Updated — January 2026

Winboxh5 Privacy Policy – Malaysian Player Data Protection

Winboxh5 takes your privacy very seriously. This Privacy Policy document clearly explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Please read it carefully to understand your rights.

Effective: January 2026 Malaysia PDPA 2010 Compliance SSL 256-bit Encryption Malaysia
Data protected SSL 256-bit
Compliance PDPA 2010
Data not sold to third parties
Privacy support 24/7
OUR PRIVACY COMMITMENT

Winboxh5's 6 Pillars of Data Protection

These are the concrete commitments we uphold in protecting every player's privacy winboxh5 always protected.

Bank-Grade Encryption

All your personal and financial data at winboxh5 is encrypted using 256-bit SSL — the same standard used by Maybank and CIMB.

  • 256-bit SSL end-to-end
  • Multi-layered secure servers
  • 24/7 threat monitoring
Your Data, Your Control

Under Malaysia's PDPA 2010, you have full rights over your personal data. Winboxh5 respecting and facilitating the exercise of all these rights.

  • Right of access to personal data
  • Right to data rectification
  • Right to erasure under certain circumstances
No Sale of Data to Third Parties

Winboxh5 has never sold and will never sell players' personal data to any third party for unrelated advertising or marketing purposes.

  • Data is not sold to advertisers
  • Minimum necessary data sharing only
  • Confidentiality agreements with all partners
Malaysia PDPA Compliance

All data collection and processing operations at winboxh5 conducted in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, which is mandatory and binding.

  • Consent-based data collection
  • Clear purpose for data use
  • Regular compliance reviews
Responsible Data Retention

Your data at winboxh5 is retained only for as long as necessary for the stated purposes. Data that is no longer required will be securely deleted in accordance with strict procedures.

  • Clear data retention policy
  • Scheduled secure deletion
  • Data deletion records are maintained
Data Breach Notification

In the event of any data breach affecting your information, winboxh5 committed to notifying you within the timeframe prescribed by Malaysian law.

  • Immediate notification to affected users
  • Reports to the relevant authorities
  • Rapid recovery measures
01

Introduction — Winboxh5 Privacy Commitment

Welcome to the Privacy Policy page winboxh5. At winboxh5, your privacy is not merely a legal obligation — it is a core value we uphold wholeheartedly. We understand that player trust is our most valuable asset, and that trust begins with transparent and responsible data management.

This Privacy Policy is drafted in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and sets out in detail how winboxh5 handles your personal information throughout your use of our platform — from account registration and gaming activity including slots, live casino, poker and Sports Betting, to financial transactions via Touch 'n Go eWallet, DuitNow, GrabPay and other Malaysian payment methods.

This policy applies to all players who access the platform winboxh5 via our website, mobile app, and any other digital channels we operate. By using the platform winboxh5, you agree to the data collection and processing practices described in this document.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer at privacy@winboxh5.ws at any time.

02

Types of Personal Data We Collect

Winboxh5 only collects personal data that is strictly necessary to deliver quality services that are safe and compliant with Malaysian legal requirements. We do not collect excessive or irrelevant data.

Identity & Account Data:

  • Full name as per Malaysian identity card
  • Identity card number (MyKad) or passport number
  • Date of birth and gender
  • Current residential address in Malaysia
  • Username and encrypted password

Contact Data:

  • An active Malaysian mobile number
  • A valid email address

Financial Data:

  • Malaysian bank account details (Maybank, CIMB, Public Bank, and others) for withdrawal purposes
  • Digital wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay)
  • Records of deposit and withdrawal transactions in Malaysian Ringgit (RM)
  • Gaming activity and betting history

Technical Data:

  • IP address at login
  • Device information (device type, operating system, browser version)
  • Cookie and related tracking technology information
  • Access and activity logs within the platform

Winboxh5 does not store credit or debit card information directly on our servers. All card payment processing is handled through PCI-DSS compliant payment gateways.

03

How We Collect Your Personal Data

Winboxh5 collects your personal data through various channels depending on how you interact with our platform.

