🔒 Personal Data Protection

Privacy Policy wimbox
— Your Data Security, Our Priority

Wimbox is committed to protecting every member's privacy to the highest security standards. This document transparently explains how we manage your personal data.

Last Updated: 1 January 2026

Important Note: This Privacy Policy forms part of your agreement with Wimbox. By registering or using our platform, you agree to how we process your personal data as described here. Please read it carefully and contact us if anything is unclear.

1. Introduction and Scope of This Policy

Wimbox ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy clearly and transparently explains how we collect, use, store, protect, and in certain circumstances disclose your personal information when you use the wimbox.pro platform.

This policy applies to all users of the Wimbox platform — whether you are simply browsing our website, registering as a member, making a deposit, playing games, or contacting our support team. In short, if you interact with Wimbox in any way, this policy applies to you.

We built this Privacy Policy on the principle that your personal data belongs to you. We only collect what is strictly necessary, use it solely for the stated purposes, and protect it with industry-leading security measures.

Core Principles of wimbox: Minimum data collection, use limited to stated purposes, secure storage, and full control in your hands as a member.

2. Types of Personal Data We Collect

Wimbox collects personal data from you through several different channels. Below is a detailed breakdown of the data we collect and the purpose of collection:

A. Data You Provide Directly

This information is provided by you when registering or using the platform:

  • Identity information: Full name, date of birth, gender, ID card number
  • Contact information: Email address, phone number, full address
  • Financial information: Bank account number, account holder name, e-wallet details for payment processing
  • Verification documents: Copy of identity card, utility bill, or other required KYC documents
  • Communication information: Any information you share when contacting customer support

B. Data Collected Automatically

Some information is collected automatically when you use the wimbox platform:

Data Type Example Purpose
Device Data Phone model, OS, web browser Experience optimisation
IP Address IP at login Security, fraud detection
Activity Data Games played, session duration Responsible gaming
Transaction Data Deposit amount, transaction date Financial records, AML compliance
Cookie Data Language preference, login session Platform personalization

3. How We Use Your Data

The personal data we collect is used solely for the lawful and stated purposes below. We do not use your data for any other purpose without your consent:

  1. Account Management: Registering and maintaining your Wimbox account, processing logins, and managing your password and account security.
  2. Payment Processing: Processing deposits and withdrawals securely using your preferred payment method in MYR.
  3. Identity Verification (KYC): Verifying your identity to meet legal requirements and prevent fraud and money laundering.
  4. Service Provision: Providing access to games, promotions, and all Wimbox platform features you need.
  5. Platform Security: Detecting and preventing fraudulent activity, multiple account usage, and any security threats.
  6. Customer Support: Resolving enquiries, complaints, and technical issues submitted to our support team.
  7. Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support.
  8. Legal Compliance: Meeting legal obligations, including reporting required by the relevant authorities.
  9. Platform Improvements: Analysing usage data in aggregate and anonymised form to improve the quality of Wimbox services.

We never use your personal data to make automated decisions that negatively affect you without human intervention.

4. Data Sharing and Disclosure

Wimbox does not sell, rent, or trade members' personal data to any third party for marketing purposes. This is a commitment we will not compromise on.

However, we may share certain information with third parties in the following limited and controlled circumstances:

Trusted Service Providers

We work with third-party service providers who help us operate the platform, including payment providers (such as DuitNow, FPX, Touch 'n Go), game providers, cloud service providers, and analytics providers. All parties are bound by strict confidentiality agreements and are only permitted to use your data for purposes we have specified.

Legal Requirements

We will disclose personal data to the relevant authorities where required by law, court order, or valid legal process. We will notify you of such disclosure where permitted by law.

Fraud Prevention

In cases involving suspected fraud or money laundering, we reserve the right to share necessary information with law enforcement agencies or relevant industry bodies to protect our platform and members.

wimbox has never sell members' personal data. If you receive any unsolicited communication claiming to be from wimbox and requesting personal information, please report it to our support team immediately.

5. Data Security Measures

The security of your personal data is something we take extremely seriously. Wimbox implements multiple layers of technical and operational protection to keep your information safe at all times:

  • 256-bit SSL Encryption: All data transmitted between your device and wimbox servers is protected with industry-leading encryption, ensuring no third party can intercept your communications.
  • Stored Data Encryption: Sensitive information such as passwords and financial details is stored in encrypted format in our database, inaccessible even to internal staff.
  • Layered Access Control: Only authorized Wimbox staff with a specific need are permitted to access member personal data, and all access is logged for auditing.
  • 24/7 Security Monitoring: Our active intrusion detection system monitors all suspicious activity on our platform at all times.
  • Regular Security Testing: We conduct regular penetration testing and security audits by independent parties to identify and address vulnerabilities before they can be exploited.
  • Two-Factor Authentication: Two-factor authentication is available for member accounts to add an extra layer of protection.

