My winbox treats your privacy as a priority, not merely a legal obligation. This document explains clearly and honestly how we collect, use, store, and protect the personal information of every member in Malaysia.
This is not merely a policy — it reflects how we actually handle the personal information of every Malaysian member.
My winbox collects only the data genuinely needed to deliver our services — nothing more, nothing less. We do not collect sensitive data such as health information or financial details beyond what is required for transaction verification. Every data collection point has a clear, stated purpose that is communicated to members.
All data transmitted between your device and my winbox servers is protected by 256-bit SSL encryption at all times — whether you are logging in, making a deposit via DuitNow or Touch 'n Go eWallet, accessing your betting history, or simply browsing the platform. No data travels unprotected.
My winbox has never and will never sell, rent, or trade members' personal information to any third party for marketing or commercial purposes. Your data belongs to you — we use it solely to provide and improve my winbox services for you.
Every my winbox member has the right to access, correct, download, or request deletion of their personal data at any time. Requests are processed within 30 business days at no charge. You can submit a request via live chat or by emailing the my winbox support team.
The my winbox privacy policy is designed and updated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We have appointed a Data Protection Officer responsible for ensuring that all data processing practices comply with applicable Malaysian law at all times.
In the event of any security incident involving my winbox member data, we are committed to notifying affected members within 72 hours of confirming the incident. We will also take immediate action to contain the impact and prevent a recurrence.
Transparency starts with telling you exactly what data we collect and the purpose for which it is used.
Full name, MyKad number, date of birth, and residential address. Collected for identity verification and AML compliance at my winbox.
Malaysian phone number and email address. Used for account verification, transaction notifications, and my winbox support communications.
Records of deposits, withdrawals and transaction history via DuitNow, Touch 'n Go, FPX and other local eWallets. Retained for tax compliance and audit purposes.
Betting history, games played, wins, and losses. Used for customer support, fraud detection, and my winbox product improvement.
IP address, device type, web browser and operating system. Used for fraud detection, account security and optimising the my winbox user experience.
General location based on IP address, to verify that my winbox is being accessed from Malaysia and to detect suspicious access attempts from foreign locations.
Records of live chat and email conversations with the my winbox support team. Retained for training, quality control and future reference in the event of any disputes.
Pages visited, session duration, and platform usage patterns. Used to understand member needs and improve the overall experience on my winbox.
This document explains how my winbox ("Platform", "We") collects, processes, stores, and protects your personal information when you use our online Sports Betting and casino platform at https://mywinbox.best. This policy applies to all registered members and visitors of the my winbox website.
My winbox collects personal information through several different channels, depending on how you interact with our platform. We consistently adhere to the principle of data minimisation — collecting only what is strictly necessary to provide a safe, fair, and high-quality service to our Malaysian members.
Information you provide directly:
Automatically collected information:
Data collection at my winbox is not intended for surveillance or aggressive marketing purposes. The data we collect is the minimum necessary to verify member identities, process transactions securely, detect fraud, and deliver effective customer support. Without this foundational data, we cannot guarantee the security of our members' accounts and funds.
My winbox uses members' personal information for specific, lawful, and clearly stated purposes. We do not use your data for any purpose unrelated to the provision of my winbox services or for which you have not given consent.
The primary uses of personal data at my winbox are as follows:
My winbox does not sell, rent or trade member personal information to third parties for their own marketing purposes. This is an absolute commitment that does not change regardless of circumstances. However, there are limited situations where my winbox needs to share information with certain parties for service operational purposes:
Trusted service providers: my winbox works with technical service providers that help us operate the platform, including server infrastructure providers, live dealer gaming software providers, and payment processors supporting DuitNow, Touch 'n Go eWallet, and FPX transactions. All such providers are bound by strict confidentiality agreements and are only permitted to use data for the purposes we specify.
Legal obligation: my winbox may be required to disclose information to Malaysian authorities when compelled by law, court order, or directive from a relevant regulatory body. We will always follow the proper legal channels and disclose only the minimum information necessary in such circumstances.
Legitimate interest protection: In cases involving fraud, money laundering or serious security threats, my winbox may share information with relevant Malaysian authorities or financial institutions to protect the interests of other members and the integrity of the platform.
In all data sharing cases described above, my winbox ensures that the recipients of such information uphold standards of protection equivalent to those set out in this privacy policy.
My winbox invests seriously in security infrastructure to ensure member personal data is protected at all times. The security measures we implement are on par with banking and financial industry standards.
Technical security measures implemented at my winbox:
While my winbox takes all reasonable technical measures, account security also depends on your own practices. Use a strong, unique password, enable 2FA, never share your login credentials with anyone, and log out after every session — especially when using a shared device or public Wi-Fi network.
My winbox retains member personal data for as long as is necessary for the purposes set out in this policy, or for as long as required under applicable Malaysian law. Our principle is to keep data only for as long as needed and no longer.
The data retention guidelines for my winbox are as follows:
Once the retention period expires, personal data will be securely deleted using methods that ensure the data cannot be recovered. For data stored in physical format (where applicable), documents are disposed of using shredding equipment that meets established security standards.
Members who wish to request account deletion and removal of personal data before the minimum retention period expires may contact the my winbox support team. We will process such requests promptly; however, some data may need to be retained for the minimum period required under Malaysian law.
My winbox uses cookies and similar tracking technologies to keep the platform running smoothly and to enhance the user experience. Cookies are small text files stored on your device when you visit the my winbox website.
Types of cookies used by my winbox:
You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the my winbox platform. For mobile browsers — the most popular way Malaysian members access my winbox — cookie settings can be managed through each browser app's settings.
