Privacy Policy

Privacy Policy winnox — Malaysian User Data Protection

At winnox, your privacy is not just a legal obligation — it is a moral responsibility we take seriously. Find out exactly how your data is collected, used, and protected every day.

Last Updated: 1 January 2026
256-bit
SSL Encryption Active
PDPA
Malaysia Act 2010 Compliance
24/7
Data Security Monitoring
0
Sale of Data to Third Parties
Our Commitment: winnox has never sold, rented, or transferred your personal data to third parties for marketing purposes. Your data belongs to you, and we only use it to deliver the best service to you.

1Introduction and Scope of This Privacy Policy

Welcome to the winnox Privacy Policy. This document explains transparently and in detail how we — winnox ("Platform", "we") — collect, process, store, protect, and in certain circumstances share the personal information you provide or that we collect while you use our platform.

This Privacy Policy applies to all users accessing the winnox website at winnox.win, the winnox mobile app (if available), and all services, features, and products we offer. Whether you are a new member, exploring our games, making transactions, or simply browsing our website, this policy covers all your interactions with winnox.

We operate in compliance with Malaysia Personal Data Protection Act 2010 (PDPA) and the highest international data protection standards. We believe Malaysian users deserve to know clearly what happens with their data — not vague statements buried in lengthy documents.

Note: By using the winnox platform, you consent to the collection and use of personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform.

2Types of Personal Data We Collect

Winnox collects personal data necessary to provide a secure, seamless, and personalised service. We only collect data that is relevant and not excessive relative to the stated purpose. The following are the categories of data we collect:

Data Category Example Information Primary Purpose
Identity Data Full name, IC/passport number, date of birth, gender KYC verification and fraud prevention
Contact Data Email address, mobile number, state Account communications and security notifications
Financial Data Bank account details, digital wallet numbers, transaction records Deposit, withdrawal processing and AML compliance
Technical Data IP address, device type, browser, operating system, timestamp Account security and suspicious access detection
Game Data Betting records, wins, losses, and gaming habits Responsible gaming and enhanced experience
Communication Data Live chat logs, support emails, feedback Service improvement and complaint resolution

In addition to information you provide directly during registration and platform use, we also collect data automatically through cookies, server logs, and tracking technologies described in Section 6.

winnox never request your password via email, SMS, or live chat. If you receive any such request, please report it to our security team immediately.

3How We Use Your Personal Data

Every piece of data we collect has a clear and legitimate purpose. We do not process your data arbitrarily. The following are the primary ways we use your personal information:

  • Account Management: Creating, verifying, and securely maintaining your account, including the KYC verification process required under Malaysian law.
  • Transaction Processing: Processing all deposits and withdrawals accurately and securely via supported payment methods such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost.
  • Platform Security: Detecting and preventing fraudulent activity, money laundering, unauthorised access, and other cybersecurity threats that may affect you or our platform.
  • Customer Support: Providing accurate and personalised assistance when you contact our support team via live chat, email, or other communication channels.
  • Responsible Gaming: Monitoring gaming behaviour to identify users who may benefit from responsible gaming tools or professional support, in line with our responsible gaming commitment.
  • Platform Improvement: Analysing aggregated and anonymised usage data to better understand user needs and improve the overall platform experience.
  • Marketing Communications: Sending relevant promotional information and bonuses — only to users who have opted in to receive marketing communications. You may unsubscribe at any time.
  • Legal Compliance: Fulfilling the reporting and compliance obligations required under Malaysian law, including PDPA 2010 and anti-money laundering (AML) regulations.
Data Minimisation Principle: winnox only collects data that is strictly necessary for the stated purposes. We do not retain data that is no longer needed and conduct regular reviews to ensure adherence to this principle.

4Data Sharing with Third Parties

Winnox does not sell, rent, or transfer your personal data to third parties for marketing or commercial purposes. However, there are limited situations where we need to share your data with certain parties to ensure the platform operates properly and securely:

  • Payment Service Provider: Required financial information is shared with the payment processors we use (such as DuitNow and FPX providers) solely to process your transactions. All such providers are bound by strict data protection agreements.
  • Identity Verification Provider: Required KYC data is shared with approved third-party identity verification services to fulfil our legal compliance obligations.
  • Game Service Provider: Third-party game providers may receive the minimum technical data required to run their games on our platform. No financial or full identity data is shared for this purpose.
  • Legal Authority: We are required by law to disclose certain information when lawfully requested by Malaysian authorities, courts, or relevant regulatory bodies.
  • Professional Advice: Data may be shared with our legal counsel, auditors, or security consultants who are bound by professional confidentiality obligations.

All third parties we work with are required to sign data processing agreements ensuring they handle your data to the same stringent data protection standards as winnox. We do not share data with any party beyond the operational requirements stated above.

5Data Security — How We Protect Your Information

Winnox invests seriously in cybersecurity infrastructure to ensure your personal and financial data is always protected. The key security measures we implement include:

  • 256-bit SSL Encryption: All data transmitted between your device and winnox servers is encrypted using TLS 1.3 with AES-256 encryption — the same standard used by leading financial institutions worldwide.
  • Two-Factor Authentication (2FA): winnox supports two-factor authentication for an additional layer of security during login and high-value transactions. We strongly encourage all users to enable this feature.
  • Real-Time Threat Monitoring: Our security systems monitor the platform 24 hours a day, 7 days a week to detect and respond to any suspicious activity or intrusion attempts.
  • Encrypted Password Storage: User passwords are never stored in plain text. We use industry-leading hashing algorithms with salting to keep your password secure.
  • Data Segregation: Sensitive financial data is stored separately from general profile data in an isolated environment with strict access controls.
  • Regular Security Audits: Our platform undergoes regular penetration testing and independent security audits by accredited cybersecurity firms.
Shared Responsibility: While we implement the highest security measures on our end, your account security also depends on your actions. Use a strong and unique password, do not share your login credentials, and enable 2FA for maximum protection.

