Winbox2 takes the privacy of Malaysian players seriously. This document transparently explains how we collect, use, store, and protect your personal information.
All data transmitted between your device and Winbox2's servers is protected by 256-bit SSL encryption — the same standard used by leading Malaysian banks such as Maybank and CIMB.
Winbox2 never sells, rents, or shares players' personal information with third parties for marketing purposes. Your data belongs to you — we use it only for the purposes stated in this policy.
Winbox2 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect only the data that is strictly necessary and give you full rights to access, correct, or delete your data.
You can access, update, and request deletion of your personal data through your winbox2 account settings or by contacting our support team. Requests are processed within 14 business days.
Winbox2 does not store your credit or debit card number. All payments are processed through secure third-party payment gateways. Your financial details are not accessible to any Winbox2 staff.
You may opt out of promotional emails or marketing notifications from Winbox2 at any time via the unsubscribe link in any email or directly through your account settings.
By using Winbox2, you agree to this Privacy Policy in its entirety.
This Privacy Policy describes Winbox2's privacy practices regarding the collection, use, storage, and protection of your personal data. It applies to all players who use the Winbox2 platform via our website or mobile application. By registering for or using the Winbox2 platform, you confirm that you have read and agree to this policy. If you do not agree, please discontinue use of the platform.
Winbox2 ("we", "the platform") operates a digital betting and entertainment platform serving players in Malaysia. We understand that your trust in us begins with the confidence that your personal information is in safe, responsible hands.
This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. We are committed to ensuring that every aspect of personal data management at winbox2 is transparent, accountable, and secure.
This policy applies to all information collected through:
Note: This Policy does not apply to third-party websites or services that may be linked from the winbox2 platform. You are advised to read the respective privacy policies of those third parties before using their services.
Winbox2 operates on a "data minimisation" principle — we only collect information that is genuinely necessary to provide our services to you. Below are the categories of data we collect and the reasons we need them:
Data You Provide Directly:
Automatically Collected Data:
Note Regarding Sensitive Data: Winbox2 does not collect sensitive information such as biometric data, medical records, religious beliefs, or political affiliations. We collect only the minimum information necessary to provide a safe and lawful betting service.
Every piece of data we collect has a clear and legitimate purpose. winbox2 uses your personal data for the following:
Important: Winbox2 does not use your personal data to make automated decisions that could materially affect your rights without human review. Any account decisions involving serious actions — such as termination or balance forfeiture — are reviewed by our human team.
Winbox2 never sells your personal data to third parties for any purpose. However, there are limited situations where we need to share certain data with trusted third parties in order to provide our services to you:
In all instances of data sharing, Winbox2 ensures that the relevant third parties have adequate security measures in place and use the data solely for permitted purposes. Any data sharing carried out is subject to legally binding confidentiality agreements.
The security of your personal data is winbox2's top priority. We continually invest in the latest security infrastructure to ensure your information is protected at all times.
The technical and organisational measures we implement include:
Shared Responsibility: While winbox2 takes all reasonable steps to protect your data, account security also depends on your own actions. Use a strong, unique password, enable 2FA, and never share your login credentials with anyone — including anyone claiming to be a winbox2 staff member. We will never ask for your password.
Winbox2 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
We use the following types of cookies:
You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of certain parts of the Winbox2 platform. The Winbox2 mobile app may use device identifiers that function similarly to cookies for security and analytics purposes.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles we uphold, you have several important rights regarding your personal data at winbox2:
You have the right to request a copy of the personal data we hold about you. Winbox2 will provide a summary of this information within 14 business days from the date a valid request is received.
If any personal information we hold about you is inaccurate or out of date, you have the right to request a correction. You can update basic details through your winbox2 account settings or contact support for more complex changes.
You may request the deletion of your personal data when it is no longer needed for the original purpose of collection. However, certain data may need to be retained for the period prescribed by Malaysian law — for example, financial records must be kept for seven years.
You have the right to object to your data being used for direct marketing at any time. Once your objection is received, Winbox2 will stop using your data for that purpose within 14 business days.
You may request your personal data in a machine-readable format (such as CSV or JSON) for the purpose of transferring it to another platform. Such requests will be processed within 30 business days.
To exercise any of the rights above, please contact our privacy team at support@winbox2.xyz with the subject line "PDPA Data Rights Request". Please include your account number and proof of identity so we can process your request securely and accurately.
Winbox2 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. Our data retention schedule is as follows:
Once the retention period has elapsed, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. The deletion process uses methods that ensure data cannot be recovered.
Winbox2 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, Malaysian legal requirements, or technological developments. The "Updated" date at the top of this page will always indicate when the most recent amendment was made.
For significant changes that may materially affect your privacy rights, Winbox2 will endeavour to notify you in advance through:
Continued use of the Winbox2 platform after any changes to the Privacy Policy take effect will be considered your acceptance of those changes. We encourage you to review this page periodically to stay informed about how we protect your information.
Previous Versions: If you would like to review a previous version of the Privacy Policy or understand specific changes that have been made, you may contact us at support@winbox2.xyz and we will provide that information upon request.
If you have any questions, concerns, or complaints about how winbox2 handles your personal data, we strongly encourage you to reach out to us directly. We are committed to taking all privacy-related enquiries seriously and responding within a reasonable timeframe.
You can reach the winbox2 privacy team through:
If you are not satisfied with our response after contacting us directly, you have the right to file a formal complaint with the Department of Personal Data Protection (JPDP) Malaysia, the authority responsible for overseeing PDPA enforcement in Malaysia.
Response Time: Winbox2 is committed to responding to all privacy-related enquiries within 3 business days. For more complex data rights requests — such as full data access or deletion requests — processing may take up to 14 to 30 business days depending on the complexity of the request.
When we sign up for any online platform — whether for shopping, social media, or betting — most of us just click "Agree" without reading the privacy policy. It's understandable: they're long, full of legal jargon, and rarely feel like they were written for us. But for a betting platform like winbox2 that involves real money and financial information, the privacy policy is a document that genuinely matters to understand, at least at a basic level.
Winbox2 has chosen to write this Privacy Policy in plain Bahasa Melayu that every Malaysian player can understand — not in legal language that requires a lawyer to interpret. This is not merely a formality. We believe that players who understand how their data is used are more confident players, and that confidence is the foundation of the long-term relationship we want to build with every Winbox2 member.
A fair question — and the straightforward answer is: to provide you with a safe, fair, and responsible service. Consider what it would mean if Winbox2 collected no data at all — we would have no way of knowing who has registered, no way to process your winnings to the correct Touch 'n Go or DuitNow account, no way to detect if someone unknown is attempting to access your account, and no way to ensure that only adult players can use the platform.
Every piece of data Winbox2 collects has a concrete purpose. Your name and phone number are used to verify your identity. Your bank account or e-wallet details are used to send you your winnings. Your IP address and device information are used to detect suspicious login attempts. Your betting records exist so you can raise a dispute if a match result is ever in question. No data is collected simply "for the sake of it" — every piece serves a function.
The Personal Data Protection Act 2010 (PDPA) is the Malaysian law governing how companies manage personal data. As a platform operating for Malaysian players, Winbox2 complies fully with the PDPA. This means you have certain rights that are protected by law — not merely by company promise.
Under the PDPA, you have the right to know what data we hold about you, correct any inaccurate information, object to your data being used for marketing, and in certain circumstances request that your data be deleted. These are not optional features we offer at our discretion — they are your legal rights, and Winbox2 is obligated to honour them. If you feel these rights have not been respected, you have a formal channel through the Department of Personal Data Protection (JPDP) Malaysia to lodge a complaint.
Online betting platforms handle two particularly sensitive categories of information — financial and personal. This means the security standards required are considerably higher than those for an ordinary online platform. Winbox2 uses 256-bit SSL encryption equivalent to that used by Maybank2u and CIMB Clicks — banks that Malaysian players already trust with their real money every day.
One important point to highlight — Winbox2 does not store your credit or debit card number in our systems. When you make a payment via FPX to banks such as Maybank or CIMB, or through Touch 'n Go and DuitNow, the transaction is processed directly through a standalone secure payment gateway. Winbox2 only receives confirmation that the payment was successful — not your full card or banking account details.
It may be just as important to know what we not do with your data. winbox2 does not sell player data to advertisers or third-party marketing companies. We do not share your betting history with any party except where required by law. We do not use your data to build profiles that are then sold to data brokers. And we do not send marketing communications without your explicit consent.
If you have ever received spam emails or mystery sales calls after signing up on a particular online platform — you know how unpleasant that experience is. Winbox2 is committed to ensuring that never happens to you here. If you receive any communication claiming to be from Winbox2 that looks suspicious or asks for sensitive information such as your password — do not respond and report it to us immediately at support@winbox2.xyz.
If you have any concerns about how your personal data is being handled, or if you suspect your account information has been compromised, the fastest course of action is to contact the Winbox2 support team via live chat on the platform or by email at support@winbox2.xyz. Our team is Bahasa Melayu-speaking and operates 24 hours a day, 7 days a week, including Malaysian public holidays.
For formal requests relating to your PDPA data rights — including data access, correction, or deletion — please include in your email: your Winbox2 account number, the type of request being made, and a copy of your identity verification (MyKad). All PDPA requests are handled by our dedicated privacy team and will receive a response within the timeframes set out in Section 10 above. Winbox2 takes every privacy concern raised seriously — this is not a formality, but a genuine responsibility we hold towards every player who entrusts their data to us.
The most frequently asked questions from Malaysian players about privacy and data protection at Winbox2.
This Privacy Policy should be read alongside Terms & Conditions and Responsible Gaming Guide Winbox2 for a full overview of your rights and responsibilities as a player on our platform.
A platform that respects your privacy, pays out winnings within 15 minutes, and supports you 24/7 in Bahasa Melayu. Register for free today with a deposit as low as RM10.