Privacy Policy

Winbox qr Privacy Policy – Your Personal Data Protection

Winbox QR takes the privacy and security of every Malaysian player's personal data seriously. This document explains how we collect, use, store and protect your information in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: 1 July 2026

Contents
1. Introduction 2. Data We Collect 3. How We Use Your Data 4. Data Sharing 5. Data Security 6. Cookies & Tracking Technologies 7. Your Rights as a User 8. Data Retention & Deletion 9. Contact Us

1. Introduction

Welcome to the winbox qr Privacy Policy page. winbox qr is Malaysia's leading online entertainment platform, operating under a valid licence and in full compliance with all applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA).

This winbox qr privacy policy explains in detail how we — as the data controller — collect, process, store, share and protect your personal data when you use the winbox qr platform, website, mobile app and services.

By registering and using the winbox qr platform, you agree to this privacy policy. If you do not agree with any part of this policy, you are advised not to use winbox qr's services. Please read this document carefully before making your decision.

Winbox qr reserves the right to update this privacy policy from time to time. Any significant changes will be communicated to you via your registered email or an in-platform notification. Continued use of the winbox qr platform after such changes are published constitutes acceptance of the revised policy.

This privacy policy applies to all registered winbox qr users in Malaysia, including those accessing the platform via the website, Android/iOS app, and any other supported mobile platforms.

2. Personal Data We Collect

Winbox qr collects various types of personal data to ensure a safe, seamless gaming experience that meets Malaysian legal requirements. Below is a summary of the data we collect and the purposes for which it is used:

Data Category Examples How We Collect It
Identity Data Full name, MyKad/passport number, date of birth, gender Registration form, KYC process
Contact Data Email address, phone number, Malaysian residential address Account registration, user profile
Financial Data Bank account number, bank name, e-wallet details (TnG, GrabPay) Deposit and withdrawal processing
Transaction Data Deposit, withdrawal, betting and winnings history Automatically via platform activity
Technical Data IP address, device type, web browser, operating system Server logs, cookies, analytics
Behavioural Data Games played, login frequency, session duration Automatic platform tracking

We collect only the data genuinely needed for the stated purposes. Winbox QR does not collect sensitive information such as your medical records, religious beliefs or political affiliations.

  • Data you voluntarily provide during registration or when updating your profile.
  • Data generated automatically through your use of the winbox qr platform.
  • Data received from third-party payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, or FPX during financial transactions.
  • Data collected through the KYC (Know Your Customer) programme required for Malaysian player identity verification.

3. How Winbox QR Uses Your Data

Winbox qr uses your personal data for lawful and transparent purposes. We will not use your data for any purpose not stated in this privacy policy without first obtaining your consent.

  • Account Management: Creating and managing your winbox qr account, processing registration, identity verification (KYC), and email or phone number verification.
  • Transaction Processing: Processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay, and managing withdrawal of winnings to your Malaysian bank account.
  • Platform Security: Detecting and preventing fraud, money laundering, account abuse, and other suspicious activity that threatens the security of the winbox qr platform and its users.
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical support to Malaysian players via live chat, email, or phone.
  • Service Improvement: Analysing usage patterns to improve the user experience, develop new features, and optimise the performance of the winbox qr platform.
  • Marketing & Promotions: Sending you information on winbox qr offers, bonuses, promotions, and the latest updates via email or SMS — subject to your communication preferences.
  • Legal Compliance: Meeting Malaysian legal obligations, including reporting to relevant authorities such as Bank Negara Malaysia where required.
  • Responsible Gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support and presenting them with relevant assistance information.

You can opt out of marketing communications from winbox qr at any time by clicking the "unsubscribe" link in our emails or by contacting customer support. This does not affect essential service communications such as transaction confirmations.