6Cookies and Tracking Technologies

Winnox uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website. The following are the types of cookies we use:

  • Essential Cookies (Required): These cookies are required for core platform functions such as login session authentication, security, and language preferences. The platform cannot function properly without them.
  • Performance Cookies: These cookies help us understand how users interact with our platform — which pages are visited most often, where users drop off, and technical issues that need to be addressed.
  • Functional Cookies: These cookies remember your preferences such as language, time zone, and display settings to deliver a more personalised experience.
  • Analytics Cookies: We use internal analytics tools to collect aggregated usage data that helps us improve the platform. This data cannot be used to identify individual users.

You can manage or disable cookies through your browser settings. Please note, however, that disabling essential cookies may affect platform functionality and your login experience. To disable cookies, refer to the guide for your browser (Chrome, Firefox, Safari, or Edge).

7Your Rights as a User

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by winnox. We are committed to respecting and facilitating the exercise of these rights:

Right to Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

If any of your data is inaccurate or outdated, you have the right to request immediate correction via your account profile or our support team.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform if needed.

Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.

To exercise any of the rights above, contact us via live chat or email at [email protected]. We will verify your identity before processing any data-related request to ensure your account remains secure.

8Data Retention and Deletion

Winnox does not retain your personal data longer than necessary. Our data retention periods are based on operational requirements, Malaysian law, and industry standards:

  • Active Account Data: Retained for the duration your account is active and up to 5 years after account closure, in line with Malaysia's AML legal requirements.
  • Financial Transaction Records: Retained for a minimum of 7 years as required by the Anti-Money Laundering Act 2001 and related regulations.
  • Support Communication Logs: Retained for 2 years for reference, complaint resolution, and service improvement purposes.
  • Technical Data and Server Logs: Retained for 90 days for security and technical debugging purposes.
  • Marketing Data: Deleted within 30 days after you unsubscribe from our marketing communications.

When data is no longer needed, winnox ensures secure deletion using industry-recognised data erasure methods, including multiple overwrite passes for data stored on physical media. Data held in backup systems will be deleted in accordance with our scheduled backup cycles.

9Children's Privacy

The winnox platform is exclusively for users aged 18 years and above only. We do not intentionally collect any personal data from individuals under the age of 18. Our registration process includes strict age verification through KYC to ensure only adults use our platform.

If we discover that personal data of an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and have reason to believe your child has registered on our platform while underage, please contact us immediately at [email protected].

10Amendments to This Privacy Policy

Winnox reserves the right to update or amend this Privacy Policy from time to time to reflect changes in law, technology, or our operations. Any material amendments will be communicated to you via:

  • In-platform notifications on winnox while you are logged in
  • Email to the address registered to your account
  • A prominent notice on our website's home page

Minor amendments — such as language corrections or additional clarifications that do not affect your rights — may be updated without specific notice. The "Updated" date at the top of this page will always reflect the current version of this policy.

Your continued use of the winnox platform after any amendments take effect constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically so you are always informed of how we protect your information.

11Contact Us Regarding Data Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is here to help. You may reach us through the following channels:

  • 24/7 Live Chat: Available directly within the winnox platform — the fastest way to get an immediate response.
  • Privacy Email: [email protected] — for official enquiries, data access requests, or written complaints.

We are committed to responding to all privacy-related enquiries within 3 business days. For data access or deletion requests requiring identity verification, the processing period is up to 14 business days.

winnox Data Protection Officer
For formal enquiries related to PDPA or data subject rights requests, please state "Data Privacy Request" in your email subject line to [email protected] and our team will route your request to the responsible officer.

Why Your Privacy Is Safe With winnox

We don't just comply with the law — we build data protection systems that go beyond the minimum requirements, because you deserve better than the bare minimum.

Bank-Grade Encryption

Every bit of data flowing between your device and the winnox platform is secured with 256-bit SSL encryption — the same technology used by Malaysia's major banks to protect their customers' transactions.

PDPA 2010 Compliance

Winnox operates in full compliance with Malaysia's Personal Data Protection Act 2010. Every data collection and processing procedure has been reviewed to ensure comprehensive legal compliance.

No Data Selling

Your personal data has never been and will never be sold, rented, or traded to third parties for marketing purposes. This is not merely a policy — it is an unwavering commitment we have upheld from day one.

Full Control in Your Hands

Access, correct, download, or delete your data at any time. winnox provides simple tools and a transparent process to ensure you always have full control over your personal information.

Independent Security Audit

Winnox's data security systems undergo regular audits and penetration testing by independent cybersecurity firms. The results help us identify and close any vulnerabilities before they can be exploited.

Round-the-Clock 24/7 Monitoring

Our security team and automated monitoring systems work around the clock to ensure your data is protected at all times — including weekends and Malaysian public holidays.

Your Data Is Secure. Time to Play with Confidence.

Winnox protects your privacy to the highest standards so you can focus entirely on your gaming. Register today and experience the difference for yourself.

Bahasa Melayu