Winbox9 Privacy Policy – Malaysia Member Personal Data Protection

1 Introduction and Our Commitment

Winbox9 is an online entertainment and betting platform trusted by hundreds of thousands of members across Malaysia. We understand that privacy is more than a legal obligation — it is the foundation of trust between the platform and its members.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. Winbox9 is committed to processing your personal data responsibly, transparently, and securely. We never sell member personal data to any third party for commercial purposes.

This policy applies to all users who access the winbox9 website, the winbox9 mobile app, and all related services. If you have any questions about how we handle your data, our support team is available via 24/7 live chat.

2 Personal Data We Collect

Winbox9 collects only the information necessary to provide you with a secure, efficient, and personalised experience. Below are the categories of data we collect and their purposes:

2.1 Data You Provide Directly

This includes all information you provide during the account registration process, KYC verification, withdrawal requests, or communications with our support team. You are responsible for ensuring that all information provided is accurate and up to date.

2.2 Data Collected Automatically

When you use the winbox9 platform, our systems automatically record certain technical information such as your IP address, device type, access time, and pages visited. This data is used solely for security purposes, detection of suspicious activity, and platform performance improvement.

3 How We Use Your Data

The personal data you provide to winbox9 is used for lawful, stated purposes only. We will not use your data for any other purpose without obtaining your consent first. Below is a detailed breakdown of how your data is used:

• Account Management: Create, verify, and manage your account, including secure login processes and two-factor authentication.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions efficiently and securely through supported payment methods such as DuitNow, FPX, TNG eWallet, and GrabPay.
• Legal Compliance and KYC: Fulfil legal obligations under Malaysia's PDPA, anti-money laundering (AML) requirements, and KYC procedures set by regulatory authorities.
• Platform Security: Detect and prevent fraud, multi-account usage, bonus abuse, and any suspicious or unlawful activity.
• Service Improvement: Analyse usage patterns to improve platform design, loading speed, and overall user experience.
• Marketing Communications: Send promotional information, bonus offers, and platform updates — only to members who have consented to receive such communications.
• Customer Support: Helps you resolve any technical issues or account-related enquiries more efficiently and effectively.

4 Data Encryption and Security Measures

Winbox9 invests seriously in data security infrastructure to ensure your personal information is always protected. The security measures we have implemented include:

• 256-bit SSL encryption: All data transmitted between your device and winbox9 servers is protected by industry-standard SSL 256-bit encryption, ensuring no third party can intercept or read your information in transit.
• Stored Data Encryption: Sensitive data stored on winbox9 servers — including passwords and financial information — is encrypted using strong encryption algorithms and cannot be read in plain text.
• Strict Access Controls: Only winbox9 staff with a legitimate operational need are granted access to member personal data. All access is logged and continuously monitored.
• 24/7 Monitoring: The winbox9 security system monitors platform activity at all times to detect any unauthorised access attempts or suspicious activity.
• Regular Audits: winbox9's security infrastructure undergoes regular independent security audits by third-party experts to ensure continuous and up-to-date protection.

5 Data Sharing with Third Parties

Winbox9 does not sell, rent, or trade members' personal data to any third party for commercial purposes. However, in certain limited situations, we may share your personal data with the following parties:

• Payment Service Providers: To process deposits and withdrawals, necessary transaction information is shared with trusted payment gateways such as DuitNow and FPX. These providers are subject to strict data security policies.
• Game Providers: To ensure a smooth gaming experience, minimal technical data is shared with licensed game providers integrated with the winbox9 platform.
• Regulatory and Law Enforcement Bodies: Winbox9 will disclose required data to the relevant authorities when mandated by Malaysian law or by court order.
• Identity Verification Services: For the KYC process, your identity documents may be verified through approved third-party identity verification services that are bound by strict confidentiality agreements.

In all data sharing instances, winbox9 ensures that recipients meet data protection standards equivalent to or higher than our own.

6 Cookies, Tracking, and Related Technologies

The winbox9 platform uses cookies and similar tracking technologies to enhance your experience and ensure account security. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use the platform to help us improve performance and user experience.
• Preference Cookies: Save your settings and preferences such as preferred language and layout so you do not need to reconfigure them each time you login.
• Analytics Cookies: Helps us understand aggregated usage patterns for platform improvement purposes. This data is not linked to your personal identity.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the winbox9 platform.

7 Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by winbox9:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Winbox9 will provide this information within 21 business days from the date a valid request is received.
• Right to Rectification: If your personal data is inaccurate, incomplete, or outdated, you have the right to request a correction and we will update it promptly.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Winbox9 will comply with such requests unless we are legally required to retain that data.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. Such requests will be processed within 10 business days.
• Right to Withdraw Consent: You may withdraw consent previously given for data processing at any time without affecting the validity of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the winbox9 data protection team via live chat within the platform or by email at [email protected]. All requests will be verified first to confirm the identity of the requester before being processed.

8 Data Retention Period

Winbox9 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law. Data retention periods are as follows:

• Active Account Data: Retained for the duration your account is active and for 5 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• Log and Security Data: Retained for 12 months for security investigation and dispute resolution purposes.
• Support Communications: Communication records with the support team are retained for 2 years for service quality improvement purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised so it can no longer be linked to your personal identity.

9 Third-Party Links and External Services

The winbox9 platform may contain links to or be integrated with third-party services such as game providers and payment gateways. Winbox9 is not responsible for the privacy policies or data security practices of these third parties.

We encourage you to read the privacy policy of any third-party platform or service you access through winbox9. Data sharing with third parties only takes place under the conditions stated in Section 5 of this document.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how winbox9 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the winbox9 platform for immediate response.
• Privacy Email: [email protected] for specific data protection enquiries.
• Support Email: [email protected] for general support and account enquiries.

The winbox9 Data Protection Officer (DPO) team will review and respond to all privacy-related enquiries within 5 business days. Winbox9 is committed to resolving any privacy concerns transparently and fairly.