winboc Privacy Policy

1. Who We Are

winboc (referred to in this Policy as "winboc", "we", "us", or "the Company") is the operator of the online casino and sportsbook platform accessible at winboc.app. winboc acts as the data controller in respect of the personal data collected from users of the Platform. Questions relating to this Privacy Policy or to winboc's data handling practices may be directed to our support team using the contact details in Section 13 below.

2. Information We Collect

winboc collects personal data from you in the following ways:

2.1 Information You Provide Directly

• Registration data: Full name, date of birth, nationality, residential address, email address, and mobile phone number provided when you create a winboc Account.
• Identity verification documents: Copies of government-issued identity documents (e.g., Malaysian MyKad, passport) and proof of address submitted to fulfil winboc's Know Your Customer (KYC) obligations.
• Payment information: Details of the payment methods used to deposit or withdraw funds from your winboc Wallet, including e-wallet identifiers (Touch n Go eWallet, Boost, GrabPay), bank account references (Maybank, CIMB, Public Bank, FPX), card details (Visa, Mastercard), and cryptocurrency wallet addresses (USDT TRC20). winboc does not store full card numbers — payment processing is handled by certified payment service providers.
• Communications: Records of your interactions with winboc's customer support team, including live chat transcripts, emails sent to [email protected], and any written complaints or enquiries.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone settings collected when you access winboc.app.
• Usage data: Pages visited on the Platform, games played, bets placed, session duration, navigation paths, and feature interactions — collected to improve the winboc product and detect unusual activity.
• Cookies and similar technologies: See Section 5 for a full description of winboc's use of cookies.

2.3 Information from Third Parties

winboc may receive information about you from third-party service providers engaged for identity verification, fraud detection, payment processing, and responsible gaming screening. Where winboc receives such data, it is handled in accordance with this Privacy Policy.

3. How We Use Your Information

winboc uses your personal data for the following purposes:

• Account management: To create and administer your winboc Account, verify your identity, process transactions, and provide access to Platform features.
• Legal and regulatory compliance: To fulfil winboc's obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) regulations, including age verification to enforce the 21+ age restriction.
• Transaction processing: To execute deposits, withdrawals, and promotional credits accurately and securely via your chosen payment method.
• Customer support: To respond to your enquiries, resolve complaints, and maintain records of support interactions.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, collusion, money laundering, and other prohibited conduct on the Platform.
• Platform improvement: To analyse usage patterns, identify technical issues, and develop new features and improvements to the winboc experience.
• Marketing communications: To send you promotional offers, bonus notifications, and product updates by email or SMS, where you have consented to receive such communications. You may withdraw consent at any time via your Account settings or by contacting support.
• Responsible gaming: To monitor betting patterns and account activity for indicators of problem gambling, and to apply responsible gaming measures where appropriate under winboc's Responsible Gaming Policy.

4. Legal Basis for Processing

winboc processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide you with winboc's services pursuant to the Terms & Conditions you accepted on registration.
• Legal obligation: Processing required to comply with applicable AML, KYC, and gaming regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and product improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have given explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Cookies and Tracking Technologies

winboc uses cookies and similar tracking technologies on winboc.app. Cookies are small text files stored on your device that help winboc recognise your browser, maintain your login session, and understand how you use the Platform.

winboc uses the following categories of cookies:

• Essential cookies: Required for the Platform to function correctly, including session authentication and security tokens. These cannot be disabled without impairing basic Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data on how users navigate winboc.app, which pages are visited most frequently, and where users encounter issues. This data informs product improvements.
• Functional cookies: Used to remember your preferences such as language settings, last-visited game category, and responsible gaming limit configurations.
• Marketing cookies: Used to deliver relevant promotional content and to measure the effectiveness of winboc's marketing campaigns, where you have consented to receive marketing communications.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookie categories may affect the functionality of the winboc Platform.

6. Sharing Your Information

winboc does not sell your personal data to third parties. winboc may share your data with the following categories of recipient in the circumstances described:

• Game providers and platform suppliers: winboc's certified game providers (including but not limited to live casino studio operators and RNG game developers) may receive session and wager data necessary for game delivery and fairness verification.
• Payment service providers: Your transaction data is shared with payment processors (including e-wallet operators, FPX network participants, and card processors) as necessary to execute your requested transactions.
• Identity verification and fraud prevention services: winboc engages third-party providers to assist with KYC document verification, age verification, and fraud screening. These providers act under data processing agreements with winboc.
• Regulatory and law enforcement authorities: winboc will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, or where winboc has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Professional advisers: winboc's legal counsel, auditors, and compliance advisers may access personal data on a strictly confidential and need-to-know basis.

7. International Data Transfers

winboc's operational infrastructure may involve the processing or storage of personal data outside of Malaysia. Where personal data is transferred to jurisdictions that may not provide an equivalent level of data protection, winboc ensures that appropriate safeguards are in place — including contractual data processing agreements with receiving parties — to protect the security and confidentiality of your data in accordance with this Policy.

8. Data Retention

winboc retains your personal data for as long as your Account remains active and for a period thereafter as required by applicable law and regulatory obligations. For most categories of data, the post-closure retention period is a minimum of five (5) years to satisfy AML and gaming regulatory record-keeping requirements. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

Transaction records and KYC documentation may be retained for longer periods where required by a specific regulatory obligation or where data is subject to an ongoing investigation or legal proceeding.

9. Security of Your Personal Data

winboc implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Security measures in place on the winboc Platform include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and winboc's servers.
• Encryption of sensitive data at rest within winboc's database infrastructure.
• Strict access controls ensuring that personal data is accessible only to authorised winboc personnel and service providers with a legitimate operational need.
• Regular third-party security audits and penetration testing of the winboc Platform.
• Multi-factor authentication and anomaly detection on administrative systems.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, winboc will notify affected users without undue delay in accordance with applicable notification obligations.

10. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in respect of the personal data winboc holds about you:

• Right of access: You may request a copy of the personal data winboc holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to winboc's legal obligations to retain certain records.
• Right to restriction of processing: You may request that winboc restrict the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing, at any time.
• Right to withdraw consent: Where winboc processes your data based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact winboc's support team via live chat in your Account dashboard or in writing to [email protected]. winboc will respond to verified requests within 30 days. In certain circumstances, winboc may be unable to comply with a request — for example, where complying would conflict with a legal obligation — in which case winboc will explain the reasons for its inability to comply.

11. Children and Minors

The winboc Platform is strictly prohibited for persons under the age of 21. winboc does not knowingly collect or process personal data from minors. If winboc becomes aware that personal data has been collected from a person under the age of 21, that Account will be immediately closed, all activity will be voided, and the personal data will be deleted subject to any overriding legal retention obligations.

If you have reason to believe that a minor has created a winboc Account, please contact winboc support immediately via the live chat facility.

12. Changes to This Privacy Policy

winboc may update this Privacy Policy from time to time to reflect changes in its data handling practices, legal obligations, or the services offered on the Platform. The most current version of the Privacy Policy will always be published at winboc.app/privacy-policy with the effective date clearly marked.

Where changes are material, winboc will notify registered users via the contact details held on their Account before the changes take effect. Continued use of the Platform following notification constitutes acceptance of the updated Privacy Policy.

13. Contact and Data Enquiries

For questions or concerns about this Privacy Policy, to exercise your data subject rights, or to report a suspected data security incident, please contact winboc as follows:

• Live Chat: Available 24/7 via your winboc Account dashboard.
• Email: [email protected] (plain text — not a clickable link). winboc aims to respond to all written data enquiries within 30 calendar days.