Privacy Policy

1 Introduction

Winbix ("we", "us", "our") operates the online gaming platform accessible at https://winbix.cam (the "Platform"). We are committed to protecting the privacy of all individuals who interact with our Platform, including registered players, prospective users, and visitors ("you", "your", "Data Subject").

This Privacy Policy ("Policy") sets out in detail the categories of personal data we collect from you, the purposes for which that data is processed, the legal bases that justify such processing, and the rights available to you in relation to your personal data. This Policy applies to all services, features, and content offered by Winbix, including our website, customer support channels, and any communications we send to you.

By registering an account with Winbix or continuing to use our Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, which together form the overall agreement between you and Winbix.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to names, contact details, identification numbers, location data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or any other form of handling.
• "Data Controller" means Winbix, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of Winbix under a contractual obligation, such as payment processors and KYC verification service providers.
• "Consent" means freely given, specific, informed, and unambiguous agreement by which you indicate acceptance of the processing of your personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification process required by Winbix to comply with anti-money laundering obligations and player protection requirements.
• "Cookies" means small data files placed on your device when you access the Platform, used to recognise your browser, maintain session data, and improve Platform performance.

3 Data We Collect

Winbix collects personal data in the following categories:

3.1 Identity and Account Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the 21-year minimum age requirement)
• National identity number (Malaysian NRIC) or passport number where provided for KYC purposes
• Username and encrypted account password
• Profile photograph where submitted as part of identity verification

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam) and postcode

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts and dates
• Payment method identifiers (e.g., Touch 'n Go eWallet account reference, Maybank or CIMB account number suffix, DuitNow reference)
• Account balance history and transaction logs
• Bonus and promotional credit records

3.4 Technical and Usage Data

• IP address and device identifiers
• Browser type, operating system, and device model
• Session timestamps, pages visited, and clickstream data
• Game history, betting records, and wagering patterns
• Geolocation data (country and city level, derived from IP address)

3.5 Communications Data

• Contents of Live Chat, email, and WhatsApp support conversations with our team
• Records of complaints, disputes, and their resolutions
• Survey responses and voluntary feedback submitted to Winbix

3.6 Verification Documents

• Copies of government-issued photo identification submitted for KYC
• Proof of address documentation (e.g., utility bills, bank statements)
• Proof of payment method ownership where requested

4 How Data Is Collected

Winbix collects personal data through the following channels:

• Account registration: Information you provide when creating your Winbix account, including name, date of birth, contact details, and chosen credentials.
• KYC verification: Documents and information submitted response to identity verification requests, including identification documents and proof of address.
• Deposits and withdrawals: Transaction details and payment method references generated when you move funds into or out of your account via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or Hong Leong Bank.
• Platform usage: Automatically collected technical and behavioural data generated as you browse, play games, place bets, and interact with features on the Platform.
• Customer support interactions: Information you share when contacting us via Live Chat, email, or other support channels.
• Cookies and similar technologies: Data collected automatically through cookies, web beacons, and session trackers placed on your device when you access the Platform.

5 Data Processing & Purposes

The following table sets out the purposes for which Winbix processes your personal data and the corresponding data categories used for each purpose:

Winbix does not use your personal data for any purpose that is not described in this Privacy Policy. Where we intend to process your data for a new purpose that is materially different from those listed above, we will notify you and, where required, seek your explicit consent before doing so.

6 Legal Basis for Processing

Winbix processes your personal data one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered Winbix player, including account management, payment processing, and provision of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and regulatory reporting duties.
• Legitimate interests: Processing conducted for the legitimate operational interests of Winbix, including fraud prevention, platform security, and responsible gambling monitoring, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given and informed consent, primarily for direct marketing and personalised promotional communications. You may withdraw consent at any time by contacting our support team without this affecting the lawfulness of processing prior to withdrawal.

7 Data Sharing & Disclosure

Winbix does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: Financial technology partners facilitating your transactions via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other supported Malaysian payment methods. These processors receive only the minimum data necessary to complete your transaction.
• KYC and identity verification providers: Third-party services engaged to verify your identity and age in connection with our regulatory obligations. These providers process your verification documents under strict confidentiality obligations.
• Game content licensors: Studios and technology partners whose game software is hosted on the Winbix Platform. Limited technical session data may be shared to enable gameplay functionality and dispute resolution.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity partners who process data as part of the technical operation of the Platform. All such providers are bound by contractual data processing obligations.
• Regulatory and law enforcement authorities: We may disclose personal data to government agencies, regulators, or law enforcement bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of Winbix or its users.

