Reference

How winboxmalay Handles Your Personal Data

When you open an account with winboxmalay and fund it through Touch 'n Go eWallet, Boost, or GrabPay, you share personal details with us — and this Privacy Policy explains exactly what we collect, why we collect it, and how we keep it secure.

Data collected only for account and payment purposesNo sale of personal data to third partiesSecure storage with access controlsYour right to request, correct or remove dataContact us directly to exercise your rights

Explore the Lobby Read FAQ

The Personal Data We Hold and How We Use It

winboxmalay Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

We collect the information you provide when registering your account — your name, contact details, and the payment method you connect, whether that is Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX. Transaction records are kept to process deposits and withdrawals accurately and to meet

1
any obligations under applicable law in the jurisdictions where access is permitted. We also collect device and session data — such as your browser type, IP address, and session timestamps — to keep your account secure and detect unusual login activity. Cookies and similar tools help
2
us remember your preferences and show you account-relevant content rather than generic pages. We do not sell, rent, or trade your personal data to external marketing parties. Third-party service providers — payment processors, identity verification partners, and platform infrastructure providers — receive only the minimum data
3
they need to perform their specific function. Your data is retained for as long as your account is active and for a further period required by applicable law; once that period ends, we delete or anonymise it. Access to your data within winboxmalay is restricted to
4
personnel with a clear operational need. If your personal data changes, updating it through your account settings keeps our records accurate and your payments — including Boost and GrabPay transactions — processing without delays.

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

HOW WE PROTECT YOUR ACCOUNT

Data Handling, Cookies, Security and Retention

We apply layered security practices across every stage your data moves through — from the moment you connect a payment method to the point where a withdrawal is confirmed back to your wallet. Here is how each area works in practice, so you are not left guessing.

Cookies and Tracking

We use session cookies to keep you logged in and analytics cookies to understand which account pages are visited most. You can manage cookie preferences through your browser settings at any time.

Account Security Practices

Login is protected by OTP verification sent to your registered mobile number. Unusual access attempts from new devices trigger an additional identity check before your account is accessible.

Data Retention Period

We keep your account data while your account is active. After closure, records are retained only for the period required under applicable law, then securely deleted or anonymised.

Requesting Changes or Deletion

Write to us via live chat or support email with your account username. We verify identity first, then process corrections or deletion requests in line with our legal retention obligations.

PRIVACY CONTACT PATHS

How to Reach Us About Your Privacy Rights

If you want to see what data we hold on you, request a correction, or ask us to delete your account information, reach out through any of the channels below. We respond to data-related queries as a priority — provide your registered account email and the nature of your request so we can locate your record quickly. Eligibility for certain requests may depend on local law and your account status at the time.

Live Chat Start a live chat session from the account page. Have your registered email ready. Our team will verify your identity before actioning any data request.

Email Support Send your privacy request to our support email address. Include your account username and describe your request clearly. We aim to acknowledge within one business day.

Account Settings Many data updates — including linked wallet details for Touch 'n Go eWallet or Boost — can be actioned directly inside your account settings without contacting support.

Privacy Policy — Questions We Get Asked Most

The questions below cover the points our account holders in Malaysia ask us most often about data, privacy rights, and how personal information moves through the platform. If your question is not here, live chat is the quickest way to get a direct answer.

We collect your name, email address, contact number, and the payment details you register — such as your Touch 'n Go eWallet or GrabPay account. Device and session data is also collected for security purposes.

We share data only with service providers who process your payments, verify your identity, or maintain platform infrastructure. Each partner receives only the data they need for their specific role — nothing more.

Yes. Contact us via live chat or support email with your registered account username. We verify your identity first, then provide a summary of the personal data we hold on your account.

You can update linked e-wallet details directly inside your account settings. For changes that affect your withdrawal path, our support team can walk you through the verification step required.

After account closure, we retain records for the period required by applicable law in permitted jurisdictions. Once that period lapses, data is deleted or anonymised and no longer accessible internally.

Your location within Malaysia does not change how we handle your data. The same collection, storage and deletion practices apply to all accounts. Access and eligibility depend on local law where you are located.

Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.

InfoLegal InfoHornbill Gold Slots InfoTerms & Conditions

How winboxmalay Handles Your Personal Data

Data Handling, Cookies, Security and Retention

Cookies and Tracking

Account Security Practices

Data Retention Period

Requesting Changes or Deletion

How to Reach Us About Your Privacy Rights

Privacy Policy — Questions We Get Asked Most

01 What personal data does winboxmalay collect when I open an account?

02 Does winboxmalay share my data with other companies?

03 Can I request a copy of the personal data winboxmalay holds on me?

04 How do I update my linked payment method, for example switching from Boost to GrabPay?

05 How long does winboxmalay keep my data after I close my account?

06 What happens to my data if I am based in Shah Alam or Johor Bahru — does location affect how my data is handled?

Privacy Policy

Related pages

Related pages