4. Sharing Data with Third Parties

Winbox qr does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, we may share your data in the following limited circumstances:

  • Payment Service Providers: Malaysian e-wallet and online banking providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX (Maybank2u, CIMB Clicks) receive the transaction information necessary to process your deposits and withdrawals.
  • Game Providers: Game software providers — including slots, Live Casino, and baccarat providers — may receive session data necessary to run the games and verify results.
  • Identity Verification Services: A third-party KYC provider that helps us verify the identity of Malaysian players in line with legal compliance requirements.
  • Malaysian Authorities: We will disclose data where required by Malaysian law, a court order, or an official request from authorities including Bank Negara Malaysia, MACC, or the police.
  • Professional Advisors: Lawyers, accountants, or auditors bound by strict professional confidentiality obligations when engaged for specific assignments.

All third parties that receive data from winbox qr are required to protect it to a standard equal to or higher than our own, and are prohibited from using it for any other purpose.

winbox qr does not share your personal data with advertising companies, data brokers, or any third party not directly involved in delivering our services to you.

5. Personal Data Security

Winbox qr implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

  • 256-bit SSL Encryption: All data transmitted between your device and winbox qr's servers is encrypted using the latest version of Transport Layer Security (TLS) technology.
  • Secure Storage: Personal and financial data is stored on servers protected by strict access controls, enterprise-grade firewalls, and intrusion detection systems.
  • Two-Factor Authentication (2FA): winbox qr supports and encourages the use of 2FA on all user accounts to add an extra layer of protection.
  • Security Audits: The winbox qr platform undergoes regular penetration testing and security audits conducted by independent cybersecurity firms.
  • Staff Training: All winbox qr staff who handle personal data undergo regular data protection training and are bound by confidentiality agreements.
  • Access Controls: Access to users' personal data is restricted to staff who require it for their job duties only, in accordance with the principle of least privilege.

While we take all reasonable precautions, no security system can guarantee 100% protection. In the event of a data breach affecting your information, winbox qr will notify you within 72 hours in accordance with PDPA requirements and take immediate remedial action.

6. Cookies & Tracking Technologies

Winbox qr uses cookies and similar tracking technologies to enhance the user experience, analyse traffic, and maintain platform security. The following are the types of cookies we use:

  • Essential Cookies: Required for core winbox qr platform functions such as login sessions, account security, and language preferences. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how you use the winbox qr platform — pages visited, time spent, and errors encountered — to help us improve our services.
  • Functional Cookies: Saving your preferences — such as display settings, language, and game preferences — so you don't need to reconfigure them each time you log in.
  • Analytics Cookies: Used alongside internal analytics tools to understand usage patterns and user behaviour for the purpose of improving the winbox qr product.

You can manage or disable cookies through your web browser settings at any time. Please be aware that disabling certain cookies may affect the functionality of the winbox qr platform and your overall gaming experience.

Winbox QR does not use third-party cookies for targeted advertising or to track your activity on other websites outside our platform.

7. Your Rights as a Winbox QR User

As a registered winbox qr user in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA), which you may exercise at any time:

  • Right to Access: You have the right to request a copy of the personal data we hold about you. winbox qr will fulfil this request within 21 working days.
  • Right to Rectification: You have the right to request correction of any personal data that is inaccurate, incomplete or out of date. Basic information can be updated directly through your winbox qr account profile settings.
  • Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
  • Right to Withdraw Consent: You may withdraw consent previously given for certain data processing activities, though this may affect our ability to provide some winbox qr services.
  • Right to Complain: If you believe your privacy rights have been violated, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact the winbox qr data protection team by email at privacy@winboxqr.com. Please include your full name, account number, and request details for faster processing. We will verify your identity before acting on any request relating to your personal data.

8. Data Retention & Deletion

Winbox QR retains your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy or as required under Malaysian law.

  • Active Account Data: Retained for the duration of your active winbox qr account and for a reasonable period thereafter to allow for the processing of any outstanding claims or enquiries.
  • Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legislation and Bank Negara Malaysia guidelines.
  • KYC Data: Retained for a minimum of 6 years from the date of the last business relationship, in line with the requirements of Malaysia's Anti-Money Laundering Act 2001.
  • Security Logs: Retained for 12 months for security incident investigation and fraud detection purposes.
  • Marketing Communication Data: Retained until you unsubscribe or request removal.

