winbix Privacy Policy – How We Handle Your Data

1. Who We Are

1.1   This Privacy Policy is issued by winbix, the operator of the online gaming platform accessible at winbix.app ("Platform"). References to "winbix", "we", "us", or "our" throughout this Policy refer to the winbix platform and its operating entity.

1.2   winbix acts as the data controller in respect of personal data collected from members and visitors to the Platform. This means winbix determines the purposes and means by which your personal data is processed.

1.3   winbix operates under international gaming authority oversight and is subject to applicable data protection obligations within that regulatory framework. Members in Malaysia are served directly by winbix in accordance with this Policy.

2. Personal Data We Collect

2.1   winbix collects personal data in the following categories:

2.2   winbix does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required for regulatory compliance purposes and only with your explicit consent or as permitted by applicable law.

3. How We Collect Your Data

3.1   winbix collects personal data through the following means:

• Direct interactions – Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting winbix support;
• Automated technologies – Technical and usage data collected automatically when you access the Platform, via cookies, server logs, and similar tracking technologies;
• Third-party sources – Identity and fraud-screening data received from third-party KYC verification providers, payment processors, and anti-money laundering (AML) screening services where legally required;
• Public sources – Publicly available information used to verify identity or screen for sanctions and politically exposed person (PEP) status in compliance with regulatory obligations.

4. How winbix Uses Your Personal Data

4.1   winbix uses personal data for the following purposes:

• To register and maintain your winbix Account;
• To verify your identity and age (21+ requirement) in accordance with applicable regulations;
• To process deposits, withdrawals, and payment transactions via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other accepted methods;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To provide customer support and resolve disputes;
• To send transactional communications including account confirmations, security alerts, and support responses;
• To send promotional communications and personalised offers, where you have consented or where it is in winbix's legitimate interest to do so;
• To monitor Gaming Activity for responsible gaming purposes and to comply with international gaming authority obligations;
• To improve, test, and develop the Platform's features and user experience;
• To comply with applicable legal, regulatory, and audit obligations.

5. Legal Basis for Processing

5.1   winbix processes personal data on the following legal bases:

• Contractual necessity – Processing required to perform the contract between you and winbix, including account management and payment processing;
• Legal obligation – Processing required to comply with applicable regulatory obligations, including KYC, AML, and gaming authority requirements;
• Legitimate interests – Processing carried out in winbix's legitimate interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights;
• Consent – Processing based on your explicit consent, such as for marketing communications. You may withdraw consent at any time by contacting winbix support.

6. Sharing Your Personal Data

6.1   winbix does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6.2   winbix may share your personal data with the following categories of recipients:

• Payment processors – To facilitate deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and cryptocurrency providers;
• KYC and identity verification providers – To verify member identity and comply with age-verification and AML requirements;
• Game software providers – Limited technical data shared with licensed game providers (e.g., Evolution, Pragmatic Play) to enable game delivery and RNG certification;
• Fraud and security vendors – To detect and prevent fraudulent activity and protect the integrity of the Platform;
• Regulatory authorities – When required by applicable law, court order, or in response to lawful requests from government authorities;
• Professional advisers – Including legal counsel, auditors, and compliance consultants under obligations of confidentiality.

6.3   All third parties with whom winbix shares personal data are required to maintain appropriate technical and organisational security measures and to process data only as instructed by winbix and in accordance with applicable data protection law.

7. International Data Transfers

7.1   The winbix Platform operates with infrastructure and service partners located in multiple jurisdictions. Your personal data may be transferred to and processed in countries outside Malaysia, including jurisdictions where winbix's regulatory authority operates.

7.2   Where personal data is transferred internationally, winbix implements appropriate safeguards, including contractual data processing agreements with receiving entities, to ensure your data receives a standard of protection consistent with this Privacy Policy and applicable international data protection standards.

8. Data Retention

8.1   winbix retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of your active Account relationship with winbix and for a period thereafter as required by applicable legal, regulatory, and audit obligations.

8.2   Specifically:

• Account and transaction records are retained for a minimum of 5 years following account closure, in compliance with AML and gaming regulatory requirements;
• Communications data (support logs, correspondence) is retained for 3 years;
• Technical and usage data collected via cookies may be retained for up to 13 months.

8.3   Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with winbix's data destruction procedures.

9. Your Data Protection Rights

9.1   Subject to applicable law and regulatory constraints, you have the following rights in respect of your personal data held by winbix:

• Right of access – Request a copy of the personal data winbix holds about you;
• Right of rectification – Request correction of inaccurate or incomplete personal data;
• Right of erasure – Request deletion of your personal data in certain circumstances, subject to legal retention obligations;
• Right to restrict processing – Request that winbix limits how it processes your data in certain circumstances;
• Right to data portability – Request a structured, machine-readable copy of personal data you provided to winbix, where processing is based on consent or contract;
• Right to object – Object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent – Withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing.

9.2   To exercise any of the above rights, please contact winbix by email at [email protected]. winbix will respond to all verified requests within 30 calendar days. In complex cases, winbix may extend this period by a further 60 days with prior notification.

10. Cookies & Tracking Technologies

10.1   The winbix Platform uses cookies and similar tracking technologies to operate and improve the service. Cookies are small data files stored on your device when you access the Platform.

10.2   winbix uses the following categories of cookies:

• Strictly necessary cookies – Essential for Platform functionality including authentication, session management, and security. These cannot be disabled.
• Performance cookies – Collect anonymised data on how Members use the Platform to help winbix identify areas for improvement.
• Functional cookies – Remember your preferences (such as language settings) to personalise your experience.
• Targeting and analytics cookies – Used with your consent to understand browsing behaviour and deliver relevant content.

10.3   You can manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform.

11. Children's Privacy

11.1   The winbix Platform is strictly for adults aged 21 and above. winbix does not knowingly collect personal data from individuals under the age of 21. If winbix becomes aware that it has collected data from a person under 21, that data will be deleted immediately and the associated Account closed.

11.2   If you believe a minor has registered an Account or submitted personal data to winbix, please contact [email protected] immediately.

12. Security Measures

12.1   winbix implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the winbix Platform;
• Encrypted storage of sensitive data fields including financial credentials;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Real-time fraud and anomaly detection systems monitoring Account activity.

12.2   Notwithstanding the above, no internet-based system can guarantee absolute security. winbix encourages all members to use strong, unique passwords and to enable available two-factor authentication features to protect their Accounts.

13. Third-Party Links

13.1   The winbix Platform does not contain outbound links to third-party websites as a matter of platform policy. This Privacy Policy applies solely to data collected through the winbix Platform at winbix.app. If third-party content is referenced within the Platform, winbix is not responsible for the privacy practices or content of any third-party operators.

14. Updates to This Privacy Policy

14.1   winbix reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Members via email to the address on file or via a notice displayed prominently on the Platform prior to the change taking effect.

14.2   The effective date of the current version of this Privacy Policy is stated at the top of this page. Continued use of the winbix Platform following publication of an updated Policy constitutes acceptance of the revised terms.

15. Contact Us

15.1   If you have any questions, concerns, or requests regarding this Privacy Policy or winbix's data processing practices, please contact the winbix Data Protection team:

15.2   winbix takes all privacy enquiries seriously. If you are not satisfied with winbix's response to a privacy concern, you may have the right to escalate the matter to the relevant data protection authority under your applicable jurisdiction's law.