Updated: 1 January 2026

Wimbox Privacy Policy – Malaysia Player Personal Data Protection

At wimbox, your privacy is not merely a legal obligation — it is our genuine commitment. This policy explains exactly how we handle your personal data from start to finish.

SSL 256-bit Data Encrypted 12 Sections
🔒
Official Privacy Policy
Version 2.5 • Updated 2026

wimbox Privacy Commitment

Six core pillars of data protection we practise to safeguard the privacy of every wimbox player

Highest-Level Encryption

All data passing through the wimbox platform is protected by SSL 256-bit encryption — the same technology used by Malaysia's major banks. Your information cannot be intercepted or read by any unauthorized third party.

Minimum Data Collection

Wimbox only collects data that is strictly necessary to operate its services. We do not collect excessive or irrelevant information. Every piece of data we hold has a clear and legitimate purpose.

No Sale of Data to Third Parties

Your personal data has never been and will never be sold to any third party for commercial purposes. Your information belongs to you — it is not an asset we can trade.

Your Data Ownership Rights

As the data owner, you have the right to access, correct, or request deletion of your personal data at any time. The process is straightforward and we are committed to handling your request within the stipulated timeframe.

Secure Data Storage

Your data is stored on servers protected by multi-layered firewalls, strict access controls and round-the-clock real-time security threat monitoring.

Full Transparency

We will notify you clearly of any changes to this Privacy Policy. All amendments will be communicated through the platform, and you always have the option to review or question those changes.


Summary
Effective Date:
1 January 2026
Version:
2.5
Standards:
SSL 256-bit, PDPA
Language:
Malay
Your Data is Secure

Wimbox protects your personal data in accordance with strict international security standards.

Important Note: This Privacy Policy describes the data processing practices of wimbox. By using our platform, you acknowledge that you have read and understood this policy.

1Introduction

Wimbox ("we", "our platform") values the privacy of every individual who uses our services. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the wimbox website, mobile app, and all related services.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. As a platform serving Malaysian players, we understand the importance of trust and are committed to handling your data with the highest level of responsibility.

This policy applies to all users of the wimbox platform, including visitors, registered players and former members whose data remains within a valid retention period.

wimbox does not sell, rent, or trade your personal data to any third party for commercial purposes. This is a commitment we have never broken and never will.

2Types of Data We Collect

Wimbox collects various types of information to enable us to provide a safe, fair, and efficient service. The data we collect can be categorized as follows:

2.1 Personal Identification Data

  • Full name as it appears on your identity card or official documents
  • Date of birth and gender
  • Identity card number or passport number
  • Full current residential address
  • Mobile phone number and email address

2.2 Financial Data

  • Bank account number or registered e-wallet information
  • Deposit and withdrawal transaction history
  • Betting records and gaming activity
  • Account balance and bonus history

2.3 Technical Data

  • IP address and device location data
  • Browser type and device operating system
  • Platform usage data and access logs
  • Cookie information and session identifiers
Data Category Primary Purpose Retention Period
Identification Data KYC Verification & account security 5 years after account closure
Financial Data Transaction processing & audit 7 years (legal requirement)
Technical Data Platform security & improvements 2 years
Communication Data Customer support & marketing 3 years

3How We Collect Data

Wimbox collects personal information through several lawful and transparent channels:

  • Directly from you — during the account registration process, KYC verification, customer support requests, and written communications with our team.
  • During platform use — gaming activity, financial transactions, website access, and interactions with wimbox platform features are automatically recorded as technical data.
  • Through cookies and similar technologies — as described in Section 6, cookies help us personalize your experience and improve platform functionality.
  • From authorised third-party providers — including payment processors, identity verification providers, and service partners who help us operate the platform securely.
We do not purchase personal data from data brokers or unauthorized third-party sources. All data we hold is obtained through lawful and transparent means.

4How We Use Your Data

Wimbox uses your personal data solely for legitimate and necessary purposes in operating the platform. These purposes are as follows:

  • Account management: Securely creating, verifying, and maintaining your player account
  • KYC compliance: Meeting legal requirements related to identity verification and anti-money laundering
  • Payment processing: Processing deposits, withdrawals, and all financial transactions accurately and securely
  • Platform security: Detecting and preventing fraud, account misuse, and suspicious activity
  • Customer support: Providing effective technical support and customer service
  • Service improvements: Analyzing usage patterns to improve platform features and performance
  • Marketing communications: Sending information about relevant promotions and offers, subject to your communication preferences
  • Legal compliance: Fulfilling legal and regulatory obligations applicable to our platform's operations

5Data Sharing with Third Parties

Wimbox does not sell your personal data. However, there are certain situations where we need to share your data with authorized third parties:

5.1 Sharing Required for Operations

  • Payment processors: DuitNow, FPX, Touch 'n Go, Boost and other processors that enable financial transactions to be carried out securely
  • Identity verification providers: Companies that assist us in conducting KYC checks as required by law
  • Game providers: Minimum information required by slot and casino providers such as Pragmatic Play and PG Soft to operate their games
  • IT infrastructure providers: Cloud and hosting services that store data to the highest security standards

5.2 Sharing Required by Law

Wimbox will disclose data to the relevant authorities when required by law, including court orders, financial crime investigations, or requests from legitimate regulatory bodies. In every case, we will only disclose the minimum data necessary.