When data is no longer needed, winbox qr will securely delete it using methods that ensure it cannot be recovered. If you close your winbox qr account, we will process your data deletion within 30 working days, subject to any applicable legal retention obligations.

Please note that certain data may need to be retained even after account closure if there is an active investigation, unresolved legal claim, or ongoing regulatory compliance obligation.

9. Contact Us

If you have any questions, concerns, or complaints regarding the winbox qr privacy policy or how we handle your personal data, please reach out to us through the following channels:

  • Privacy Email: privacy@winboxqr.com
  • General Customer Support: support@winboxqr.com
  • Live Chat: Available 24 hours a day, 7 days a week via the winbox qr platform

The winbox qr data protection team will endeavour to respond to all privacy enquiries within 3 business days. For more complex requests relating to data access or deletion, please allow up to 21 business days for us to process your request carefully and securely.

You also have the right to lodge a complaint directly with the Department of Personal Data Protection Malaysia if you believe your rights under PDPA 2010 have been violated and winbox qr has failed to resolve your complaint to your satisfaction.

Our Privacy Commitment

Why Malaysian Players Trust Winbox QR

Data protection is not merely a legal obligation for us — it is the foundation of trust we build with every winbox qr player across Malaysia.

256-bit SSL Encryption

All your personal and financial transaction data is transmitted through fully encrypted channels using industry-standard 256-bit SSL, ensuring no third party can intercept your information.

Malaysia PDPA 2010 Compliant

Winbox qr operates in full compliance with Malaysia's Personal Data Protection Act 2010. We appoint an internal Data Protection Officer to ensure all our processes align with current legal requirements.

Two-Factor Authentication

The additional security layer provided by 2FA ensures that only you can access your winbox qr account. Even if your password is compromised, your account remains protected through a separate verification step.

No Data Sales

Winbox QR has never and will never sell, rent or trade players' personal data to third-party advertisers or data brokers. Your data belongs solely to you.

Regular Security Audits

The winbox qr platform undergoes regular independent penetration testing and security audits to identify and address system vulnerabilities before they can be exploited by malicious parties.

Full Control in Your Hands

You may access, correct, or request deletion of your data at any time. Privacy settings and marketing communication preferences can be managed directly through your winbox qr account.

FAQ

Winbox QR Privacy FAQs

Here are answers to the privacy questions most frequently asked by Malaysian players.

winbox qr will only disclose your information to Malaysian authorities when required by law, a valid court order, or an official request from an enforcement agency such as the police, MACC, or Bank Negara Malaysia. We do not disclose information voluntarily without a solid legal basis, and will inform you where permitted to do so.

Yes, you may request deletion of your personal data by contacting privacy@winboxqr.com. However, certain data may need to be retained for a specified period to meet legal obligations — such as financial records (minimum 7 years) and KYC data (minimum 6 years) — in accordance with Malaysian law. We will clearly inform you which data can be deleted immediately and which must be retained.

When you close your winbox qr account, we will initiate the data deletion process within 30 working days. Data not subject to legal retention obligations will be permanently deleted. Financial and KYC data will be retained for the period required under Malaysian law and then securely deleted. You will receive an email confirmation once the deletion process is complete.

Your financial details — including bank account numbers, Touch 'n Go eWallet information, GrabPay, and other payment methods — are stored in an encrypted environment separate from your general profile data. We use tokenisation to store payment information, meaning your full account number is never stored in plain text in our systems. Access to financial data is restricted to authorised finance staff only.

No. Winbox QR only sends marketing communications to players who have given their consent during registration or through their account settings. Every marketing email we send includes a clear "unsubscribe" link. You can also manage your communication preferences directly in your winbox qr account settings or contact support@winboxqr.com to opt out of promotional emails.
Join Winbox QR Today

Your Data Is Safe. Your Game Is Secure.

Over 2 million Malaysian players have trusted winbox qr with their data and funds. Register now and enjoy a safe, fair, and responsible gaming experience.

Register for Free Log In

This platform is for users aged 18 and above. Please play responsibly.

Bahasa Melayu