winbix Privacy Policy

1. About This Policy

winbix ("we", "us", "our", "Company") operates the online gaming platform accessible at winbix.net and associated mobile-optimised domains. In the course of providing our services — which include casino games, live dealer tables, a sportsbook, account management, and customer support — winbix collects and processes personal data relating to registered players and visitors to our platform.

This Privacy Policy ("Policy") sets out in plain terms what data we collect, why we collect it, how we use it, how long we keep it, with whom we may share it, and what rights you have in relation to your personal data. We have drafted this Policy to be as clear and transparent as possible, because we believe Malaysian players — and all users of the winbix platform — deserve to understand exactly how their information is handled.

This Policy applies to all personal data collected through winbix.net, our customer support channels, and any marketing communications you receive from us. It does not apply to third-party websites linked from our platform, or to third-party game providers whose privacy practices are governed by their own policies.

2. Personal Data We Collect

winbix collects the following categories of personal data from registered players and platform visitors:

winbix does not collect special category personal data (such as racial or ethnic origin, health data, or biometric data) unless specifically required by applicable law or regulatory obligation, in which case you will be separately notified and asked for explicit consent.

3. How We Collect Your Data

3.1 Directly from You

The majority of personal data winbix holds is collected directly from you during the account registration process, when you complete KYC verification, when you make deposits or withdrawal requests, when you contact customer support, and when you interact with promotional offers or surveys.

3.2 Automatically

winbix automatically collects technical and usage data through server logs, cookies, and similar tracking technologies when you visit winbix.net or use the platform. This includes your IP address, device fingerprint, browser configuration, and behavioural data within the platform session. See Section 7 (Cookies & Tracking) for further details.

3.3 From Third Parties

winbix may receive data about you from the following third-party sources:

• Payment processors — transaction confirmation and fraud signals from Touch n Go eWallet, Boost, FPX banking operators, and card processing networks;
• Identity verification services — confirmation of document authenticity during KYC review;
• Fraud prevention databases — screening against known fraud indicators and self-exclusion registers;
• Game providers — session-level game outcome data from third-party providers operating games within the winbix platform.

4. How We Use Your Personal Data

winbix uses the personal data we collect for the following purposes:

• Account creation and management — registering your account, verifying your identity, managing your account settings, and maintaining your gaming and transaction history;
• Service delivery — enabling you to access and use casino games, live dealer tables, sportsbook markets, and all platform features;
• Payment processing — processing deposits and withdrawals, verifying payment methods, and managing your MYR wallet balance;
• Legal and regulatory compliance — meeting our obligations under anti-money laundering (AML) regulations, KYC requirements, age verification obligations, and responsible gaming duties imposed by our operating licence;
• Fraud prevention and security — detecting, investigating, and preventing fraudulent activity, account compromise, collusion, and unauthorised access;
• Customer support — responding to your queries, resolving disputes, and providing technical assistance;
• Responsible gaming — monitoring gaming patterns for indicators of problem gambling, enforcing deposit and session limits you have set, and facilitating self-exclusion requests;
• Platform improvement — analysing aggregated usage data to improve platform performance, game selection, and user experience;
• Marketing — sending promotional emails and bonus notifications where you have consented to receive marketing communications. You may opt out of marketing communications at any time by contacting winbix support.

5. Legal Basis for Processing

winbix processes your personal data under the following legal bases, applied as appropriate to each processing activity:

• Contractual necessity — processing required to perform the Agreement between you and winbix, including account operation, payment processing, and service delivery;
• Legal obligation — processing required to comply with AML legislation, KYC obligations, age verification requirements, and regulatory reporting duties;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where these interests are not overridden by your data protection rights;
• Consent — processing for marketing communications and non-essential cookies, where your explicit consent has been obtained and may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6. Data Sharing & Disclosure

winbix does not sell, rent, or trade your personal data to third-party marketing organisations under any circumstances. winbix may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment service providers — Touch n Go eWallet, Boost, Maybank, CIMB, and other payment processors, solely to facilitate your transactions;
• Game content providers — Pragmatic Play, Evolution Gaming, PG Soft, and other certified game studios, to the extent necessary to deliver gaming services;
• Identity verification partners — third-party KYC verification services engaged to authenticate your identity documents;
• IT infrastructure providers — cloud hosting, database, and cybersecurity service providers operating under strict confidentiality and data processing agreements;
• Regulatory and law enforcement authorities — where required by applicable law, court order, or regulatory mandate; winbix will disclose the minimum data required to satisfy the legal obligation;
• Self-exclusion and responsible gaming registers — to give effect to self-exclusion requests and cross-platform responsible gaming obligations.