Direct Collection — Data you provide yourself:

  • When registering a new account at winboxh5
  • When completing the identity verification (KYC) process
  • When making a deposit or withdrawal request
  • When contacting our customer support team
  • When completing a feedback form or satisfaction survey
  • When registering for promotions, tournaments, or VIP programmes

Automatic Collection — Data collected automatically:

  • Technical information collected automatically when you access the platform
  • Cookie data stored in your browser or device
  • Game activity and transaction logs generated by our system
  • Usage analytics data for user experience improvement
04

Purposes for Which We Use Your Personal Data

Winboxh5 uses collected personal data solely for legitimate purposes that have been disclosed to you. We do not use your data for any purpose you have not consented to.

Primary purposes for data use at winboxh5:

  1. Account Management: Creating and managing accounts winboxh5 you, including identity verification and account security
  2. Service Provision: Allows you to access all games including slots, live casino, Texas Hold'em poker, Malaysia Super League Sports Betting and e-sports
  3. Payment Processing: Processing deposits and withdrawals in MYR via Touch 'n Go eWallet, DuitNow, GrabPay, FPX, and other Malaysian payment methods
  4. Customer Support: Helping you resolve issues, answer enquiries, and handle complaints
  5. Security & Fraud Prevention: Detecting and preventing fraud, money laundering and other illegal activities
  6. Legal Compliance: Fulfilling Malaysian legal obligations including KYC and AML requirements
  7. Service Communications: Sending important notifications regarding your account, transactions, and security updates
  8. Marketing (with consent): Sending promotional information, bonuses and exclusive VIP offers where you have given your consent

You may withdraw consent to receive marketing communications at any time by contacting our customer support or through the communication preferences settings in your account. Withdrawing this consent will not affect your core services winboxh5 that you receive.

05

Data Sharing with Third Parties

Winboxh5 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share data with certain parties in order to provide our services to you.

Third parties that may receive your data:

  • Payment Providers: Payment gateways such as DuitNow, FPX, Touch 'n Go eWallet and GrabPay to process your financial transactions in MYR
  • Game Providers: Game development companies (e.g. Pragmatic Play, PG Soft) that provide game content — only data necessary to operate the games
  • IT Service Provider: Technology partners who help operate our platform infrastructure, all bound by strict confidentiality agreements
  • Malaysian Authorities: Malaysian law enforcement agencies, courts, or regulatory bodies when required by law
  • Audit & Compliance: Independent auditors who verify the fairness of games and our platform's compliance

All third parties that receive your data are required to sign a strict data processing agreement and may only use that data for the specified purposes. Winboxh5 responsible for ensuring all partners uphold data protection standards equivalent to our own.

06

Our Data Security Measures

Winboxh5 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or accidental disclosure.

Technical security measures we have implemented:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
  • Data-at-rest encryption for all sensitive stored information
  • Two-factor authentication (2FA) for additional account protection
  • Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) operating 24/7
  • Strict access controls based on the "need-to-know" principle for internal staff
  • Regular penetration testing by independent security experts
  • Encrypted data backups stored at separate secure locations

While we take all reasonable steps to protect your data, no security system in the world can guarantee absolute 100% protection. We encourage you to also safeguard your own account by using a strong password and never sharing your login credentials with anyone.

Winboxh5 will never ask for your account password or OTP via any channel. If you receive such a request claiming to be from us, please report it to our customer support immediately.

07

Your Rights Under the Malaysian PDPA 2010

As a player winboxh5 residing in Malaysia, you have rights protected under the Personal Data Protection Act 2010 (PDPA) of Malaysia. Winboxh5 fully respects these rights and makes it easy for you to exercise them.

