Winbox01 Privacy Policy – Data & Personal Information Protection

Winbox01 understands that your trust is our most valuable asset. When you register and use our platform, you entrust us with your personal information — and we do not take that responsibility lightly.

This Privacy Policy is established to clearly and transparently explain how winbox01 handle your personal data from the moment of registration through every interaction you have with our platform. We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international data protection standards.

By using the Winbox01 platform, you agree to the data collection and usage practices described in this Privacy Policy. If you disagree with any part of this policy, you are advised not to use our platform and to contact us to close your account.

Winbox01 collects your personal information only when strictly necessary to provide a safe, seamless and high-quality service. Below are the categories of data we collect:

We do not collect sensitive data such as medical information, religious beliefs, or political views. Your credit or debit card details are not stored in our systems — all payments are processed through PCI-DSS certified third-party payment gateways.

Every piece of data we collect has a clear purpose and is used responsibly. winbox01 uses your personal information for the following purposes:

• Account management – registering, verifying and maintaining your account securely.
• Transaction processing – ensuring your deposits and withdrawals are processed accurately and on time.
• Identity verification (KYC) – meeting legal compliance requirements and preventing fraud.
• Customer support – resolving inquiries, complaints and technical issues you report.
• Platform improvement – analyzing usage patterns to improve the overall member experience.
• Marketing communications – sending offers, promotions and the latest updates (subject to your consent).
• Security & fraud prevention – monitoring suspicious activity and protecting all members.

We process data on a lawful legal basis — whether to fulfil a contract, comply with legal obligations, pursue legitimate interests, or based on your freely given consent.

Winbox01 maintains a strict policy against sharing members' personal data. We does not sell, does not rent and does not disclose your personal information to third parties for commercial purposes. However, there are limited situations where data sharing is necessary:

• Contracted service providers – such as payment service providers, cloud infrastructure providers and customer support platforms operating on our behalf under strict confidentiality agreements.
• Legal requirements – when required by a court, regulatory body or law enforcement agency through lawful legal process.
• Fraud prevention – sharing the minimum necessary information with security partners to detect and prevent illegal activity.
• Business transfers – in the event of a merger or acquisition, members will be notified in advance.

Protecting your personal data is winbox01's top priority. We continuously invest in the latest security technologies and procedures to keep your data safe at all times.

• 256-bit SSL/TLS encryption – all data transmitted between your device and our servers is fully encrypted.
• Data encryption at rest – data stored in our databases is protected with AES-256 encryption.
• Two-factor authentication (2FA) – an additional security layer to protect your account from unauthorized access.
• 24/7 security monitoring – our security team continuously monitors systems to detect threats and suspicious activity.
• Regular security audits – we conduct regular penetration testing and security audits by independent experts.
• Internal access controls – staff may only access data necessary to perform their specific duties.

Under Malaysia's Personal Data Protection Act (PDPA), you have certain rights regarding your personal data that we hold. Winbox01 respects and facilitates the exercise of the following rights:

• Right to access – you may request a copy of the personal data we hold about you.
• Right to rectification – you may request that we correct any inaccurate or incomplete data.
• Right to erasure – you may request deletion of your personal data under certain conditions, subject to our legal obligations.
• Right to restrict processing – you may request that we restrict how we process your data in certain circumstances.
• Right to withdraw consent – you may withdraw consent for marketing communications at any time.
• Right to lodge a complaint – you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection if you believe your rights have been violated.

To exercise any of the above rights, please contact the winbox01 customer support team via Live Chat on the platform or our official email. We will process your request within 14 business days after receiving a complete request.

Platform winbox01 use cookies and similar tracking technologies to enhance the user experience, ensure security and understand how our platform is used. Cookies are small text files stored on your device when you visit our website.

• Essential cookies – required for core platform functions such as login session verification and security. Cannot be disabled.
• Performance cookies – helping us understand how users interact with the platform for improvement purposes.
• Functional cookies – saving your preferences such as language and display settings for your convenience.
• Marketing cookies – used to display relevant promotions to you (requires your consent).

You can control cookie usage through your web browser settings. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help documentation.

Winbox01 does not retain your personal data longer than necessary. Data retention periods are determined based on operational requirements, legal obligations and the original purpose for which the data was collected.

• Active account data – retained for the duration your account is active plus 5 years after account closure (PDPA requirement).
• Financial transaction records – retained for 7 years as required by anti-money laundering law (AMLA).
• KYC Documents – retained for a minimum of 5 years after the business relationship ends.
• Support communication logs – retained for 2 years for reference and dispute resolution.
• Technical log data – retained for 90 days for security and investigation purposes.

In some cases, your personal data may be transferred to and processed outside Malaysia — for example, when we use cloud services or technical infrastructure operating across multiple countries. When this occurs, winbox01 ensure that protection equivalent to Malaysia's PDPA continues to apply.

Steps we take to protect data in cross-border transfers include:

• Using third-party services that comply with internationally recognised security standards.
• Ensuring comprehensive data processing agreements are signed with all third-party providers.
• Limiting data transfers to only what is strictly necessary to deliver our services.

If you have any questions, concerns, or wish to exercise your privacy rights, the winbox01 ready to assist you. We take every privacy-related inquiry seriously and will respond promptly and thoroughly.

You may reach us through the following channels:

• Live Chat 24/7 – the fastest way to get immediate assistance within our platform.
• Privacy Email: [email protected] – for personal data requests requiring identity verification.
• Support Email: [email protected] – for general inquiries related to privacy and account security.

We will endeavour to respond to all privacy-related enquiries within 7 business days. For more complex requests such as data access or data deletion, the full process may take up to 14 business days.