Privacy Policy

1 Introduction

wbox88 ("we", "us", "our", "the Platform") operates the online casino, sports betting, and gaming services accessible at wbox88.cam. We are committed to protecting the privacy and personal data of every individual who interacts with our Platform, whether as a registered Member or as a visitor browsing our publicly accessible pages.

This Privacy Policy ("Policy") describes in detail what personal data wbox88 collects, the lawful bases upon which such data is processed, the purposes for which it is used, how long it is retained, with whom it may be shared, and what rights you hold in relation to your personal information. This Policy applies to all data processing activities conducted by wbox88 in connection with the delivery of its services to players based primarily in Malaysia and other permitted jurisdictions.

By registering an account, accessing the Platform, or using any service offered at wbox88.cam, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy. This Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the Platform.

2 Definitions

The following terms have the meanings set out below throughout this Policy:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, directly or in combination with other available data.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" means wbox88, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of and under the instruction of wbox88.
• "Member" / "You" means any individual who has registered an account on the wbox88 Platform.
• "Cookie" means a small text file placed on your device by the Platform to support session management, analytics, and performance functions.
• "KYC" means Know Your Customer — the identity verification process wbox88 applies to comply with applicable anti-money laundering requirements.
• "Sensitive Data" means data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or financial account credentials — categories subject to heightened protection under applicable privacy frameworks.

3 Personal Data We Collect

wbox88 collects personal data in the following categories depending on your interaction with the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your identity document
• Date of birth (used to verify you are aged 21 or above)
• Email address and mobile phone number
• Residential address (city, state, postcode, country — e.g., Kuala Lumpur, Penang, Johor Bahru)
• Chosen username and encrypted account password

3.2 KYC Verification Data

• Copy of government-issued identity document (MyKad, passport, or driver's licence)
• Proof of residential address (utility bill, bank statement — dated within 3 months)
• Selfie photograph for liveness verification (where required for high-value accounts)
• Source of funds documentation for enhanced due diligence cases

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, amounts, timestamps, and method used
• E-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay) — reference numbers only, not full account credentials
• Bank account details (bank name, last four digits of account number) for bank transfer verification
• Cryptocurrency wallet addresses (BTC, USDT) where applicable
• Winnings, losses, wagering history, and bonus utilisation records

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Browser type, version, and operating system
• Device identifiers and screen resolution
• Session timestamps, pages visited, game titles played, and bet history
• Referral URL and marketing attribution tokens (where applicable)

3.5 Communications Data

• Content of live chat conversations with our support team
• Email correspondence records
• Complaint submissions and their resolution history
• Feedback and survey responses where voluntarily submitted

4 How We Collect Your Data

wbox88 collects personal data through the following channels:

• Directly from you — when you register, complete KYC, make a deposit or withdrawal, contact support, or submit a complaint;
• Automatically — when you access and use the Platform, through server logs, cookies, and similar tracking technologies;
• From payment processors — transaction confirmation data received from Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and other Malaysian payment partners;
• From identity verification providers — document validation results returned by our third-party KYC service providers; and
• From fraud detection systems — signals generated by automated risk-scoring tools that monitor for suspicious account behaviour.

5 Purposes of Data Processing

wbox88 processes your personal data for the following specific purposes:

6 Legal Basis for Processing

wbox88 processes personal data on the following lawful grounds:

• Contractual necessity: Processing required to perform the Member agreement — account creation, bet settlement, deposit and withdrawal processing, and bonus fulfilment.
• Legal obligation: Processing required to comply with applicable anti-money laundering, Know Your Customer, age verification, and regulatory reporting obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by your privacy rights.
• Consent: Processing for optional communications, marketing preferences, or non-essential analytics where we have obtained your explicit prior consent. You may withdraw consent at any time by contacting support.

7 Sharing of Personal Data

wbox88 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. We may share personal data with the following categories of recipients, strictly to the extent necessary for the specified purpose:

• Payment processors and e-wallet operators — Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and crypto payment networks — to process and verify transactions;
• KYC and identity verification providers — third-party services that validate identity documents and conduct liveness checks on behalf of wbox88;
• Fraud prevention and AML screening services — automated systems that cross-reference account data against risk indicators and sanctions lists;
• Responsible gambling support providers — systems that facilitate self-exclusion registries or player protection monitoring;
• Cloud infrastructure and hosting providers — data centre and storage partners who maintain the physical infrastructure on which Platform data resides, under binding data processing agreements; and
• Regulatory authorities and law enforcement — where disclosure is required by applicable law, court order, or a legitimate regulatory request.