Your rights under the Malaysian PDPA:

  1. Right of Access: You have the right to request a copy of your personal data that we hold at any time
  2. Right of Correction: You have the right to request that we correct any data that is inaccurate, incomplete, or outdated
  3. Right to Prevent Processing: You have the right to prevent the processing of your data where it may cause damage or distress
  4. Right to Opt Out of Direct Marketing: You have the right to withdraw consent to receive marketing communications at any time
  5. Right of Erasure: Under certain circumstances, you have the right to request the deletion of your personal data

To exercise any of the rights above, please contact our Data Protection Officer at privacy@winboxh5.ws. We will process your request within 21 working days in accordance with the requirements of Malaysia's PDPA.

08

Cookie Policy

Platform winboxh5 uses cookies and similar tracking technologies to enhance your experience, maintain the security of your login session, and help us understand how our platform is used for continuous improvement.

Cookies are small text files stored in your web browser or device when you browse our platform. They cannot carry viruses or access any other information on your device.

09

Data Retention Period

Winboxh5 retains your personal data only for as long as necessary for the stated purposes and to fulfil applicable legal obligations in Malaysia.

Generally, active account data is retained for as long as your account remains active, plus any additional period required for audit and compliance purposes. Financial transaction data is kept for a minimum of 7 years in accordance with Malaysian financial regulatory requirements. Once the retention period expires, data is securely deleted using methods that make recovery impossible.

If you close your account winboxh5 your personal data will be retained for the period required under Malaysian law before being permanently deleted. This is a compliance requirement that cannot be waived.

10

Third-Party Links & Services

Platform winboxh5 may contain links to or integrations with third-party services, including payment gateway providers such as Touch 'n Go eWallet, GrabPay, DuitNow and FPX. This Privacy Policy applies only to data processed by winboxh5 directly.

When you click on a link to a third-party website or service, or when you interact with an external payment gateway, the privacy policy of that third party will apply to your interactions with them. Winboxh5 is not responsible for the privacy practices of third parties and encourages you to read their privacy policies before providing any personal information.

11

Amendments to This Privacy Policy

Winboxh5 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable Malaysian law, or the way we operate.

You will be notified of any significant amendments through:

  • In-platform notifications winboxh5 upon your next login
  • Email to your registered address for significant changes
  • Update of the "Last Updated" date at the top of this page

Continued use of the platform winboxh5 after the amendments take effect constitutes your acceptance of the updated Privacy Policy terms. We encourage you to review this page periodically.

12

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how winboxh5 handles your personal data, or if you wish to exercise any of the rights guaranteed to you under Malaysia's PDPA, please contact our Data Protection Officer (DPO).

Winboxh5 Data Protection Officer contact details:

  • Dedicated privacy email: privacy@winboxh5.ws
  • General support: support@winboxh5.ws
  • 24/7 live chat within the platform winboxh5
  • WhatsApp and Telegram (numbers provided within the platform)

We are committed to responding to all privacy-related enquiries within 7 working days. For formal requests under Malaysia's PDPA, we will comply within the statutory timeframe of 21 working days.

If you are dissatisfied with our response to a privacy-related complaint, you have the right to lodge a complaint directly with the Personal Data Protection Commissioner of Malaysia under PDPA 2010.

DATA SCHEDULE

Winboxh5 Data Collection & Usage Summary

A transparent overview of what data we collect, why we collect it, and how long it is retained.

Personal Data Processing Schedule — Winboxh5
Data Type Primary Purpose Legal Basis Retention Period
Identity Data (Name, IC) KYC identity verification & AML compliance Legal obligation 7 years after account closure
Contact Data (Phone, Email) Service communications, 2FA, support Contract performance Duration of active account + 3 years
Financial Data (Bank, MYR) Processing of deposits/withdrawals in MYR Legal obligation 7 years (tax requirements)
Gaming Data Dispute handling & game fairness Legitimate interest 3 years after the transaction
Technical Data (IP, Device) Security & fraud prevention Legitimate interest 1 year
Marketing Data Promotional and VIP communications Consent Until consent is withdrawn
Cookie Data User experience, analytics Consent / legitimate interests 30 days — 2 years (depending on type)
YOUR PDPA RIGHTS

Your Rights Under the Malaysian PDPA

Winboxh5 fully respects the rights guaranteed to you under Malaysia's Personal Data Protection Act 2010.