While we implement all these security measures, no system can be guaranteed one hundred percent secure. We encourage members to play their part in protecting their accounts by using strong passwords, not sharing login credentials, and reporting any suspicious activity promptly.

6. Cookies and Tracking Technologies

Wimbox uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login session verification, security, and navigation. These cookies cannot be disabled.
  • Preference Cookies: Saving your preferences such as language and display theme for a more personalised experience.
  • Analytics Cookies: Helping us understand how members use the platform so we can make meaningful improvements. Data collected is aggregated and anonymised.
  • Security Cookies: Used to detect suspicious activity and protect your account from unauthorized access.

You can manage cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of the Wimbox platform. Please note that disabling all cookies will not affect data we have already collected.

Note: wimbox does not use third-party cookies for advertising or marketing purposes. Our analytics cookies are processed under strict controls and are not shared with external advertising platforms.

7. Your Rights Regarding Personal Data

As a wimbox member, you have certain rights regarding your personal data. We respect and facilitate the exercise of these rights:

Right to Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

If your information is inaccurate or incomplete, you may request that we update it.

Right to Erasure

In certain circumstances, you may request that we delete your personal data, subject to our legal obligations.

Right to Restriction

You may request that we restrict the processing of your data in certain situations permitted by law.

Right to Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform.

Right to Object

You may object to the processing of your data for certain purposes, including direct marketing.

To exercise any of the above rights, contact our team at [email protected]. We will process your request within a reasonable timeframe. Please note that certain rights may be subject to legal obligations that prevent the deletion of specific data, such as financial records required for compliance purposes.

8. Data Retention Period

Wimbox retains your personal data for as long as your account is active and for any additional period required by law or legitimate operational needs. The following is a general guide to retention periods:

  • Active account records: Retained for as long as your account remains active with Wimbox.
  • Financial and transaction records: Retained for a minimum of seven (7) years to meet legal requirements relating to financial records and anti-money laundering.
  • KYC documents: Retained for the period stipulated by laws relating to identity verification, typically five (5) to seven (7) years after the business relationship ends.
  • Support communication logs: Retained for two (2) years for reference in the event of a dispute.
  • Activity and security log data: Retained for one (1) year for security and fraud investigation purposes.

Once the retention period expires, your data will be securely deleted or fully anonymized. Anonymized data cannot be linked back to you and may be used by wimbox for analytics and platform improvement without time restriction.

9. Changes to This Privacy Policy

Wimbox reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or platform improvements. The last updated date will always be displayed at the top of this document.

For significant changes, we will notify members via:

  • Notices displayed prominently on the Wimbox platform homepage
  • In-account notification when you log in
  • Email to the registered address (for significant changes)

We encourage you to review this page periodically to stay informed about how we manage your privacy. Continued use of the Wimbox platform after any changes are published will be considered acceptance of the updated policy.

10. Contact Us About Privacy

If you have any questions, concerns, or complaints about how Wimbox handles your personal data, our team is ready to assist.

You can reach us through the following channels:

We will endeavour to respond to all privacy-related enquiries within seven (7) business days. For more complex requests, such as full data access or data deletion requests, we may require additional time to process your request thoroughly and securely.

Our Commitment: Every privacy complaint received by wimbox is taken seriously, thoroughly investigated, and responded to with full respect and transparency.

6 Layers Data Protection wimbox

We don't just talk about security — we invest in the best technology and processes to prove it to every member.

256-bit SSL Encryption

All data between your device and wimbox servers is encrypted with 256-bit SSL — the same standard used by major banks in Malaysia.

Strict Access Control

Member data is only accessible by authorized staff with a specific need. All access is logged and audited regularly.

24/7 Threat Monitoring

The wimbox security system is active around the clock, detecting and blocking any unauthorized access attempts or suspicious activity.

Regular Security Audits

Penetration testing and security audits are conducted by independent experts on a regular basis to ensure wimbox protections remain up to date.

No Data Sales

Wimbox has never sold, rented, or traded members' personal data to any third party for marketing purposes.

Two-Factor Authentication

2FA is available on all Wimbox accounts to add an extra layer of protection against unauthorized access, even if your password is compromised.

Trust Us With Your Privacy to wimbox

Join the Wimbox members who already trust our platform to keep their data and funds safe. Register today with confidence.

256-bit SSL Encryption No data sales Full privacy control 24/7 Support

This platform is for users aged 18 and above only. Responsible Gaming

Bahasa Melayu