8 Data Retention

wbox88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the Member's active account plus a minimum of five (5) years following account closure, in accordance with applicable anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with applicable financial record-keeping regulations.
• KYC documentation: Retained for five (5) years following the completion of a business relationship or the last verified transaction, whichever is later.
• Support and communications records: Retained for three (3) years from the date of the last interaction or the resolution of any related dispute, whichever is later.
• Technical and usage logs: Retained for up to twelve (12) months unless retention is extended for security incident investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

9 Security Measures

wbox88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the wbox88 Platform;
• AES-256 encryption applied to personal data stored in wbox88 databases at rest;
• Two-factor authentication (2FA) available for all Member accounts;
• Role-based access controls restricting database and system access to authorised personnel only;
• Regular security vulnerability assessments and penetration testing conducted by qualified third-party security specialists;
• Automated intrusion detection and anomaly monitoring systems operating continuously; and
• Formal information security policies, staff privacy training, and documented incident response procedures.

While wbox88 takes all reasonable precautions to protect your data, no electronic transmission or storage technology is completely infallible. Members are encouraged to use a strong, unique password for their wbox88 account and to enable two-factor authentication.

10 Cookies & Tracking Technologies

wbox88 uses cookies and similar technologies to provide a functional and personalised experience on the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential to the operation of the Platform — maintaining your logged-in session state, remembering your preferred language, and enabling secure page transitions. These cookies cannot be disabled without impairing core Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised, aggregated data about how Members navigate the Platform — pages visited, time on page, and device type — to inform performance improvements. Individual users are not identified.
• Functional Cookies: Remember your Platform preferences such as display settings, game categories, and deposit method defaults to personalise your experience.

wbox88 does not deploy third-party advertising cookies or permit external advertising networks to track your behaviour across the internet via the Platform.

11 International Data Transfers

wbox88 primarily stores and processes personal data within data centres serving the Southeast Asian region. In certain circumstances — for example, where a specialist KYC verification provider or fraud detection service operates infrastructure outside Malaysia — personal data may be transferred to and processed in jurisdictions other than Malaysia.

Where such international transfers occur, wbox88 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections applied within Malaysia. These safeguards include binding contractual clauses, data processing agreements, and, where applicable, reliance on adequacy decisions or equivalent regulatory frameworks.

By using the wbox88 Platform, you acknowledge and consent to the transfer of your personal data to our service providers in jurisdictions outside Malaysia where necessary for the delivery of the services described in this Policy.

12 Your Data Rights

As a Member of wbox88, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Privacy team at [email protected] with the subject line "Data Rights Request". We will acknowledge all requests within five (5) business days and aim to resolve them within thirty (30) calendar days.

13 Data of Minors

The wbox88 Platform is strictly intended for individuals aged 21 years and above. wbox88 does not knowingly collect personal data from individuals below this minimum age. If you are under 21, you are not permitted to register or use the Platform under any circumstances.

wbox88 employs age verification as part of its registration and KYC processes to prevent access by minors. If wbox88 discovers that personal data has been collected from an individual who was under 21 at the time of registration, the account will be immediately suspended, all associated data will be deleted to the extent legally permitted, and any deposits will be returned via the original payment method.

Parents or guardians who believe their child may have registered on the Platform should contact our support team immediately at [email protected].

14 Third-Party Links & Services

The wbox88 Platform may, on occasion, reference or link to third-party game providers, payment processors, or informational resources. This Policy applies exclusively to personal data processed by wbox88 and does not extend to data processing practices of any third-party website, application, or service.

wbox88 recommends that Members review the privacy policies of any third-party services they interact with independently. wbox88 accepts no responsibility for the data practices of external parties, even where those parties are integrated into the wbox88 Platform experience (such as live game providers or payment gateways).

15 Changes to This Privacy Policy

wbox88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the services we offer. The effective date at the top of this page will be updated whenever a revision is published.

For material changes that significantly affect your rights or how we process your data, wbox88 will provide notice via a Platform announcement displayed to logged-in Members for a minimum of 14 calendar days prior to the change taking effect. For minor or clarifying amendments, the revised Policy will be published without specific notice, and continued use of the Platform will constitute acceptance.

We encourage Members to review this Policy periodically to remain informed of current data practices.

16 Contact Us — Data Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or wbox88's handling of your personal data, please contact our Data Privacy team using the following channels:

• Email: [email protected] — use subject line "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 on wbox88.cam — average first response under 3 minutes
• Response Commitment: All data privacy requests acknowledged within 5 business days; resolved within 30 calendar days (GMT+8, Malaysia Standard Time)

For complaints that remain unresolved following wbox88's internal review process, you may escalate the matter to the relevant data protection authority under applicable local or international privacy law.