📋
Right to Access Data

Request a copy of all personal data we hold about you at any time by emailing privacy@winboxh5.ws.

✏️
Right of Correction

Request corrections to inaccurate or incomplete data. We will update it within 14 business days.

🚫
Right to Restrict Processing

Restrict the processing of your data where it may cause you harm, under circumstances provided for by PDPA.

📵
Right to Withdraw Consent

Withdraw your marketing consent at any time without affecting your core account services.

🗑️
Right to Erasure

Request data deletion under legally permitted circumstances. Subject to mandatory record-keeping obligations.

🏛️
Right to Lodge a Complaint with the PDPA

If you are not satisfied with our response, you have the right to file a complaint directly with the Malaysian PDPA Commissioner.

COOKIE POLICY

Types of Cookies Used by Winboxh5

We use cookies to ensure the platform runs smoothly and that your gaming experience remains seamless.

UPDATE HISTORY

Winboxh5 Privacy Policy Amendment History

January 2026 — Present
Comprehensive Review — Streamlined PDPA 2010 Compliance

Comprehensive Privacy Policy update to reflect current industry best practices. Added a more detailed user rights section, updated cookie policy, and clearer explanation of financial data processing in MYR.

July 2026
Addition of Data Security Section

The data security section has been expanded to reflect newly implemented security measures, including enhanced encryption and an upgraded threat monitoring system.

January 2026
Malaysia Payment Methods Update

Addition of ShopeePay and DuitNow as supported payment methods, with corresponding updates to the financial data processing section of the privacy policy.

Early Launch
Winboxh5 Inaugural Privacy Policy

First Privacy Policy Publication winboxh5 which forms the foundation of our commitment to protecting the personal data of Malaysian players in accordance with PDPA 2010.

Privacy & Security Go Hand in Hand

Winboxh5 protect your privacy and provide a secure platform for Malaysian players aged 18 and above. For questions about your data, contact privacy@winboxh5.ws.

See also: Terms & Conditions | Responsible Gaming

FAQ

Winboxh5 Privacy Frequently Asked Questions

No, winboxh5 has never and will never sell your personal data to any third party for their own marketing purposes. Your data is only shared in very limited circumstances — such as with payment providers (Touch 'n Go, GrabPay, DuitNow) to process your transactions, with Malaysian authorities when required by law, and with technical service providers bound by strict confidentiality agreements. This commitment is central to the privacy values we have upheld since day one winboxh5 operates.

To submit a data access request under your Malaysian PDPA rights, send an email to privacy@winboxh5.ws with the subject line "Data Access Request — [your username]". Please include your full name, identification card number, and registered phone number for verification purposes. We will process your request within 21 business days and provide a copy of your data in a readable format. This service is free of charge for the first request each year.

After account winboxh5 is closed, your personal data is not deleted immediately, as Malaysian legal obligations require us to retain certain records. Identity data and financial records in MYR are retained for 7 years in accordance with Malaysian tax and financial regulatory requirements. Data that is no longer legally required will be securely deleted using methods that make recovery impossible. You may contact us for detailed information about the status of your data following account closure.

Yes, you may withdraw your consent to receive marketing communications from winboxh5 at any time without penalty. To do so: (1) click the "Unsubscribe" link at the bottom of any of our promotional emails; (2) update your communication preferences in your account settings; or (3) contact our customer support via 24/7 live chat and request to be removed from the marketing list. Withdrawing this consent will not affect important account-related notifications such as transaction confirmations and security alerts, which remain necessary for the security of your account.
JOIN WINBOXH5

Your Data Is Safe — Play with Peace of Mind at Winboxh5

Now that you understand how winboxh5 protect your privacy, register a free account and enjoy a safe, fair, and enjoyable gaming experience with our Malaysian player community.

256-bit SSL Protected Data Malaysia PDPA Compliance Data Not Sold Transactions in MYR 24/7 BM Support
Bahasa Melayu