Privacy Policy
Please read this Privacy Policy carefully to understand how we handle your personal data and what your rights are.
Who We Are
Winbox is run by Winbox Entertainment N.V. (licensed in Curaçao) with payments handled by Winbox Payments Sdn Bhd in Malaysia.
Scope
This policy covers data collected when you visit, register, deposit, play, contact support or take part in promotions on any Winbox website, app or official channel.
Your Consent
By creating an account or using Winbox you agree to this Privacy Policy and to our Terms & Conditions. If you disagree, please do not use the service.
Identity & Contact
Full name, NRIC/passport, religion (to confirm you are non-Muslim), date of birth, address, email, phone.
Financial
Bank-account or e-wallet details, deposit and withdrawal history, cryptocurrency wallet IDs.
Technical
IP address, browser type, device ID, geolocation, cookies and usage logs.
Gameplay
Bet history, bonuses claimed, win/loss figures, chat transcripts, support tickets.
Operate the Casino
Create accounts, verify age, run games, process payments and deliver customer support.
Legal & Security
Meet anti-money-laundering (AMLA 2001) and Curaçao-licence rules, stop fraud and keep minors out.
Marketing (Optional)
Send offers if you opt in. You can opt out any time in “My Account” or via the email footer.
Analytics
Understand traffic, improve games, fix bugs and balance promotions.
Consent
For optional marketing and cookies.
Contract
To deliver the gambling service you request.
Legal Obligation
To meet AML, tax and gambling-licence duties.
Legitimate Interest
To prevent fraud and improve user experience without overriding your rights.
Service Providers
Payment gateways, game studios, cloud hosting and KYC vendors—bound by strict contracts.
Regulators & Law Enforcement
When required by the Curaçao licence, Malaysian AML laws or a court order.
Business Transfers
If Winbox is sold or merges, data moves to the new owner under the same safeguards.
Data Centres
Servers are in Curaçao, Singapore and Malaysia with ISO-27001-certified providers.
Safeguards
Encryption, access controls and contract clauses that mirror PDPA standards.
Technical Measures
TLS 1.3 encryption, firewalls, intrusion detection and regular penetration testing.
Organisational Measures
Staff vetting, role-based access, mandatory security training and annual audits.
Regulatory Records
At least five years after account closure for AML compliance.
Marketing Preferences
Kept until you withdraw consent.
Deletion
When data is no longer needed we anonymise or securely destroy it.
Access & Correction
Request a copy of your data or ask us to fix mistakes.
Portability (from 1 June 2025)
Ask us to send your data to another service in a machine-readable format.
Withdraw Consent
Change marketing settings or close your account at any time.
Complain
Contact Malaysia’s PDPC if you believe we mishandled your data, after contacting us first.
Parental Action
If a minor’s data was sent to us, notify support and we will erase it promptly.
Notice
We post changes here and, if significant, alert you by email or in-app banner. Using Winbox after the effective date means you accept the revisions.
Data Protection Officer
Email: dpo@winbox.com
Phone: +60 11-5555 1234
Postal Address
Winbox Entertainment N.V.
Zuikertuin Tower, Willemstad, Curaçao