At Winnox, your privacy is a core commitment — not a checkbox. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is used and stored, who it may be shared with, and what rights you hold as a player on our platform.
This Privacy Policy ("Policy") is issued by Winnox ("Winnox", "We", "Us", "Our"), the operator of the online gaming platform accessible at https://winnox.cam ("Platform"). This Policy applies to all natural persons ("Player", "User", "You") who access, register on, or otherwise interact with the Platform, whether as a registered account holder or as an unregistered visitor.
Winnox is an English-language online gaming platform designed principally for players residing in Malaysia. We process personal data in connection with the registration, operation, and maintenance of player accounts; the facilitation of deposits and withdrawals via Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank; the provision of gaming services; and the fulfilment of our legal and regulatory obligations.
We are committed to handling your personal data lawfully, fairly, and transparently. We collect only the data that is necessary for the purposes described in this Policy, and we do not sell your personal information to third parties for commercial marketing purposes.
Your Consent: By registering an account on the Platform or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identity document number, date of birth, email address, telephone number, payment details, device identifiers, and IP addresses. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | Winnox, as the entity that determines the purposes and means of Processing Personal Data collected via the Platform. |
| "Third-Party Processor" | A service provider engaged by Winnox to process Personal Data on our behalf under a written data processing agreement, such as payment processors, KYC verification providers, and fraud prevention services. |
| "Cookies" | Small text files placed on your device by the Platform's web server, used to maintain session state, remember preferences, and facilitate analytics. |
| "KYC" | Know Your Customer — the identity verification process required by Winnox prior to authorising certain account actions, in accordance with applicable anti-money laundering regulations. |
Winnox collects Personal Data through several channels depending on how you interact with the Platform. The categories of data we collect are described below.
3.1 Registration Data
When you create an account on the Platform, we collect the following information: full legal name, date of birth, nationality, residential address (including city and postcode), email address, and a chosen username. This data is required to establish your identity, verify your eligibility to register, and create your player account.
3.2 Identity Verification (KYC) Data
To comply with applicable anti-money laundering and counter-terrorism financing obligations, and to process withdrawals above designated thresholds, Winnox may request copies of: a valid government-issued photo identity document (such as a Malaysian MyKad or passport), proof of residential address (such as a utility bill or bank statement issued within the last three months), and, where applicable, source-of-funds documentation. This data is shared only with our licensed KYC verification service providers.
3.3 Financial Transaction Data
When you make deposits or withdrawals on the Platform using methods such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, or Public Bank, we collect transaction records including the payment method used, transaction reference number, transaction amount in MYR, and the date and time of each transaction. We do not store full payment card numbers or banking credentials — these are handled directly by your payment provider under their own security standards.
3.4 Technical and Usage Data
When you access the Platform, our servers automatically collect certain technical data, including: your IP address, browser type and version, device type and operating system, referring URL, pages visited within the Platform, time and duration of visits, and in-game activity records. This data is used to maintain platform security, optimise user experience, and detect fraudulent or abnormal behaviour patterns.
3.5 Communications Data
If you contact Winnox via live chat, email ([email protected]), or any other communication channel, we retain records of those communications, including the content of messages, the date and time of contact, and any documents provided. This data is used to resolve your enquiry and to maintain a record for quality assurance and dispute resolution purposes.
3.6 Voluntary Data
You may choose to provide additional information, such as gaming preferences or feedback. Providing such information is entirely optional and will not affect your access to the Platform's core services.
Winnox processes your Personal Data for the following specific purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your player account, including processing login requests, account settings changes, and player tier management. |
| Payment Processing | Facilitating deposits and withdrawals in MYR via all supported Malaysian payment methods, and maintaining an accurate record of financial transactions. |
| Identity Verification | Conducting KYC checks to verify your identity and eligibility to use the Platform, in compliance with applicable anti-money laundering regulations. |
| Legal & Regulatory Compliance | Meeting our obligations under applicable laws, including the provision of transaction records to regulatory authorities upon lawful request. |
| Fraud & Security | Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms and Conditions. |
| Customer Support | Responding to player enquiries, complaints, and support requests submitted via live chat, email, or any other communication channel. |
| Responsible Gambling | Administering deposit limits, self-exclusion requests, and player protection tools in accordance with our Responsible Gambling Policy. |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve Platform performance, game availability, and the overall player experience. |
| Marketing Communications | Sending promotional offers and bonus notifications to Players who have opted in to receive such communications. You may withdraw consent at any time via your account settings. |
Winnox processes your Personal Data on one or more of the following legal bases, depending on the specific Processing activity:
Winnox does not sell, rent, or commercially trade your Personal Data. We may share your data with the following categories of third parties, strictly as required for the purposes described in this Policy:
All Third-Party Processors engaged by Winnox are required to process Personal Data only on our documented instructions, to maintain appropriate security standards, and to comply with applicable data protection obligations. We do not permit Third-Party Processors to use your data for their own independent purposes.
No Sale of Data: Winnox does not sell, lease, or otherwise commercially transfer your Personal Data to third-party advertisers, data brokers, or unaffiliated organisations for their own marketing or commercial purposes.
