique password, and always log out on shared devices. The winbox2 support team will never ask for your password through any channel.
Winbox2 does not retain your data indefinitely. We maintain a clear data retention policy based on operational needs and legal obligations.
As a general rule, winbox2 retains active user data for the duration your account remains active, plus any additional period required by law following account closure. Financial transaction records are kept for a minimum of 7 years as required under Malaysian law governing financial records and anti-money laundering. Customer support communications are retained for 3 years for reference and dispute resolution purposes.
When you close your winbox2 account, personal information that is not required for legal purposes or outstanding dispute resolution will be deleted or anonymised within 90 days of the closure date. Transaction records and KYC documents may be retained longer in accordance with applicable legal requirements.
You may request the deletion of your personal data by contacting the winbox2 support team. We will review your request and delete the data that can be removed within 30 days. However, certain data cannot be immediately deleted for legal reasons — in such cases, we will inform you of the reasons.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and winbox2's own policies, you have specific rights regarding the personal data we hold about you. We are committed to making it easy for you to exercise those rights.
You have the right to request a copy of the personal data winbox2 holds about you. Requests can be submitted through our support team and will be processed within 30 days.
If any data we hold is inaccurate or out of date, you have the right to request a correction. Log in to your winbox2 account and update your details in the profile settings.
In certain circumstances, you have the right to request the deletion of your personal data – subject to applicable legal data retention obligations.
You may object to the processing of your data for direct marketing purposes at any time — without affecting your core winbox2 services.
You may request your personal data in a machine-readable format for transfer to another service, where technically feasible.
Reach us at support@winbox2.click with the subject line "Privacy Request" or via live chat. We will verify your identity and process your request within 30 days.
Winbox2 takes child protection very seriously. The winbox2 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.
If you are a parent or guardian and believe that your child has provided personal information to winbox2 without your consent, please contact us immediately at support@winbox2.click. We will take prompt steps to verify the situation and delete all relevant data if it is confirmed that the account was registered by a minor.
Strict 18+ Age Limit — No Exceptions: Registration by individuals under the age of 18 is strictly prohibited on winbox2. We conduct age verification during registration and the withdrawal process. Any account found to belong to a minor will be terminated immediately and all associated data will be deleted in accordance with the appropriate procedures.
The winbox2 platform may contain links or references to third-party services related to our operations – such as game providers or payment services. This Privacy Policy applies only to data we collect and process on the winbox2 platform.
Winbox2 is not responsible for the privacy practices or content of any third-party websites or services you may access through our platform. We encourage you to read the privacy policy of every platform you use to understand how your data is handled by them.
Our game providers — including Pragmatic Play, PG Soft, and Evolution Gaming — operate under their own privacy policies for the technical data required to run their games. Your personal information is not shared with these providers beyond what is strictly necessary for technical game operations.
Winbox2 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to the services we offer. When material changes are made to how we handle your personal data, we will provide clear notice.
Notice of changes will be sent to your registered email address and/or displayed as an in-platform notification on winbox2 at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will be updated to reflect the date of the latest amendment.
Your continued use of the winbox2 platform after an amendment takes effect will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion before the changes come into force. The latest version of this Privacy Policy is always available on this page for your reference.
If you have any questions, concerns, or complaints about how winbox2 handles your personal data, or if you wish to exercise your rights as a data subject, our privacy team is ready to assist you.
We are committed to handling all privacy-related enquiries seriously and within a reasonable timeframe. Your email will be received by a team that fully understands winbox2's privacy policy and has the authority to take the necessary action.
In plain terms — here is what winbox2 commits to every Malaysian player regarding your data.
Your payment data is fully encrypted throughout every transaction – whether depositing or withdrawing using the following local Malaysian payment methods.
Touch 'n Go eWallet
GrabPay
FPX / Maybank2u
DuitNow
ShopeePay
Boost eWallet
Responsible Gaming
The usage data we collect also helps us identify players who may need support and offer appropriate responsible gaming assistance.
The deposit limit settings you choose are securely stored and enforced by the winbox2 system. This data is used solely to protect you from spending beyond the limits you have set for yourself.
Winbox2 analyses betting patterns to identify signs of problem gambling and provide proactive support to players who may need it — not for exploitation.
If you use winbox2's self-exclusion feature, this information is kept strictly confidential and will not be disclosed to any party except as required by law.
Age data collected during registration is used solely to verify eligibility and prevent underage access to the winbox2 platform.
If you or someone you know is experiencing gambling-related problems, do not hesitate to seek help. Contact the National Anti-Drug Agency (AADK) at their toll-free number 1800-88-7878. For responsible gaming guidance, visit the Responsible Gaming winbox2.
Winbox2 protects your privacy to the highest standard. Register a free account today and enjoy Live Casino, slots, Sports Betting on Liga Super, badminton, cricket, esports — all backed by uncompromising data security.