All third parties that receive your data are bound by strict data protection agreements and are not permitted to use that data for any purpose beyond what has been agreed upon.

6Cookies and Tracking Technologies

The wimbox platform uses cookies and similar tracking technologies to enhance your experience and maintain session security. Here are the types of cookies we use:

Essential Cookies (Required)

Required for core platform functions such as login, session verification and security. These cookies cannot be disabled without seriously affecting platform functionality.

Functional Cookies

Helps us remember your preferences such as language, display settings, and game choices so you don't need to reconfigure them each time you log in.

Analytics Cookies

Helps us understand how players use the platform so we can make meaningful improvements. Analytics data is used in aggregate and does not identify specific individuals.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of the wimbox platform.

7Data Storage and Security

Your data security is wimbox's top priority. We implement multiple layers of technical and organizational protection to keep your data safe at all times:

  • Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.3 / SSL 256-bit
  • Encryption at rest: Sensitive data stored in our databases is encrypted using AES-256
  • Access control: Only staff with specific authorisation may access personal data, and every access is recorded in an audit log
  • Security monitoring: A 24/7 threat detection system monitors all unauthorized access attempts
  • Secure backup: Data is regularly backed up to separate, secure locations
  • Security testing: Penetration testing is conducted periodically by independent security experts
In the event of an unexpected data breach, wimbox is committed to notifying affected players and the relevant authorities within the timeframe required by law.

8Your Rights Over Personal Data

As a data subject, you hold important rights that we fully respect. Here are your rights and how to exercise them:

Right of Access Right to Rectification Right to Erasure Right to Restriction Right to Object Right to Portability
  • Right of Access: You may request a copy of all personal data we hold about you at any time
  • Right to Rectification: If any of your data is inaccurate or outdated, you have the right to request an immediate correction.
  • Right to Erasure: In certain circumstances, you may request that we delete your personal data, subject to legal requirements
  • Right to Restriction of Processing: You may request that we restrict the processing of your data in certain situations while an inquiry is being investigated
  • Right to Object: You may object to the processing of your data for direct marketing purposes at any time
  • Right to Data Portability: You may request your data in a machine-readable format for transfer to another platform

To exercise any of the above rights, please contact the wimbox Data Protection team through our platform. We will respond to your request within 30 business days.

9Children's Data

Wimbox is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that a minor's data has been collected unintentionally, we will take immediate action to delete that data and close the associated account. Parents or guardians who believe their child may have registered on wimbox are encouraged to contact us right away.

If you suspect an account has been registered by a minor, please report it to the wimbox support team immediately via our platform's live chat.

10Cross-Border Data Transfers

In the course of its operations, wimbox may transfer personal data outside Malaysia for data storage at international data centres or for processing by service providers located in other countries.

When such data transfers occur, wimbox ensures that:

  • The recipient country has a level of data protection equivalent to or higher than that provided under Malaysia's PDPA
  • There is a valid and binding data transfer agreement between wimbox and the data recipient
  • All transferred data remains under consistent encryption protection at all times

11Amendments to This Privacy Policy

Wimbox reserves the right to update this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or new platform features.

When amendments are made, we will:

  • Updating the "Last Updated" date at the top of this document
  • Displaying a clear notice on the platform's home page
  • Sending notification emails to all active members for significant changes

Your continued use of the wimbox platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account before the effective date.

12Contact Our Data Protection Officer

Wimbox has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with all applicable data protection laws. If you have any questions, concerns, or complaints regarding this Privacy Policy or the processing of your personal data, please contact us via:

  • Live Chat: Available on the wimbox platform — the fastest option for general privacy inquiries
  • Email: [email protected] — for formal complaints or requests related to data
  • Frequently Asked Questions: Visit FAQ page for answers to common privacy questions

We are committed to responding to all privacy-related inquiries within 14 business days. More serious complaints will be prioritized and processed within 7 days.

This Privacy Policy was last updated on 1 January 2026 and takes effect immediately. Previous versions are available upon request.

🛡️

Your Data is Protected, Your Privacy is Respected

Wimbox ensures every aspect of your personal data handling meets the highest data protection standards. We believe your trust is built through transparency and consistent action.

Join the wimbox player community of over 500,000 members with full confidence that your personal data is in responsible hands.


Bahasa Melayu