Under Malaysia's Personal Data Protection Act (PDPA) 2010 and my winbox's privacy policy, you as a member have the following rights regarding your personal data:
| Your Rights | Description | How to Submit a Request |
|---|---|---|
| Access Rights | Obtaining a copy of your personal data held by my winbox | Email or live chat |
| Right to Rectification | Correct any personal data that is inaccurate or out of date | Account settings or support |
| Right to Erasure | Request the deletion of your personal data (subject to legal limitations) | My winbox support email |
| Right to Restriction | Restrict the processing of your data under certain circumstances | My winbox support email |
| Right to Portability | Receive your data in a machine-readable format | My winbox support email |
| Right to Object | Object to the processing of your data for direct marketing purposes | Account settings or email |
All privacy rights requests will be processed within 30 days of receipt. We may require identity verification before processing a request to ensure data security. No fee is charged for reasonable, non-repetitive requests.
My winbox is a platform designed exclusively for adults aged 18 and above. We do not intentionally collect, store or process the personal information of any individual under the age of 18.
Should my winbox discover that personal information of a child under 18 has been collected without our knowledge, we will take immediate action to delete that information and close the account in question. If you believe your child or a minor has registered an account with my winbox, please contact us immediately at support@mywinbox.best so we can take appropriate action.
My winbox also operates an active age-detection system during the registration process and identity verification (KYC). Accounts suspected of belonging to individuals under 18 will be suspended immediately until age verification is completed.
My winbox reserves the right to update or amend this Privacy Policy at any time. Amendments may be made for reasons including changes to Malaysian law, changes to the technologies we use, or changes to how we conduct our business.
When we make significant changes to this Privacy Policy, we will:
Continued use of the my winbox platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. It is the member's responsibility to review this page periodically. If you do not agree with the changes made, you have the right to close your my winbox account and request deletion of your personal data in accordance with the procedure set out in Section 7.
If you have any questions, concerns, or complaints about how my winbox handles your personal data, our team is here to help. We take every privacy-related enquiry seriously and are committed to providing clear, satisfactory responses.
Ways to contact my winbox regarding privacy matters:
Privacy is not merely a technical or legal matter for my winbox — it is part of how we respect every Malaysian member who places their trust in us. Your trust is our most valued asset, and protecting your personal data is how we demonstrate that we never take it for granted.
This Privacy Policy is a living document that we update regularly to ensure it reflects current best practices in personal data protection. Our commitment to safeguarding my winbox members' privacy is ongoing, never static.
If anything in this document is unclear or you would like to learn more about how your data is used, please do not hesitate to contact us. The my winbox Malay-speaking support team is available to assist you 24 hours a day, 7 days a week.
In today's digital age, personal data has become an extremely valuable asset — and unfortunately, one that is frequently misused. The online gambling industry, like many other digital industries, has at times earned a negative reputation for the way some platforms handle their members' data. my winbox takes a different and deliberate stance: our members' privacy is not merely a compliance checkbox to be ticked — it is a core value that shapes the way we build and operate this platform.
When you register with my winbox and entrust us with your personal information — your phone number, identification details, transaction history — you are placing a significant responsibility in our hands. We understand the weight of that responsibility and do not take your trust lightly. Every decision we make regarding member data — how it is stored, how long it is kept, who can access it — is made with members' best interests as the first consideration.
When you make a deposit with my winbox using DuitNow, Touch 'n Go eWallet, or FPX via Maybank2u or CIMB Clicks, you are entrusting us with sensitive financial information. my winbox operates payment infrastructure that is PCI-DSS compliant — the international security standard for card and payment data processing. This means your payment information is handled to the same standard used by Malaysia's leading banks.
One important thing to know: my winbox never stores your full bank account number, card number, or banking password on our servers. This information is handled directly by certified payment processors, and only meaningless tokens are retained on my winbox's end for transaction reference purposes. This means that even in the unlikely event of a security incident, your actual payment information remains protected.
One of the key distinctions that sets my winbox's approach to privacy apart from some foreign platforms is our commitment to compliance with Malaysian local law. Many international online gambling platforms operate from outside Malaysia and may not be subject to Malaysia's Personal Data Protection Act (PDPA) 2010. my winbox, as a platform built for the Malaysian market, actively ensures that all our data processing practices comply with applicable Malaysian law — including PDPA 2010 and relevant anti-money laundering legislation.
This means that when you as a my winbox member submit a request to access, correct, or delete your personal data, that request is taken seriously and processed within the timeframe required by Malaysian law. You will not have to navigate the bureaucracy of a foreign company unfamiliar with the local context — my winbox is here, for Malaysian members, with full support in Bahasa Melayu.
There is a close connection between privacy protection and the responsible gaming programme at my winbox. The gameplay activity data we collect — including betting history, play frequency, and deposit patterns — is used not only for security and customer support, but also to identify members who may need assistance with gambling controls.
When my winbox detects patterns that may indicate a problem — such as escalating bets following significant losses — we may proactively reach out to the member to offer information about responsible gaming tools. This is a use of data that my winbox believes is ethical and responsible: using the information we hold not to exploit members, but to protect them.
We welcome any questions, feedback, or concerns about how my winbox handles your data privacy. Reach us at support@mywinbox.best or via live chat on the platform. Our Malay-speaking team is ready to help you better understand your privacy rights.
As a my winbox member, Malaysian law and our own policies grant you the following rights over your personal data.
These are the concrete commitments we make to every my winbox member regarding the protection of their privacy.
This Privacy Policy should be read together with Terms & Conditions and page Responsible Gaming my winbox. Together, these three documents form a complete framework for how my winbox operates and protects member interests. Any enquiries can be sent to support@mywinbox.best.