Winnox retains your Personal Data for the period necessary to fulfil the purposes for which it was collected, and for as long as required to comply with applicable legal, regulatory, and audit obligations.
As a general guideline, the following retention periods apply:
Upon the expiry of applicable retention periods, Personal Data will be securely deleted or anonymised in accordance with our internal data lifecycle procedures.
Winnox implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:
While Winnox takes all reasonable steps to protect your Personal Data, no method of electronic transmission or storage is entirely infallible. In the unlikely event of a security breach that is likely to result in a high risk to your rights and freedoms, Winnox will notify you and, where required, the relevant regulatory authority in accordance with applicable legal requirements.
Your Security Responsibility: You are responsible for maintaining the confidentiality of your account credentials. Do not share your password with any third party. If you believe your account has been compromised, please contact us immediately at [email protected].
The Winnox Platform uses Cookies and similar tracking technologies to maintain session integrity, remember your preferences, enable security features, and analyse Platform usage. The categories of Cookies used are described below:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Essential for the Platform to function correctly, including session management, security tokens, and authentication. Cannot be disabled without materially impairing Platform functionality. | No |
| Functional | Remember your language preferences, display settings, and other personalisation choices to improve your experience on return visits. | Yes |
| Analytics | Collect aggregated, anonymised data about how visitors interact with the Platform, used to identify areas for improvement and optimise performance. | Yes |
| Security / Fraud | Assist in detecting suspicious activity, bot traffic, and attempts to exploit the Platform, contributing to the integrity and safety of the gaming environment. | No |
You may manage your Cookie preferences at any time via your browser settings. Most browsers allow you to refuse all or certain categories of Cookies. Please note that disabling strictly necessary Cookies may prevent you from accessing certain features of the Platform.
Subject to applicable data protection law and certain lawful limitations, you have the following rights with respect to your Personal Data held by Winnox:
To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 48 hours and respond substantively within 30 calendar days. We may require you to verify your identity before processing your request in order to protect against unauthorised disclosure.
Please Note: Certain rights are subject to lawful exceptions. For example, we may be unable to delete your Personal Data where retention is required by anti-money laundering law or where the data is necessary to defend a legal claim. We will inform you of any applicable limitations when responding to your request.
The Winnox Platform is strictly intended for players aged 21 years and above. We do not knowingly collect, process, or store Personal Data relating to persons under the age of 21. Account registration by individuals under 21 years of age is strictly prohibited.
If Winnox becomes aware that Personal Data has been collected from a person under 21 years of age, we will take immediate steps to delete that data, close the relevant account, and return any deposited funds, subject to applicable verification procedures. Any winnings accrued on such an account may be forfeited.
If you believe that a minor has registered an account or provided Personal Data on the Platform, please notify us immediately at [email protected].
In the course of providing our services, your Personal Data may be transferred to, stored in, or processed by systems located outside of Malaysia — for example, where we engage cloud infrastructure providers or Third-Party Processors operating internationally.
Where such international transfers occur, Winnox takes appropriate safeguards to ensure that your Personal Data receives an equivalent level of protection to that which it would receive within Malaysia, including through the use of contractual data transfer mechanisms and requirements imposed on Third-Party Processors operating in other jurisdictions.
Where you have consented to the transfer, or where the transfer is necessary to perform a contract with you or to take steps at your request prior to entering into a contract, such transfers are carried out on that basis in accordance with applicable data protection requirements.
Winnox reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.
Where a material change is made to this Policy — for example, a change to the categories of data we collect or the parties with whom we share data — Winnox will provide reasonable advance notice to registered Players via email or an in-platform notification.
Your continued use of the Platform following publication of a revised Policy constitutes acceptance of the amended terms. If you do not agree with the revised Policy, you must cease using the Platform and may request voluntary account closure in accordance with the Terms and Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or the Processing of your Personal Data by Winnox, please contact us through any of the following channels:
We will acknowledge all privacy-related correspondence within 48 hours and aim to provide a substantive response within 30 calendar days. For complex requests, we may require additional time, in which case we will notify you of the extended timeline.
Data Subject Requests: To exercise any of your data protection rights as described in Section 10, please email us at [email protected] with your full name, registered email address, and a clear description of your request. Identity verification will be required before we can fulfil any access, rectification, or erasure request.
All data transmitted between your device and the Winnox platform is protected by industry-standard 256-bit TLS encryption. Your data in transit is always secured.
Winnox does not sell, rent, or commercially transfer your personal information to third-party advertisers or data brokers, ever. Your data belongs to you.
Access, correct, export, or request deletion of your data at any time. Submit a written request to our support team and we'll respond within 30 days.
We collect only the data that is strictly necessary to operate your account, process your transactions, and meet our legal obligations. No unnecessary collection.
All data processing activities are conducted in compliance with applicable anti-money laundering laws, identity verification requirements, and data protection standards.
We do not knowingly collect data from persons under 21. If we discover underage data has been collected, it is deleted immediately and the account is closed.
Your data is protected, your rights are respected, and our team is available 24/7 to answer any privacy-related questions. Explore the full platform or check our FAQ for more details.