Privacy Policy

1 Introduction

winboxh5 ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at https://winboxh5.cam. We take data privacy seriously and are committed to being transparent about how we collect, process, store, and protect the personal information of every user ("you", "your") who registers an account, deposits funds, or interacts with our services.

This Privacy Policy ("Policy") applies to all personal data collected in connection with your use of the Platform — including account registration, KYC identity verification, financial transactions, customer support interactions, and your general browsing activity on our website. It applies whether you access the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or anywhere else.

By creating an account with winboxh5 or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

2 Definitions

For clarity throughout this Policy, the following terms have the meanings set out below:

3 Data We Collect

winboxh5 collects personal data in several categories, depending on your level of engagement with the Platform. The categories of data we may hold about you include:

We do not collect sensitive personal data (such as race, religion, political opinions, or health data) except where strictly required by applicable gaming regulatory requirements, in which case we will notify you separately and obtain your explicit consent.

4 How Data Is Collected

winboxh5 collects personal data through the following mechanisms:

• Direct submission: Information you provide when registering an account, completing KYC, submitting a support request, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access or interact with the Platform, including via cookies, log files, and session tracking.
• Payment processors: Transaction data shared by payment service providers including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency networks when you deposit or withdraw funds.
• Identity verification providers: Data returned by third-party KYC and AML verification services used to validate the identity documents you submit.
• Fraud prevention and security systems: Signals from device fingerprinting and risk-scoring systems used to detect and prevent unauthorised account access and financial fraud.

5 Data Processing & Purpose

winboxh5 processes your personal data only for the purposes described below. We do not process your data for purposes incompatible with those originally disclosed to you, and we do not sell your personal data to third-party advertisers or data brokers under any circumstances.

• Account management: To create, maintain, and administer your winboxh5 account, including authentication and access control.
• Identity & age verification: To comply with our gaming licence obligations by confirming that all registered users are at least 21 years of age and are who they claim to be.
• Payment processing: To facilitate deposits and withdrawals in MYR via DuitNow, FPX, e-wallets, major Malaysian banks, and supported cryptocurrencies (BTC, ETH, USDT, BNB).
• AML & fraud prevention: To monitor transactions, detect suspicious activity, and comply with anti-money laundering obligations under our gaming licence.
• Platform personalisation: To tailor your game lobby, bonus offers, and communications to your preferences and betting history, where you have consented to such personalisation.
• Customer support: To respond to your enquiries, resolve disputes, and process responsible gambling tool requests such as self-exclusion or deposit limit changes.
• Legal and regulatory compliance: To meet reporting, record-keeping, and co-operation obligations imposed by our international gaming licence and applicable laws.
• Platform security and integrity: To detect and prevent cheating, bonus abuse, multi-accounting, and other prohibited conduct described in the Terms & Conditions.
• Service improvement: To analyse aggregate usage patterns, measure feature performance, and inform product development decisions — using anonymised or pseudonymised data where possible.

6 Legal Basis for Processing

winboxh5 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the contract between you and winboxh5, including account creation, payment processing, and the delivery of gambling services.
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML regulatory requirements and gaming licence conditions.
• Legitimate interests: Processing conducted for the legitimate interests of winboxh5 or third parties, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and interests.
• Consent: Where we rely on consent as the legal basis (such as for marketing communications or optional personalisation features), you have the right to withdraw that consent at any time by contacting our support team or adjusting your account preferences.

7 Data Sharing & Disclosure

winboxh5 does not sell, rent, or trade your personal data with third parties for commercial purposes. We may share your personal data with the following categories of recipients only where strictly necessary:

• Payment service providers: Including DuitNow, FPX operators, e-wallet providers (Touch 'n Go, Boost, GrabPay), Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency networks — solely to process your transactions.
• Identity verification partners: Third-party KYC and AML service providers engaged to validate identity documents and screen against regulatory watchlists. These providers are contractually bound to handle data only for verification purposes.
• Cloud infrastructure providers: Hosting and data storage providers operating under binding data processing agreements that meet applicable security standards.
• Gaming regulatory authorities: Disclosures required by our international gaming licence regulator, including player activity reports and AML filings.
• Law enforcement and courts: Where legally required by a valid court order, regulatory directive, or law enforcement request from a competent authority.
• Fraud and security networks: Aggregated risk signals shared with anti-fraud consortia on a pseudonymised basis to protect the wider online gambling ecosystem.

