Winvox Privacy Policy

1. Introduction

Winvox ("Winvox", "we", "us", "our") operates the online gaming platform accessible at winvox.cam and is committed to protecting the privacy and personal data of all individuals who use our services. This Privacy Policy ("Policy") describes how Winvox collects, uses, stores, shares and protects personal information in connection with the provision of our platform and services.

This Policy applies to all players, visitors and registered account holders who access the Winvox platform, including via desktop and mobile browsers. By registering an account or continuing to use the Winvox platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement between you and Winvox.

2. Definitions

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, erasure or destruction.
• "Data Controller" means Winvox in its capacity as the entity that determines the purposes and means of processing personal data.
• "Data Processor" means a third party that processes personal data on behalf of Winvox under a contractual arrangement.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement by a data subject to the processing of their personal data.
• "KYC" means Know Your Customer — the mandatory identity verification process conducted by Winvox prior to approving withdrawal requests.
• "Platform" means the Winvox website and all associated services accessible at winvox.cam.

3. Personal Data We Collect

Winvox collects personal data through several channels — directly from you, automatically through your use of the Platform, and in limited cases from third-party sources such as payment processors. The categories of personal data we collect include:

3.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification — 21+ policy)
• Residential address, including postcode and city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address and contact telephone number
• Preferred username and encrypted password
• Preferred language and currency (MYR)

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents — MyKad, Driver's Licence, or Passport
• Proof of residential address — utility bills or bank statements dated within 3 months
• Selfie photographs for liveness and document-matching verification
• Proof of payment method — for example, screenshots of Touch 'n Go eWallet, DuitNow or Maybank account details

3.3 Transaction & Financial Data

• Deposit and withdrawal history, including amounts, timestamps and payment methods used (e.g., FPX, Boost, GrabPay, CIMB, Public Bank)
• Account wallet balance and transaction records
• Cryptocurrency wallet addresses where applicable (USDT, BTC)

3.4 Gaming Activity Data

• Game types played, wager amounts, game results, session durations
• Responsible gambling tool usage (deposit limits, session limits, self-exclusion elections)
• Bonus claims and wagering history

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, browser type and version
• Session logs, timestamps and platform interaction data
• Cookies and similar tracking technologies (see Section 7)

3.6 Communications Data

• Content of live chat, email and support interactions with our team
• Complaint and dispute records
• Player feedback and survey responses where voluntarily provided

4. Lawful Basis for Processing

Winvox processes personal data only where a valid lawful basis exists. The following table summarises the primary lawful bases applicable to our key processing activities:

5. How We Use Your Personal Data

Winvox uses the personal data we collect for the following purposes:

• Account Services: To create, manage and maintain your registered account, process transactions in MYR, and provide access to all platform features including live casino, sports betting, slots and poker.
• Identity Verification: To verify your identity and age (21+ policy), prevent fraud, and comply with applicable anti-money laundering regulations.
• Payment Processing: To process your deposits and withdrawals via your nominated payment methods, including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong and cryptocurrency channels.
• Platform Security: To detect and prevent fraud, collusion, multi-accounting and other prohibited activities.
• Responsible Gambling: To monitor gaming activity, identify patterns associated with problem gambling, and apply self-imposed or regulatory restrictions where required.
• Customer Support: To respond to your enquiries, resolve disputes and improve the quality of our support services.
• Legal Compliance: To meet our obligations under applicable laws and regulations, including retention of financial records and transaction data.
• Marketing (with consent): Where you have opted in, to send you promotional offers, bonus notifications and relevant platform updates. You may withdraw consent at any time by contacting support.
• Platform Improvement: To analyse usage patterns, improve navigation, optimise performance and develop new features that better serve Malaysian players.

6. Data Sharing & Disclosure

Winvox does not sell, rent or trade your personal data to any third party for commercial purposes. We may share your data in the following limited and controlled circumstances:

• Payment Service Providers: We share necessary transaction data with payment processors — including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay, and banking partners — solely for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Partners: We may engage third-party identity verification services to assist with document review. These partners are contractually bound to process data solely for verification purposes and in accordance with this Policy.
• Gaming Software Providers: Game providers whose titles are hosted on Winvox may receive session and outcome data necessary for game operation, but not your personal identification details.
• Regulatory Authorities: We may disclose personal data to regulators, law enforcement agencies or government bodies where required to do so by law or valid legal process.
• Fraud Prevention & Compliance Services: We share data with industry fraud prevention and anti-money laundering compliance databases where necessary to protect the integrity of the Platform and comply with legal obligations.
• Business Transfers: In the event of a merger, acquisition or restructuring of Winvox, your data may be transferred to the successor entity, subject to the same data protection obligations set out in this Policy.

All third-party Data Processors engaged by Winvox are subject to written data processing agreements that require them to handle your personal data in a manner consistent with this Policy and applicable data protection law.

7. Cookies & Tracking Technologies

Winvox uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session integrity and analyse usage patterns. Cookies are small text files stored on your device by your browser.

7.1 Types of Cookies We Use

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies that keep you logged in during your gaming session. These cannot be disabled without breaking core Platform functionality.
• Analytics Cookies: Used to collect anonymised data about how players interact with the Platform — such as pages visited, time spent and navigation paths — to help us improve the user experience.
• Preference Cookies: Used to remember your settings, such as preferred language (English/BM/Mandarin) and currency (MYR), so you don't need to re-enter them on each visit.
• Security Cookies: Support fraud detection, session integrity verification and protection against cross-site request forgery.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality and performance of the Platform.

8. Data Retention

Winvox retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

9. Data Security

Winvox employs a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, alteration or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the Platform.
• Encryption of sensitive data fields — including identity document data and financial information — at rest in our databases.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Two-factor authentication (2FA) available and encouraged for all player accounts.
• Regular internal security audits, vulnerability assessments and penetration testing.
• Formal data breach response procedures with defined notification timelines.

10. International Data Transfers

In the course of operating the Platform and engaging third-party service providers, your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, Winvox takes all reasonable steps to ensure that your data is afforded an equivalent level of protection to that which it would receive under Malaysian data protection law.

Transfers to third-party processors are governed by written data processing agreements that impose contractual obligations consistent with this Policy. Where required, Winvox relies on appropriate transfer mechanisms — including standard contractual clauses or equivalent safeguards recognised by applicable regulators.

11. Your Data Rights

As a data subject, you have the following rights in respect of your personal data held by Winvox, subject to applicable law and any legal retention obligations that override individual requests: