winboz is committed to protecting the personal data and privacy of every Malaysian player on our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you hold over your own data.
winboz operates Malaysia's premier online sports betting and casino platform. In the course of providing our Services to Malaysian players — including sportsbook betting, live casino, slot games, and lottery — we necessarily collect and process certain personal data about our Members. We take this responsibility seriously.
This Policy applies to all personal data processed by winboz in connection with the winboz Platform and Services. It applies to all Members, registered or unregistered visitors, and any individual whose personal data winboz processes in connection with the Platform. This Policy should be read in conjunction with the winboz Terms & Conditions.
winboz processes personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality. We do not sell personal data to third parties for their own marketing purposes.
winboz is the data controller in respect of personal data collected from Members and visitors to the Platform. As data controller, winboz determines the purposes and means of processing personal data collected through the Platform and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.
For all data protection queries, requests, and complaints, Members may contact the winboz Data Protection team via the contact details set out in Section 14 of this Policy. winboz will respond to all data subject requests within the timeframe required under applicable data protection law.
winboz collects personal data from Members and Platform visitors in the following categories:
3.1 Registration & Identity Data
When you register a winboz Account, we collect: your full legal name; date of birth; Malaysian IC (MyKad) number or passport number; residential address; email address; Malaysian mobile number; and chosen username. This information is required to create and administer your Account and to fulfil our KYC obligations.
3.2 Financial & Transaction Data
When you make deposits or withdrawals, winboz collects transaction data including: payment method details (e-wallet identifier, bank account reference, or FPX transaction reference); deposit and withdrawal amounts; transaction timestamps; and transaction reference numbers. winboz does not store full banking credentials or card numbers on its own servers — these are processed through certified Malaysian payment gateway partners.
3.3 Gaming & Betting Activity Data
winboz records all betting and gaming activity conducted on your Account, including: bet placements, stake amounts, selections, odds, outcomes; casino and slot game session data; game results; and any Cash Out transactions. This data is used for Account administration, dispute resolution, responsible gaming monitoring, and regulatory compliance.
3.4 Technical & Device Data
When you access the winboz Platform, we automatically collect: IP address; device type, model, and operating system; browser type and version; screen resolution; session duration; pages visited; click-path data; and login timestamps. This data is used for Platform security, fraud detection, and performance optimisation.
3.5 Communications Data
If you contact winboz via Live Chat, email, or any other support channel, we retain records of that communication, including the content of messages and any supporting documentation provided. This data is used for support resolution, quality assurance, and record-keeping.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, MyKad, date of birth | Account registration, KYC verification |
| Contact Data | Email, mobile number, address | Account management, support, notifications |
| Financial Data | Payment method reference, transaction amounts | Deposit/withdrawal processing, AML compliance |
| Gaming Activity | Bets placed, game sessions, winnings | Service delivery, responsible gaming monitoring |
| Technical Data | IP address, device, browser, session logs | Security, fraud prevention, performance |
| Communications | Support chat transcripts, emails | Dispute resolution, quality assurance |
winboz uses the personal data we collect for the following purposes:
winboz does not use personal data to make fully automated decisions that produce legal or similarly significant effects without human oversight, except where expressly permitted by applicable law.
winboz processes personal data under the following legal bases:
The winboz Platform uses cookies and similar tracking technologies to operate certain Platform functions, remember your preferences, and analyse usage patterns. The categories of cookies used are:
You may configure your browser to refuse or delete cookies. Note that disabling certain cookies may affect Platform functionality. Third-party payment processor pages you are redirected to during transactions may set their own cookies, governed by the privacy policies of those third parties.
winboz does not sell your personal data to third parties. We share personal data only in the following circumstances:
All third parties with whom winboz shares personal data are required to handle that data in accordance with applicable data protection requirements and winboz's data processing instructions.
winboz retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy regulatory, legal, and audit requirements. Specific retention periods are as follows:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with winboz's data disposal procedures.
winboz implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:
Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your winboz Account credentials. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, winboz will notify affected Members in accordance with applicable data protection obligations.
