Privacy Policy Winbox VIP – How We Protect Your Personal Data

Introduction and Scope of the Privacy Policy

Winbox vip ("we", "the platform", or "winbox vip") respects the privacy of all individuals who use our platform. This Privacy Policy explains transparently how we collect, use, disclose, store, and protect your personal data when you access or use winbox vip's services through the website winboxvip.ws or any related mobile application.

This document has been drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and reflects winbox vip's commitment to responsible, ethical, and transparent data management. By registering for or using the winbox vip platform, you consent to the collection and use of your personal data as described in this document.

This policy applies to all winbox vip users and members based in Malaysia, regardless of whether you access the platform via a web browser, smartphone app, or any other device. If you disagree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Information We Collect

2.1 Information You Provide Directly

When you register or use the winbox vip platform, we collect information you voluntarily provide, including:

• Identity information: Full name, date of birth, Malaysian identity card number (MyKad), gender.
• Contact information: Email address, Malaysian mobile number, residential address.
• Financial information: Bank account number (for withdrawals), e-wallet details (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay) – stored in encrypted form.
• Verification documents: A copy of your identity card or passport for the KYC process.
• Account information: Username, password (stored in hashed form), security questions.

2.2 Automatically Collected Information

The winbox vip platform also automatically collects certain information when you use our services:

How Winbox VIP Uses Your Data

Winbox vip uses the personal data collected solely for legitimate purposes directly related to the operation of the platform. These primary purposes are:

• Account management: To create, maintain, and secure your winbox vip account.
• Transaction processing: Securely processing deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks), and other Malaysian payment methods.
• Identity verification (KYC): To verify that every member is a legitimate individual who meets the minimum age requirement of 18 years.
• Fraud prevention: Detecting and preventing fraudulent activity, money laundering, and unauthorised use of the platform.
• Customer support: Providing technical support and effectively addressing winbox vip member enquiries.
• Experience personalisation: Personalising game recommendations and promotions based on your interests and playing habits.
• Legal compliance: To fulfil all legal and regulatory obligations applicable to winbox vip.
• Service communications: Sending important account notifications, winbox vip promotions, and service updates.

Data Sharing and Disclosure

4.1 Parties That May Receive Your Data

Winbox vip does not sell your personal data. However, under certain limited circumstances, we may share your data with the following parties for legitimate purposes:

• Payment processors: E-wallet and banking providers (Touch 'n Go, DuitNow, GrabPay, and licensed Malaysian financial institutions) to process your financial transactions.
• IT service providers: Cloud infrastructure and security companies that assist us in operating the winbox vip platform – all bound by strict confidentiality agreements.
• Security analysts: Fraud detection and anti-money laundering service providers.
• Authorised authorities: Malaysian government agencies, law enforcement bodies, or courts where required by law or court order.

All third parties that receive winbox vip data are bound by data protection agreements requiring them to maintain the confidentiality and security of your data to the same standards we uphold.

Data Retention Period

Winbox vip retains your personal data only for as long as necessary for the purposes set out in this policy, or as required by applicable Malaysian law. In general:

• Active account data: Retained for as long as your winbox vip account remains active.
• Financial transaction data: Retained for 7 years after a transaction, as required for financial record-keeping and legal compliance.
• KYC data (verification documents): Retained for 5 years after account closure.
• Security log data: Retained for 2 years for security investigation purposes if required.
• Support communication data: Retained for 3 years from the date of last communication.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked back to your identity.

Data Security Measures

Winbox vip takes data security extremely seriously. We implement a range of technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or alteration:

• Encryption in transit: All communications between your device and winbox vip servers are secured by TLS 1.3 protocol with AES-256 encryption.
• Encryption at rest: All sensitive data stored on winbox vip servers is encrypted using industry-grade encryption algorithms.
• Two-factor authentication (2FA): Available on all winbox vip accounts as an additional layer of security.
• Real-time threat monitoring: An automated monitoring system operates 24/7 to detect and respond to security threats.
• Employee access restrictions: Only authorised winbox vip employees with a legitimate need are permitted to access members' personal data.
• Regular security audits: Winbox vip conducts regular security testing and audits to identify and address system vulnerabilities.

Cookies, Pixels, and Tracking Technologies

7.1 Types of Cookies Used

The winbox vip platform uses cookies and similar tracking technologies to enhance the user experience and maintain platform security. The types of cookies we use:

• Essential cookies (required): Required for core platform functions such as login authentication and session management. Cannot be disabled.
• Functional cookies: Saves your preferences such as language, region, and display settings for a better experience.
• Analytics cookies: To help us understand how members use the winbox vip platform for continuous improvement.
• Security cookies: Used to detect suspicious activity and protect your account from unauthorised access.

7.2 Cookie Controls

You can manage your cookie settings through your browser. However, disabling certain cookies may affect the functionality and security of the winbox vip platform. We recommend keeping essential and security cookies enabled at all times.

Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights with respect to the personal data held by winbox vip:

• Right to Access: Request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
• Right to Rectification: Request corrections to inaccurate or outdated data. Use the profile settings or contact winbox vip support.
• Right to Withdraw Consent: Withdraw your consent to certain data processing at any time, provided this does not affect any processing that has already taken place.
• Right to Restrict Processing: Request a restriction on how we process your data under certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to the processing of your personal data for direct marketing purposes.

To exercise any of the above rights, please contact winbox vip via email privacy@winboxvip.ws or via live chat within the platform. Your request will be handled within the timeframe stipulated by the PDPA.

Child Protection & Age Restrictions

The winbox vip platform is not intended for individuals under the age of 18 years old. We do not knowingly collect or process personal data belonging to minors. All prospective members are required to confirm they are at least 18 years of age during registration, and our KYC process is designed to verify this age requirement.

Should winbox vip discover that personal data belonging to a minor has been collected without valid consent, we will take immediate steps to delete that data and close the associated account. Parents or guardians who discover that a child in their care has registered with winbox vip are requested to contact us promptly.

Amendments to This Privacy Policy

Winbox vip reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or new service features. The "Updated" date at the top of this page will be revised whenever a material change is made.

When significant amendments are made to this policy, winbox vip will notify you via email to your registered address and/or through a prominent in-platform notification at least 14 days before the changes take effect. Your continued use of the winbox vip platform after the revised policy's effective date will be deemed as your acceptance of those changes.

Contact Our Data Protection Officer

Winbox vip has appointed a Data Protection Officer (DPO) responsible for overseeing the platform's compliance with Malaysia's PDPA and our privacy policy. If you have any questions, concerns, or complaints regarding how winbox vip handles your personal data, please contact us via:

• Privacy Email: privacy@winboxvip.ws
• General Support Email: support@winboxvip.ws
• Live Chat: Available 24/7 within the winbox vip platform

We are committed to responding to all privacy-related enquiries within 5 business days. For formal complaints, we aim to reach a resolution within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the Ministry of Domestic Trade and Consumer Affairs (KPDNHEP) as the relevant regulatory authorities in Malaysia.