Winbox02 Privacy Policy – Malaysia User Data Protection

Welcome to the winbox02 Privacy Policy. This document constitutes a written agreement between you as a user of the Platform and winbox02 as the operator of an online entertainment platform operating under the domain winbox02.pro. This policy clearly and thoroughly explains how we handle your personal information.

Winbox02 understands that privacy is more than a legal requirement — it is a fundamental right of every user. That is why we have built a robust data protection infrastructure, not only to comply with Malaysia's Personal Data Protection Act 2010 (PDPA), but also because we genuinely value the trust placed in us by every member who registers with us.

By using the winbox02 Platform — whether via the website or mobile app — you confirm that you have read, understood, and accepted the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Platform and contact our support team for next steps.

Winbox02 collects your personal data in several ways: directly when you register or use the Platform, automatically through tracking technologies, and in certain cases, from trusted third-party sources. Below are full details of the types of data we collect:

Specific to the process of KYC (Know Your Customer) verification, you may be asked to provide additional documents such as a copy of your MyKad, passport, bank statement, or proof of current address. These documents are handled with the highest level of security and accessed only by authorized personnel.

Every piece of data we collect has a clear and legitimate purpose. winbox02 does not use your data for any purpose other than those stated here, unless you provide explicit consent or the law requires it:

• Account management: Registering, verifying and maintaining your user account, including the required KYC process.
• Transaction processing: Processing deposits, withdrawals and all financial activities securely and accurately.
• Service provision: Allows you to access all available games, promotions and platform features.
• Security and fraud prevention: Identifying, investigating and preventing fraudulent activity, money laundering or platform abuse.
• Legal compliance: Fulfilling legal obligations, regulations and requests from competent authorities.
• Service improvement: Analyzing usage patterns to improve platform performance and user experience.
• Communication: Sending you important notices related to your account, transactions and policy changes.
• Targeted marketing: Sending relevant promotional offers and bonuses based on your interests — only if you have agreed to receive marketing communications.
• Responsible gaming: Monitoring wagering patterns to identify potential issues and provide appropriate support through the program Responsible Gaming.

Winbox02 does not sell, rent, or trade your personal data to third parties for their marketing purposes. However, in certain situations, we may share necessary information with the following parties:

• Payment providers: Financial institutions, banks, and digital wallet operators required to process your transactions — only the information necessary for processing will be shared.
• Game software providers: Game providers integrated with the winbox02 Platform require minimal session data to operate games correctly.
• Technology service providers: Companies providing technical infrastructure, cybersecurity, analytics, and customer support operating on behalf of winbox02 and bound by strict confidentiality agreements.
• Authorities and law enforcement: When required by law, court order, or a legitimate request from a competent authority, including in financial crime investigations.
• Auditors and legal advisors: Only when required for compliance purposes, internal audits, or legal disputes, subject to professional confidentiality obligations.

All third parties that receive your data from winbox02 are contractually bound to use that data solely for the specified purposes and must comply with the data security standards set by winbox02.

Winbox02 uses cookies and similar tracking technologies to enhance the user experience and ensure the Platform operates at its best. The following are the types of cookies we use:

• Essential Cookies: Required for core Platform functions such as login session verification, security, and navigation. These cookies cannot be disabled as they are critical to Platform operation.
• Performance Cookies: Collecting anonymous information about how users interact with the Platform, helping us identify the most popular pages and areas for improvement.
• Functional Cookies: Saving your preferences such as language, region and display settings so you do not have to reset them every time you log in.
• Marketing Cookies: Used to deliver more relevant ads and promotions based on your interests and activity on the Platform. These cookies are only active with your consent.

You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect Platform functionality and your login experience. For detailed instructions on managing cookies in your browser, please refer to your browser's help documentation.

Winbox02 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are our data retention guidelines:

• Active account data: Retained throughout the period your account is active and for any additional period required after account closure to fulfill legal obligations.
• Financial transaction records: Retained for at least 7 years after the transaction date in accordance with Malaysia's legal requirements relating to financial and tax records.
• KYC documents: Retained for the duration of the active account plus at least 5 years after account closure for anti-money laundering (AML) compliance purposes.
• System and technical logs: Typically retained for 90 days for security purposes and technical troubleshooting.
• Marketing data: Retained until you withdraw consent or request deletion, subject to applicable legal limits.

When data is no longer needed, winbox02 will securely delete or anonymise it so that it can no longer be associated with you as an individual.

Your data security is winbox02's top priority. We have implemented multiple layers of technical and organizational protection to keep your data safe from unauthorized access, loss, destruction or disclosure:

• 256-bit SSL encryption: All data transmitted between your device and our servers is protected with industry-grade encryption.
• Data-at-rest encryption: Sensitive data stored in our databases — including financial information and KYC documents — is encrypted using modern encryption algorithms.
• Strict access controls: Only authorized personnel with a legitimate business need may access users' personal data, and every access is logged for audit purposes.
• 24/7 security monitoring: Our systems are continuously monitored to detect any suspicious activity or intrusion attempts.
• Regular penetration testing: winbox02 conducts regular security audits by independent third-party cybersecurity experts.
• Two-factor authentication (2FA): We offer additional protection through 2FA for users who want to enhance the security of their login.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and winbox02's policy, you have the following rights regarding your personal data:

Winbox02 is an adult entertainment platform strictly restricted to individuals aged 18 years and above. We do not intentionally collect or store any personal data from individuals under the age of 18.

Every registration process includes strict age verification, and we reserve the right to request proof of identity to confirm age at any time. Should we find that a child's personal data has been collected without valid parental or guardian consent, we will take immediate action to delete that data and close the account in question.

Winbox02 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or technological developments. Our notification process is as follows:

• Any amendments will be published on this page with an updated date at the top.
• For material changes — that is, changes that significantly affect how we use your data — we will send a notice via email or display a prominent notice on the Platform before the changes take effect.
• Continued use of the Platform after the effective date of any changes will be considered your acceptance of the amended policy.

We encourage you to review this page from time to time to stay informed about how we protect your information. The latest version of this Privacy Policy will always be available at winbox02.pro/privacy-policy.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, the winbox02 data protection team is here to help:

• Live Chat: Reach us via the 24/7 live chat available on the winbox02 Platform for an immediate response.
• Email: [email protected]

We are committed to addressing all privacy-related inquiries seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Department (JPDP) Malaysia, the authority responsible for enforcing PDPA 2010.