Any third party with whom winbix shares personal data is contractually required to process that data only for the specified purpose and to maintain security standards equivalent to those of winbix.

7. Cookies & Tracking Technologies

winbix uses cookies, web beacons, and similar tracking technologies on winbix.net to deliver and improve the platform experience. Cookies are small text files stored on your device that allow the platform to recognise your browser across sessions.

Types of Cookies We Use

• Strictly necessary cookies — required for the platform to function, including session management, login state, and security tokens. These cannot be disabled without impairing platform functionality;
• Performance cookies — anonymous analytics data on page load times, error rates, and feature usage, used to optimise platform performance;
• Functional cookies — remember your preferences such as language settings, preferred game categories, and display options;
• Marketing cookies — used only where you have consented, to measure the effectiveness of promotional campaigns and deliver relevant offers.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access core winbix platform features. Note that disabling strictly necessary cookies may impair login and session functionality.

8. Data Retention

winbix retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. The following retention periods apply as general guidelines:

• Active account data — retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• KYC documentation — retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Transaction records — retained for a minimum of seven (7) years in accordance with financial record-keeping obligations;
• Customer support communications — retained for three (3) years from the date of the interaction;
• Marketing consent records — retained until consent is withdrawn, plus three (3) years to demonstrate historical compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to you.

9. Data Security

winbix implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and winbix servers;
• Encryption of sensitive data fields (including payment method details and identity document data) at rest in our database systems;
• Role-based access controls limiting staff access to personal data strictly to those with a defined operational need;
• Multi-factor authentication requirements for all winbix staff accessing production systems containing player data;
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity professionals;
• Incident response procedures providing for prompt notification in the event of a data breach affecting your personal data.

10. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data winbix holds about you:

• Right of access — you may request a copy of the personal data winbix holds about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data;
• Right to erasure — you may request deletion of personal data where retention is no longer necessary, subject to winbix's legal obligations to retain certain data (such as AML and KYC records);
• Right to restriction — you may request that winbix restrict processing of your data in certain circumstances, such as while a rectification request is pending;
• Right to data portability — you may request a machine-readable copy of personal data you have provided to winbix for transfer to another service provider;
• Right to object — you may object to processing of your personal data for direct marketing purposes. This right applies unconditionally and winbix will cease marketing processing promptly upon receipt of an objection;
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the winbix Data Protection team at [email protected] with the subject line "Data Rights Request". winbix will acknowledge your request within 72 hours and fulfil it within 30 days, or notify you if an extension is required.

11. Children's Privacy

If you have reason to believe that a person under the age of 21 has registered an account on the winbix platform, please notify us immediately at [email protected].

12. Third-Party Services

The winbix platform integrates third-party game content, payment services, and analytics tools operated by independent providers. These third parties may set their own cookies or collect technical data when you interact with their services within the winbix platform. winbix is not responsible for the privacy practices of third-party providers. We recommend reviewing the privacy policies of any third-party services you interact with, including game studios and payment processors.

winbix does not embed social media trackers or advertising network pixels from third-party marketing platforms on the winbix.net domain.

13. Changes to This Privacy Policy

winbix reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made, winbix will provide at least 14 days' advance notice by posting a notice on the winbix platform and, where appropriate, by notifying you via your registered email address.

Your continued use of the winbix platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the platform and request account closure.

This Privacy Policy was last updated on 1 January 2026 and supersedes all prior versions.

14. Contact & Data Protection Inquiries

For any questions, concerns, or requests relating to this Privacy Policy or winbix's handling of your personal data, please contact our Data Protection team: