✦ Data Protection & Privacy ✦
Winbok is committed to protecting the personal data of every player on our platform. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and the rights available to you as a data subject under applicable law. Please read this policy carefully alongside our Terms & Conditions.
At a Glance
These cards highlight our core data protection principles. They do not replace the full policy below, which governs all data processing activities.
Encryption & Secure Storage
All personal data transmitted to and from Winbok is protected by 256-bit SSL encryption. Stored data is held in secured environments with access controls restricted to authorised personnel only.
No Sale of Personal Data
Winbok does not sell, rent, or trade your personal data to third parties for marketing purposes. Data shared with service providers is strictly limited to what is necessary for platform operation.
Your Rights Are Respected
You have the right to access, correct, delete, and restrict the processing of your personal data. Requests are handled within 30 days via our support team at [email protected].
KYC Data Handled Carefully
Identity documents submitted for KYC verification are used exclusively for compliance and fraud prevention. They are retained only as long as required by applicable regulatory obligations.
Regulatory Compliance
Winbok processes personal data in accordance with applicable data protection legislation. Our compliance framework is reviewed regularly to reflect changes in regulatory requirements affecting our Malaysian player base.
Marketing Opt-Out Available
Players who do not wish to receive promotional communications may opt out at any time via their account notification settings or by contacting our support team. Opting out does not affect service-critical communications.
Section 1
This Privacy Policy ("Policy") describes how Winbok ("the Company", "we", "us", or "our"), the operator of the online gaming and sports betting platform at winbok.cam, collects, processes, stores, and shares personal data relating to individuals who access or use the platform ("you", "the Player", or "the User").
Winbok provides its Services to eligible players across Malaysia — including players in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and surrounding areas — and is committed to handling all personal data in accordance with applicable data protection and privacy legislation. This Policy applies to all personal data collected through the Winbok platform, regardless of the device or access method used.
This Policy is to be read together with the Winbok Terms & Conditions, which are accessible at /terms-conditions. By registering an account on Winbok, making a deposit, or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy.
If you do not agree to the terms of this Privacy Policy, please do not register an account or continue using the Winbok platform. To request deletion of any existing account data, contact our support team as described in Section 16 of this Policy.
Section 2
Section 3
Winbok, operating through the domain winbok.cam, acts as the Data Controller in respect of all personal data collected from players and users of the platform. As Data Controller, Winbok determines the purposes for which and the manner in which personal data is processed, and is responsible for ensuring that such processing complies with applicable data protection obligations.
For all privacy-related enquiries, data subject rights requests, or concerns regarding the handling of your personal data, please contact our support team using the details provided in Section 16 of this Policy.
Section 4
Winbok collects personal data through several channels in the course of providing its gaming and betting Services. The categories of data collected are detailed below.
When you create a Winbok account, we collect the information you provide during the registration process, including:
To comply with anti-money laundering (AML) obligations and to verify player identity prior to processing withdrawals, Winbok collects the following documentation from players:
We collect data relating to all financial transactions conducted through the platform, including deposit amounts, withdrawal requests, payment methods used, transaction timestamps, and transaction reference numbers. This data is retained for compliance, fraud prevention, and dispute resolution purposes.
We record your gaming and betting activity on the platform, including game selections, wager amounts, game outcomes, session durations, bonus usage, and betting market preferences (e.g., EPL, Liga Super Malaysia, UFC, live football). This data is used for account management, responsible gambling monitoring, and platform personalisation.
When you access the Winbok platform, we automatically collect certain technical data, including:
We retain records of your communications with the Winbok support team via live chat and email, including the content of messages and any attachments submitted. This data is used for support resolution, quality assurance, and compliance record-keeping.
Section 5
Winbok processes your personal data for the following purposes:
| Purpose | Data Categories Used | Notes |
|---|---|---|
| Account creation and management | Registration data, contact details | Essential for platform access |
| Identity verification (KYC) | KYC documents, selfie photograph | Required prior to first withdrawal |
| Payment processing | Financial transaction data, payment method details | Deposits and withdrawals via MYR channels |
| Fraud prevention and AML compliance | KYC data, transaction data, IP data | Regulatory obligation |
| Responsible gambling monitoring | Gaming activity, session data, financial data | Supports player welfare obligations |
| Customer support | Communications data, account data | Resolving queries and complaints |
| Platform analytics and improvement | Technical/usage data, gaming activity | Aggregated and anonymised where possible |
| Marketing communications (opt-in) | Contact details, game preferences | Only with your consent; opt-out available anytime |
| Legal and regulatory compliance | All categories where required by law | Subject to applicable data retention obligations |
Section 6
Winbok processes personal data on the following legal grounds, depending on the specific purpose of the processing activity:
Section 7
Winbok does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:
All third-party Data Processors engaged by Winbok are required to process personal data only in accordance with Winbok's documented instructions and applicable data protection law. Winbok conducts due diligence on processors prior to engagement and maintains a register of all data processing activities.