All third-party processors engaged by winboxh5 are required to implement appropriate technical and organisational measures to protect the personal data shared with them and are permitted to use it only for the specific purpose for which it was disclosed.

8 Data Retention

winboxh5 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, data will be securely deleted or anonymised in accordance with our internal data management procedures. Data subject to ongoing legal proceedings or regulatory investigations may be retained beyond these periods until the matter is resolved.

9 Data Security

winboxh5 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform — the same encryption standard used by major licensed banks and financial institutions.
• Encrypted data storage for sensitive fields including passwords (hashed with modern algorithms), payment details, and identity documents.
• Access controls and role-based permissions ensuring that only authorised winboxh5 personnel can access personal data, and only to the extent necessary for their role.
• Regular third-party security audits and penetration testing to identify and remediate vulnerabilities in the Platform infrastructure.
• Automated anomaly detection to identify suspicious login attempts, unusual transaction patterns, or potential data exfiltration events.
• Incident response protocols that ensure affected users are notified promptly in the event of a confirmed personal data breach that poses a risk to their rights and interests.

Despite these measures, no transmission of data over the internet or electronic storage system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately if you suspect any unauthorised access to your Account.

10 Cookies & Tracking Technologies

winboxh5 uses cookies and similar tracking technologies (such as web beacons and session tokens) to operate, secure, and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function correctly, including session management, authentication, and security. These cannot be disabled without disrupting core functionality.
• Functional cookies: Used to remember your preferences, such as language settings, game lobby layout, and notification preferences. These improve your experience but are not essential to Platform operation.
• Analytics cookies: Collect anonymised or pseudonymised data about how users navigate the Platform — pages visited, session duration, features used — to help us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Security cookies: Support fraud detection and account security functions, including identifying devices associated with suspicious activity.

winboxh5 does not use third-party advertising cookies or share browsing data with advertising networks. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the Platform.

11 User Rights

Subject to applicable legal limitations (including those imposed by our gaming licence and AML obligations), you have the following rights in relation to your personal data held by winboxh5:

• Right of access: You may request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to rectification: You may request the correction of inaccurate or incomplete personal data. For data that has been used in KYC verification, corrections may require re-submission of supporting documentation.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding retention obligations under our gaming licence and AML requirements.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to processing based on legitimate interests.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on our legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our Data Privacy team via the support channels set out in Section 15. We will respond to all verifiable requests within 30 days of receipt. Where requests are complex or numerous, we may extend this period by a further 30 days, notifying you accordingly.

12 Minors & Age Restriction

winboxh5 is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is mandatory during the KYC process and any account found to belong to a person under the minimum age will be immediately closed and all associated data permanently deleted, subject to any mandatory regulatory retention requirements.

If you are a parent or guardian and believe that a minor has registered an account with winboxh5 or has submitted personal data to the Platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action.

13 International Data Transfers

winboxh5 operates under an international gaming licence and may store or process your personal data on servers located outside Malaysia. Where personal data is transferred to jurisdictions that do not provide an equivalent level of data protection as Malaysia, winboxh5 ensures that appropriate safeguards are in place, including:

• Contractual clauses that impose data protection obligations on the receiving party equivalent to those applicable under the winboxh5 privacy framework.
• Use of third-party processors that maintain internationally recognised security certifications (such as ISO 27001 or SOC 2).
• Ongoing assessment of the adequacy of data protection standards in the jurisdictions to which data is transferred.

By using the Platform, you acknowledge and consent to the transfer of your personal data to other jurisdictions as described above, subject to the safeguards set out in this Policy.

14 Policy Amendments

winboxh5 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. Material changes will be communicated to registered users via the email address associated with their Account, or by prominent notice on the Platform, at least 7 days before the amendment takes effect where practicable.

The effective date displayed at the top of this page will be updated each time the Policy is revised. We encourage you to review this page periodically to stay informed about how we handle your personal data. Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of the rights set out in Section 11, please contact the winboxh5 Data Privacy team through the following channels:

All privacy-related correspondence is handled with strict confidentiality. We will require identity verification before processing any request that involves access to, correction of, or deletion of personal data.