Subject to applicable law, you have the following rights in relation to personal data that winboz holds about you:
Request a copy of the personal data winboz holds about you, along with information about how it is processed.
Request correction of any inaccurate or incomplete personal data held in your winboz Account record.
Request deletion of your personal data where there is no lawful reason for continued retention, subject to overriding legal obligations.
Request that winboz restricts processing of your personal data in specific circumstances, such as while the accuracy of the data is being contested.
Request a structured, machine-readable copy of personal data you have provided to winboz, where technically feasible.
Object to processing of your personal data based on winboz's legitimate interests, including direct marketing communications, at any time.
To exercise any of the above rights, contact winboz via the details in Section 14. winboz will respond within thirty (30) days. winboz may need to verify your identity before processing a request. Certain rights are subject to exceptions where processing is required for compliance with legal obligations or the defence of legal claims.
winboz employs age verification at registration and reserves the right to conduct enhanced age verification at any point during the Member relationship. Any Account where age verification cannot be satisfactorily completed will be suspended pending resolution.
The winboz Platform may contain references to third-party services, including payment gateway interfaces operated by Maybank, CIMB, Touch 'n Go, Boost, DuitNow, GrabPay, and other Malaysian payment partners. When you are redirected to a third-party page to complete a payment transaction, that page is operated by the respective third party under its own privacy policy.
winboz is not responsible for the privacy practices of third-party payment processors or other third-party services you may access in connection with the Platform. We recommend that you review the privacy policy of any third-party service before providing personal data to them.
winboz reserves the right to update or amend this Privacy Policy at any time. Where amendments are material, winboz will provide notice to Members by email to the registered address or via a prominent notice on the Platform prior to the amendment taking effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.
Your continued use of the winboz Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the changes. Members are encouraged to review this Policy periodically to remain informed of how winboz processes their personal data.
For all privacy-related queries, data subject access requests, complaints, or to exercise any of your data protection rights, please contact the winboz Data Protection team:
Email: [email protected]
Live Chat: Available 24/7 within the winboz Platform
Serving: Malaysian players across Kuala Lumpur, Penang, Johor Bahru, and all of Malaysia
winboz will acknowledge all data protection requests within five (5) business days and will aim to resolve them within thirty (30) days. Where a request is complex or voluminous, the response period may be extended, and you will be notified accordingly.
If you are not satisfied with winboz's handling of a data protection concern, you have the right to lodge a complaint with the applicable data protection supervisory authority in your jurisdiction.
Six ways winboz protects your personal data and respects your privacy as a Malaysian player.
winboz does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your data is used exclusively to operate your winboz Account and deliver our Services to you.
All data exchanged between your device and winboz servers is protected by bank-grade 256-bit SSL/TLS encryption. Login sessions, transaction data, and personal information are encrypted in transit at all times.
Our KYC identity verification process is not just a regulatory requirement — it actively protects you against account fraud and identity theft. Verified accounts receive full deposit, withdrawal, and bonus eligibility without restriction.
winboz collects only the personal data necessary to deliver our Services and comply with regulatory obligations. We do not collect data for collection's sake. Data that is no longer required for its stated purpose is securely deleted.
You can manage your winboz marketing communication preferences, cookie settings, and responsible gaming data controls directly from your Account settings panel — no need to contact support to opt out of promotional emails or adjust data preferences.
winboz supports all data subject rights — access, rectification, erasure, portability, restriction, and objection. Submit a request to [email protected] and our Data Protection team will respond within thirty (30) days.
Your personal data, your financial transactions, and your Account security are protected by multiple layers of technical and organisational safeguards. Join over 500,000 Malaysian players who trust winboz with their betting experience.
21+ only · Gamble Responsibly · winboz is committed to data privacy for all Malaysian players