This Privacy Policy explains how winbox2 collects, uses, stores, and protects the personal information of players and visitors across our platform. We are committed to handling your data with transparency, care, and in accordance with applicable data protection standards.
Last updated: 1 June 2026. By registering an account with winbox2 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.
winbox2 operates the online gaming platform accessible at winbox2.co ("Platform"), providing sports betting, live casino, slots, Toto 4D, and related gaming and rewards products to registered players, with a primary focus on the Malaysian market including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and across Malaysia.
For the purposes of this Privacy Policy, winbox2 is the data controller in respect of personal data collected through the Platform and associated communications. References to "winbox2", "we", "us", and "our" throughout this Policy refer to the Platform operator.
Questions or requests relating to this Privacy Policy should be directed to our data protection contact at [email protected] (please write "Privacy Enquiry" in the subject line of your message).
winbox2 collects personal data in several categories depending on the nature of your interaction with the Platform:
winbox2 collects personal data through the following means:
winbox2 processes personal data for the following purposes:
winbox2 processes personal data on the following legal bases:
winbox2 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share data only in the following circumstances:
7.1 winbox2 operates under an international gaming authority licensing framework, and some of our service providers and game providers operate servers or personnel in jurisdictions outside Malaysia. Where personal data is transferred internationally, winbox2 takes steps to ensure that appropriate safeguards are in place, including contractual protections equivalent to or exceeding those required by applicable Malaysian data protection law.
7.2 Where data is transferred to jurisdictions that do not provide an equivalent level of data protection to Malaysia, winbox2 relies on contractual clauses, binding corporate rules, or other recognised transfer mechanisms to protect the transferred data.
8.1 winbox2 retains personal data for as long as necessary to fulfil the purposes described in this Policy, including for the duration of your account relationship with us and for any additional period required by law or our licensing obligations thereafter.
8.2 In practice, winbox2 retains account records, transaction history, and KYC documentation for a minimum of five (5) years following account closure, in compliance with standard AML and gaming regulatory record-keeping requirements.
8.3 Communications data (support tickets, chat logs) is retained for a period of two (2) years following the resolution of the relevant interaction unless a longer retention period is required by an ongoing dispute or legal proceeding.
8.4 Technical and usage data collected via analytics is retained in aggregated or de-identified form and is not subject to the same deletion obligations as identifiable personal data.
8.5 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.
9.1 winbox2 implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold. These include:
9.2 Notwithstanding these measures, no internet transmission or electronic storage system is fully secure. winbox2 cannot guarantee absolute security of data transmitted to or stored on the Platform. You play a role in account security by keeping your winbox2 Login credentials confidential and enabling two-factor authentication from your Account Settings.
10.1 winbox2 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit a website.
10.2 winbox2 uses the following categories of cookies:
10.3 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent some Platform features from operating correctly.
Subject to applicable law and our licensing obligations, you have the following rights in respect of your personal data held by winbox2:
To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receipt of a valid request. We may need to verify your identity before processing the request.
12.1 The winbox2 Platform is strictly for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21.
12.2 If winbox2 becomes aware that personal data has been collected from a person under 21, the account will be suspended, all funds will be reviewed in accordance with our Terms and Conditions, and the personal data will be deleted as soon as practicable.
12.3 If you are a parent or guardian and believe that a minor has accessed or registered on the winbox2 Platform using your details or independently, please contact us immediately at [email protected].
13.1 winbox2 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform operations. Material changes will be communicated to registered players via the email address on their account prior to taking effect.
13.2 The "Last updated" date at the top of this Policy reflects the most recent revision. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.
13.3 If you do not agree with a revised Policy, you should close your account before the revision takes effect. Account closure instructions are available through the customer support team.
For any enquiries, requests, or complaints relating to this Privacy Policy or the handling of your personal data by winbox2, please contact our data protection team:
Email: [email protected] — please write "Privacy Enquiry" or "Data Rights Request" in the subject line of your message. We aim to acknowledge all privacy-related correspondence within 5 business days.
For responsible gaming concerns or to request account self-exclusion, please visit the Responsible Gaming page or include "Responsible Gaming" in your support message subject line for priority routing.
Behind the legal language, here's what the winbox2 Privacy Policy means in plain terms for every player on the platform.
winbox2 does not sell, rent, or trade your personal information to advertisers or data brokers. The data you share with us stays within the winbox2 ecosystem and the specific service providers we engage to operate your account — nothing more.
Every connection between your browser and the winbox2 Platform is protected by 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal data are never transmitted in plain text. This applies whether you're accessing the Platform from Kuala Lumpur, Penang, or anywhere else in Malaysia.
Your data rights are real and enforceable. You can request access to your data, ask for corrections, request deletion (subject to legal retention requirements), and withdraw marketing consent at any time — by contacting support with a plain-language request. No legal jargon required from your side.
winbox2 operates under international gaming authority licensing requirements that mandate specific standards for data collection, retention, and security. Our data practices are not just internal policy choices — they are subject to external regulatory oversight and periodic audit.
We don't hold onto your data indefinitely. winbox2 has defined retention periods for each category of data, based on operational necessity and regulatory requirements. When retention periods expire, data is securely deleted or anonymised — not archived indefinitely in a cold database.
If we change this Privacy Policy in a material way, we'll tell you before it takes effect — not bury the update in a footer link. Email notifications will go to your registered address so you can review the changes and decide whether to continue using the Platform.
Confident in how winbox2 handles your information? Log in to your account and enjoy Malaysia's most complete online gaming platform — sports, casino, slots, Toto 4D, and rewards all under one login.
Sign In to winbox2Must be 21+ to participate. winbox2 promotes responsible gambling. Entertainment purposes only.