8 Data Retention

Winbix retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and operational obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with anti-money laundering recordkeeping requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the relevant transaction, in accordance with applicable financial record-keeping obligations.
• KYC verification documents: Retained for the period of your account's active status plus five (5) years following closure, unless a longer retention period is required by law.
• Customer support communications: Retained for three (3) years from the date of the last interaction, unless the matter is subject to ongoing dispute or legal proceedings.
• Technical and usage data: Retained for up to twenty-four (24) months from collection, after which it is either deleted or anonymised.
• Marketing consent records: Retained for the duration of your consent, plus three (3) years following withdrawal of consent.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data must be retained beyond the standard periods due to legal proceedings or regulatory investigations, we will inform you of the extended retention where permitted by law.

9 Data Security

Winbix implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and Winbix's servers.
• Encryption at rest for sensitive stored data including identity documents, payment references, and account credentials.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based permission structures enforced across all internal systems.
• Regular security assessments including third-party penetration testing, vulnerability scanning, and code security reviews.
• Two-factor authentication (2FA) available for player accounts and enforced for all internal administrative access.
• Incident response procedures in place to detect, contain, and report data security incidents in a timely manner.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. While we take every reasonable precaution to protect your data, we cannot guarantee the absolute security of information transmitted to or from the Platform. You are responsible for maintaining the security of your own account credentials and for notifying us immediately at [email protected] (plain text — not clickable) if you suspect unauthorised access to your account.

10 Cookies & Tracking Technologies

Winbix uses cookies and similar tracking technologies to operate, secure, and improve the Platform. A cookie is a small text file placed on your device by web browser when you access our website. Cookies do not contain executable code or malicious content.

Winbix uses the following categories of cookies:

• Strictly necessary cookies: Required for core Platform functionality, including user authentication, session management, and security features. These cookies cannot be disabled without impairing your use of the Platform.
• Performance cookies: Collect anonymous aggregated data about how visitors interact with the Platform, including page load times, error rates, and navigation paths. This data is used to improve Platform performance.
• Functional cookies: Remember your preferences such as language settings, display options, and previously viewed game categories to provide a more personalised experience.
• Analytics cookies: Allow Winbix to understand user behaviour at an aggregated level, identify popular features, and measure the effectiveness of Platform improvements. These cookies do not identify you personally.

You may control or disable non-essential cookies through your browser's settings. Please note that disabling certain cookies may affect the functionality of the Platform. Winbix does not use cookies to serve third-party advertising or to track your activity on websites other than our own Platform.

11 Your Data Rights

Subject to applicable data protection law and certain statutory limitations, you have the following rights in relation to your personal data held by Winbix. To exercise any of these rights, please contact our support team via Live Chat or at the email address provided in Section 15.

We will respond to verified data rights requests within a reasonable period, typically within thirty (30) days of receipt. We may require you to verify your identity before processing a data rights request. In some circumstances, legal or regulatory obligations may prevent us from fulfilling certain requests in full; in such cases, we will explain the applicable limitation clearly.

12 Minors & Age Verification

Winbix enforces a strict minimum age of21 years for all registered account holders. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. The Platform and its services are intended exclusively for adults who meet this minimum age requirement.

As part of our registration and KYC process, we verify the age of all account holders using government-issued identification documents. Any account found to belong to, or to have been accessed by, an individual under the age of 21 will be immediately suspended and all associated data will be handled in accordance with applicable regulations.

Parents and guardians who become aware that minor has submitted personal data to Winbix without consent are encouraged to contact us immediately via Live Chat or the email address in Section 15 so that appropriate action can be taken promptly.

13 Third-Party Services

The Winbix Platform integrates with a number of third-party service providers to deliver payment processing, identity verification, game content, and platform infrastructure. While Winbix takes reasonable steps to ensure that all third-party processors comply with their data protection obligations, we are not responsible for the privacy practices of third-party services that operate independently of our Platform.

Where third-party payment processors such as Touch 'n Go eWallet, GrabPay, Boost, or bank transfer providers (Maybank, CIMB, Public Bank, DuitNow, FPX) receive your payment data in connection with Winbix transactions, their handling of that data is additionally governed by their own privacy policies and the relevant regulatory frameworks applicable to licensed financial services in Malaysia.

Winbix's Platform does not contain links to external third-party websites. In the event that you access a third-party service through a referal or indirect path, you do so at your own discretion and Winbix accepts no liability for the data practices of any third-party platforms.

14 Policy Amendments

Winbix reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The most current version of this Policy will always be published at https://winbix.cam/privacy-policy and will be identified by the "Last Updated" date shown at the top of this document.

Where we make a material change to this Policy — meaning a change that significantly affects your rights or how your data is used — we will notify you via the email address associated with your account or through a prominent notice on the Platform at least fourteen (14) days before the change takes effect. For non-material amendments, the updated Policy will be published without individual notification, and your continued use of the Platform following such publication constitutes your acceptance of the revised terms.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Winbix, please contact our Data Protection team using the channels below. We are available24 hours a day, 7 days a week.