WinboxMalay Privacy Policy – How We Protect Your Personal Data

Winboxmalay takes our responsibility to every user's privacy seriously. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

This document explains the types of data we collect when you register, use, or interact with the winboxmalay platform – whether through the website, Android mobile app, iOS app, or any of our official communication channels. It also explains the purpose of collecting that data, how we protect it, how long we retain it, and your rights as a user.

Winboxmalay acts as the data controller under the context of Malaysia's PDPA. This means we determine the purpose and manner of processing your personal data, and we are fully responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

We collect several categories of data when you use the winboxmalay platform. Below are full details of the data collected by source:

We do not collect sensitive data such as health information, religious beliefs, or political views unless voluntarily provided by you for specific purposes such as responsible gaming programs.

All data we collect is used solely for legitimate purposes directly related to the operation of the winboxmalay platform. We do not process your data beyond the purposes stated here.

• Account management: Creating, verifying, and maintaining your account securely.
• Identity verification (KYC): Ensuring you meet the minimum age requirement and preventing identity fraud.
• Transaction processing: Verifying and completing deposits and withdrawals accurately and promptly.
• Fraud prevention: Detecting and investigating suspicious activity to protect you and the platform.
• Customer support: Responding to inquiries, resolving complaints, and providing technical assistance.
• Platform improvement: Analyzing usage patterns to improve the overall user experience.
• Communications: Sending important information related to your account, security, and promotions you have opted in to receive.
• Legal compliance: Meeting reporting and compliance obligations imposed by Malaysian law.

Winboxmalay does not sell or rent your personal data to any third party for marketing purposes. However, we may share data with certain parties in the following situations:

• Service providers: Licensed payment gateways, game providers, and cloud service providers that support the operation of our platform. All parties are bound by strict data confidentiality agreements.
• Legal requirement: If required by a court order, regulatory authority directive, or applicable Malaysian law.
• Crime prevention: Sharing information with the relevant authorities where there is reasonable grounds to believe illegal activity has occurred.
• Rights protection: To defend the legal rights of winboxmalay or other users when necessary.

In all of the above situations, winboxmalay ensures that data shared is limited to only what is strictly necessary, and all data recipients are bound by appropriate confidentiality obligations.

Winboxmalay implements multiple layers of technical and organisational security to protect your data from unauthorised access, loss, or misuse:

• Encryption in transit: All communication between your device and our platform uses the TLS 1.3 protocol with 256-bit SSL encryption.
• Encryption at rest: Sensitive data such as bank account numbers and KYC information is stored in encrypted format using AES-256 encryption.
• Access control: Only staff who require access for their job responsibilities can view users' personal data, and every access is automatically logged.
• Two-factor authentication: The winboxmalay internal system uses multi-factor authentication to prevent unauthorised access.
• Security testing: Penetration testing and security audits are conducted periodically by independent parties.
• Real-time monitoring: A threat detection system operates 24/7 to identify and respond to any security threats.

The winboxmalay platform uses cookies and similar tracking technologies to enhance your experience and understand how the platform is used. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login, game sessions, and security. Cannot be disabled.
• Preference cookies: Remembering your preferences such as language, display settings, and game favorites.
• Analytics cookies: Collecting anonymous information about how users interact with the platform for improvement purposes.
• Security cookies: Helping detect fraudulent activity and protecting your account from unauthorized access.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect platform functionality. Essential cookies cannot be disabled without impacting core platform capabilities.

As a winboxmalay platform user and subject to Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the winboxmalay support team via live chat on the platform. We will process your request within 14 business days. Some requests may require identity verification before processing to ensure the security of your account.

Winboxmalay retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. The following are general data retention guidelines:

• Active account data: Retained for the duration your account is active and for 5 years after account closure for compliance purposes.
• Transaction records: Retained for a minimum of 7 years in accordance with Malaysia financial regulatory requirements.
• KYC records: Retained for 5 years after the business relationship ends.
• Communication logs: Retained for 2 years for dispute resolution purposes.
• Analytics data: Anonymised data is retained indefinitely for statistical purposes.

When data is no longer needed and there is no legal obligation to retain it, winboxmalay will delete or anonymise the data using secure, irreversible methods.

The winboxmalay platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data from individuals under 18.

If we discover that personal data of someone under 18 years of age has been collected unintentionally, we will take immediate action to delete that data and close the associated account. If you are a parent or guardian and believe your child has registered on our platform, please contact us immediately.

Winboxmalay reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. When material changes are made, we will:

• Displaying a clear notice on the platform's home page for at least 14 days before the changes take effect.
• Sending email notifications to all users who have an active email address on record.
• Updating the "Last Updated" date at the top of this document.

Continued use of the platform after notice of changes is considered acceptance of the updated policy. If you disagree with the changes made, you have the right to close your account before the changes take effect.

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, please contact the winboxmalay privacy team through the following channels:

• Live chat: Available 24/7 directly within the winboxmalay platform or app.
• Email: [email protected]
• General support email: [email protected]

We are committed to responding to all privacy-related inquiries within 3 business days. For formal requests such as data access or deletion, the processing period is up to 14 business days.