Section 8
In the course of providing its Services, Winbok may transfer personal data to servers, processors, or service providers located outside of Malaysia. Where such transfers occur, Winbok takes reasonable steps to ensure that appropriate safeguards are in place to protect the security and integrity of your personal data, consistent with applicable law.
Such safeguards may include the use of standard contractual data protection clauses in agreements with processors, the application of technical encryption measures during data transit, and restriction of data access to authorised personnel only.
Section 9
Winbok retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.
Section 10
Winbok implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:
Your responsibility: While Winbok maintains robust security infrastructure, the security of your account also depends on the confidentiality of your login credentials. Do not share your Winbok username or password with anyone. Winbok will never ask for your full password or OTP codes via email, live chat, or any other channel.
Section 11
Winbok uses cookies and similar tracking technologies on its platform for the following purposes:
You may manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies will impair your ability to use the Winbok platform. Marketing cookies may be disabled without affecting your core platform experience.
Section 12
As a data subject, you hold a number of rights in relation to the personal data Winbok holds about you. These rights are described below and may be exercised by contacting our support team as detailed in Section 16.
Right of Access
Request a copy of the personal data Winbok holds about you, including a description of processing activities and third parties to whom data has been disclosed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your account. Account profile data may also be updated directly via account settings.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
Right to Restriction
Request that Winbok restricts processing of your data in certain circumstances — for example, while the accuracy of data is under dispute.
Right to Portability
Receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible.
Right to Object
Object to processing based on legitimate interests, including profiling for marketing purposes. Marketing opt-out takes effect immediately upon request.
Rights requests will be acknowledged within five (5) business days and responded to within thirty (30) calendar days. In cases of complexity or high volume, the response period may be extended by a further thirty (30) days, with prior notification to the requesting data subject. Winbok does not charge a fee for rights requests unless they are manifestly unfounded or excessive.
Certain data rights may be limited or declined where Winbok is subject to overriding legal obligations to retain data — for example, AML retention requirements applicable to KYC records and financial transaction histories. Winbok will communicate clearly where a rights request cannot be fully complied with and the reason for any limitation.
Section 13
The Winbok platform is strictly intended for use by individuals who are at least 21 years of age. Winbok does not knowingly collect personal data from persons under the age of 21. If Winbok becomes aware that personal data has been collected from a minor, the relevant account will be suspended immediately, all data relating to that account will be deleted as soon as practicable, and any deposited funds will be returned to the originating payment method.
If you have reason to believe that a minor has registered an account on the Winbok platform, please notify us immediately at the contact details provided in Section 16 of this Policy.
Section 14
The Winbok platform may from time to time contain references or links to third-party services, payment processors, or informational resources. Winbok is not responsible for the privacy practices of any third-party websites or services accessed through such links. We recommend that you review the privacy policies of any third-party service you access, including those of payment providers such as Touch 'n Go eWallet, Boost, GrabPay, and your online banking provider.
The inclusion of a link or reference to a third-party service does not constitute an endorsement by Winbok of that service or its privacy practices.
Section 15
Winbok reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The effective date of the current version of this Policy is displayed at the top of this page.
Material changes to this Policy will be communicated to registered players via email notification to the address held on account, or by a prominent notice on the platform, with reasonable advance notice prior to the amended Policy taking effect. Your continued use of the Winbok platform following the effective date of any amendment constitutes your acceptance of the revised Policy.
We encourage you to review this Policy periodically. Archived versions of prior policy versions are available upon request by contacting the support team as described below.
Section 16
For all privacy-related enquiries, data subject rights requests, or concerns about the handling of your personal data by Winbok, please contact our support team through the following channels:
When submitting a data subject rights request, please provide your full name as registered on your Winbok account and a description of the specific request or concern. Where identity verification is necessary to process a rights request securely, we may ask you to confirm your identity before proceeding.
Winbok is committed to handling all privacy enquiries with diligence and transparency. We will always confirm receipt of your request and keep you informed of the outcome within the timeframes described in this Policy.
Your Data, Your Rights
Winbok handles your data with the care it deserves. Questions about your account or privacy rights? Our support team is available around the clock. You can also review our FAQ for common data and account queries.
Winbok is strictly for players aged 21 and above. Gamble responsibly.