Privacy Policy mywinbox

1 Introduction

Mywinbox ("we", "Platform") takes our responsibility to protect the privacy of every member who uses this platform seriously. This Privacy Policy is provided to explain clearly and transparently how we handle your personal data when you register, use, and interact with the mywinbox platform at https://mywinbox.onl.

By registering or continuing to use the mywinbox platform, you agree to the collection and use of your information as described in this document. If you do not agree with any part of this Privacy Policy, please discontinue use of the platform and contact our support team to close your account.

This Privacy Policy applies to all services offered by mywinbox including the website, mobile app, and any communication channels we use to interact with members. We encourage you to read this document carefully and contact us if you have any questions.

2 Personal Data We Collect

Mywinbox collects various types of information to ensure our platform operates safely, efficiently, and in compliance with applicable legal requirements. The data collected can be categorised into three main categories:

A. Information You Provide Directly

• Full name as per valid identification document.
• Date of birth for age verification purposes (18 years and above).
• An active email address and mobile phone number.
• Current residential address including postcode and state.
• Bank account or e-wallet details registered for deposit and withdrawal purposes.
• Copies of identification documents (MyKad, passport) and proof of address during the KYC (Know Your Customer) process.

B. Information Collected Automatically

• Device IP address and geolocation information at the state or city level.
• Type of device, operating system, and web browser version used.
• Activity logs including pages visited, access times, and in-game actions.
• Session and cookie data to identify active login sessions.
• Network information such as your internet service provider (ISP).

C. Information from Third Parties

• Identity verification data from approved KYC service providers.
• Payment transaction information from the payment processors used.
• Data related to Financial Control List checks from the relevant authorities.

3 How We Use Your Data

Every piece of data collected by mywinbox is used for specific and legitimate purposes. We do not use your data for any purpose other than those stated below, except with your explicit consent or as required by law:

• Account management: Creating and maintaining your account profile, processing registration, and managing your login and session security.
• Transaction processing: Processing deposits and withdrawals quickly and securely through your preferred payment method.
• Identity verification (KYC): Ensuring all members meet age eligibility requirements and anti-money laundering (AML) legal obligations.
• Platform security: Detecting and preventing fraudulent activity, suspicious login attempts, and bonus system abuse.
• Customer support: Understanding the context of your issue and providing more accurate and effective assistance.
• Marketing communications: Sending promotional information, bonus offers, and platform updates — only to members who have consented to receive such communications.
• Product improvements: Analyzing usage patterns in aggregate (not individual) form to improve platform design and user experience.
• Legal compliance: Complying with reporting obligations to financial authorities and law enforcement agencies when required.

4 Data Sharing & Disclosure

Mywinbox does not sell, rent, or transfer your personal data to any third party for their own commercial purposes. We only share your information in the following limited circumstances:

• KYC service providers: Approved identity verification partners to ensure document review is carried out securely and efficiently.
• Payment processors: Licensed payment gateways that process your deposit and withdrawal transactions. They only receive the information necessary to process the relevant transaction.
• Technology service providers: Cloud platforms and infrastructure supporting mywinbox's technical operations, subject to strict data processing agreements.
• Authorities and law enforcement agencies: When required by law, court order, or a valid official investigation request.
• Business transfers: If mywinbox is involved in a merger, acquisition, or asset sale, member data may be transferred to the receiving entity, subject to the same or stricter privacy policy.

All third parties receiving data from mywinbox are bound by strict confidentiality and data protection agreements. They are prohibited from using your data for any purpose other than those specified in their agreement with mywinbox.

5 Data Security

Protecting your personal data from unauthorized access, loss, or misuse is mywinbox's top priority. We implement multiple layers of technical and organizational security measures to ensure your data remains protected at all times:

• 256-bit SSL encryption: All communications between your device and mywinbox servers are secured by industry-grade TLS/SSL encryption that prevents data interception in transit.
• Secure password storage: Account passwords are never stored in plain text. We use a strong one-way hashing algorithm with a unique salt for each account.
• Two-factor authentication (2FA): An additional layer of protection requiring verification via an OTP code sent to your phone number during login or withdrawal.
• Real-time activity monitoring: A 24/7 threat detection system that automatically identifies and blocks any suspicious access attempts.
• Internal access controls: Member data is only accessible by mywinbox staff who require the information to perform their duties, subject to role-based access control (RBAC).
• Regular security audits: Penetration testing and security reviews conducted by independent parties on a regular basis to identify and address any vulnerabilities.

6 Cookies & Tracking Technologies

Mywinbox uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login sessions, security, and basket management. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous information about how you use our platform to help us understand which pages are most frequently visited and identify technical issues.
• Functional Cookies: Saving your preferences such as language, region, and display settings so you do not need to reconfigure them each time.
• Security Cookies: Used to detect suspicious login attempts and help verify identity during active sessions.

You can manage your cookie settings through your web browser options. However, disabling certain cookies may affect platform functionality. Third-party cookies (such as those from payment processors) are subject to the respective third party's privacy policy.

7 Your Rights

As a mywinbox member and data subject, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

8 Data Retention Period

Mywinbox does not retain your personal data longer than necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysia law:

• Active account data: Retained for the duration your account is active at mywinbox plus the period required by law after account closure.
• Financial transaction records: Retained for a minimum of 7 years after a transaction occurs, in accordance with the requirements of Malaysia's Anti-Money Laundering and Anti-Terrorism Financing Act 2001.
• KYC Documents: Retained for the duration of the business relationship and for at least 5 years after its termination.
• Customer support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Cookie and analytics data: Retained for a maximum of 13 months from the date of collection.

Once the retention period has ended, your data will be securely deleted or anonymised so that it can no longer be linked back to your identity.

9 Child Protection

Mywinbox is a platform dedicated exclusively to adult users aged 18 years and above only. We do not intentionally collect, process, or store any personal data from individuals under the age of 18.

If we discover that personal data of a child has been collected without the knowledge of a parent or legal guardian, we will immediately take the following steps:

• Suspending or terminating the relevant account immediately.
• Deleting all personal data associated with the underage individual.
• Freezing all associated funds pending further investigation.
• Reporting incidents to the relevant authorities where necessary.

If you discover that a child has registered or used the mywinbox platform, please contact our support team immediately so that appropriate action can be taken.

10 Privacy Policy Amendments

Mywinbox reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or service improvements.

When material changes are made, we will notify you through one of the following methods:

• In-app or on-site mywinbox notifications displaying a summary of key changes.
• Notification email to the email address registered in your account.
• Update the "Last Updated" date displayed at the top of this document.

Your continued use of the mywinbox platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

11 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by mywinbox, please contact our privacy team via:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom right corner of the platform.
• FAQ Section: Visit FAQ page us for answers to frequently asked questions.

Our support team is available to assist you in both Bahasa Melayu and English, seven days a week including public holidays. We are committed to responding to all privacy-related enquiries as promptly as possible.