How We Protect Your Data
These highlights summarise our key privacy commitments. The full policy below is the authoritative document. All players should read it in its entirety.
All data transmitted between your device and the winblx platform is encrypted using 256-bit SSL technology — the same standard used by major financial institutions. Your login credentials, payment details, and personal information are never transmitted in plain text.
winblx does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data shared with service providers is strictly limited to what is necessary for them to deliver contracted services on our behalf.
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a request through our 24/7 support team and we will respond within the timeframes set out in this Policy.
Our data practices are designed to meet the standards required by our international operating licence, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and general data protection principles.
We do not keep your data indefinitely. Retention periods are tied to specific legal obligations — for example, transaction records required under AML regulations — and data is securely deleted once the applicable retention period expires.
We only send promotional communications — including bonus offers, event notifications, and newsletters — to players who have explicitly opted in. You may withdraw consent and unsubscribe at any time through your account settings or by contacting support.
1 Introduction
This Privacy Policy ("Policy") issued by winblx ("winblx", "we", "us", "our"), the operator of the online gaming platform accessible at winblx.cam (the "Platform"). It describes how we collect, use, store, share, and safeguard personal data relating to individuals who register for and use our Platform ("Player", "User", "you").
winblx operates an online casino and sports betting service designed primarily for adult players in Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions across the country. In providing this service, we process personal data as both a data controller — for data we determine the purpose and means of processing — and, in limited respects, as a data processor on behalf of our licensing authority.
By creating a Player Account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of our Terms and Conditions and should be read together with that document.
Our Commitment: winblx treats the protection of your personal data as a fundamental obligation — not a compliance checkbox. If you have any questions about how your data is used, our support team is available 24/7 to respond clearly and promptly.
2 Definitions
For the purposes of this Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, payment information, and online identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or any combination thereof. |
| "Data Controller" | The party that determines the purposes and means of processing Personal Data. winblx is the Data Controller in respect of all Player Personal Data processed under this Policy. |
| "Data Processor" | A third party that processes Personal Data on behalf of the Data Controller, pursuant to a written agreement that binds the processor to equivalent data protection standards. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose. |
| "KYC Data" | Identity verification documentation submitted by a Player, including government-issued identification, proof of address, and selfie photographs, collected for anti-money laundering and fraud prevention compliance. |
| "Cookies" | Small text files placed on a user's device by the Platform for session management, analytics, and personalisation purposes. |
3 Data We Collect
winblx collects Personal Data in the categories described below. We collect only the data that is necessary for the purposes described in Section 5 of this Policy.
When you create a Player Account, we collect: your full legal name, date of birth, email address, residential address (including city and postcode), mobile telephone number, and your chosen username. This information is necessary to establish your account and verify your eligibility.
As part of our Know Your Customer obligations, we collect copies of government-issued identification documents — such as your Malaysian National Identity Card (MyKad), Passport, or Driver's Licence — along with proof of residential address (such as a recent utility bill or bank statement issued within three months) and a selfie photograph holding your identification document.
We collect information about deposits and withdrawals, including the payment method used (e.g., Touch 'n Go eWallet, DuitNow, Maybank, CIMB Bank, GrabPay, Boost, or cryptocurrency wallet addresses), transaction amounts, timestamps, and reference numbers. We do not store full payment card numbers or e-wallet PINs on our servers.
We collect records of all wagers placed, games played, betting history, bonus usage, and account transaction logs. This data is used for account management, dispute resolution, responsible gambling monitoring, and regulatory reporting.
When you access the Platform, we automatically collect certain technical data including: your IP address, device type, operating system, browser type and version, session duration, and pages visited. This data is used for security, fraud prevention, and platform performance analytics.
We retain records of communications between you and our support team — including live chat transcripts, email correspondence, and WhatsApp message records — for quality assurance, dispute resolution, and regulatory compliance purposes.
4 How We Collect Personal Data
We collect Personal Data through the following channels:
- Directly from you — through account registration forms, KYC document submission, payment transactions, support communications, and any correspondence you initiate with us;
- Automatically — through cookies, tracking technologies, server logs, and device fingerprinting when you access the Platform;
- From third-party service providers — including KYC and identity verification partners, payment processors, and fraud prevention services, who may provide supplementary data to verify information you have given us; and
- From publicly available sources — where we are required to conduct enhanced due diligence in accordance with our AML obligations, we may consult publicly available registers or databases.
Note: winblx will never contact you to request your password, e-wallet PIN, or full payment card details. If you receive any such communication claiming to be from winblx, do not respond and report it to our support team immediately.
5 Purpose of Data Processing
winblx processes Personal Data for the following specific and lawful purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your Player Account; enabling login and authentication; managing account settings and preferences. |
| KYC & Eligibility Verification | Verifying your identity, age (21+), and eligibility to participate in gambling activities on the Platform, in compliance with licensing obligations. |
| Payment Processing | Processing deposits via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, GrabPay, Boost, Hong Leong Bank, and cryptocurrency; processing withdrawal requests to verified payment methods. |
| AML & Fraud Prevention | Monitoring transaction patterns, detecting suspicious activity, and fulfilling anti-money laundering and counter-terrorism financing obligations under applicable regulations. |
| Platform Optimisation | Analysing usage data to improve game performance, website load times, user interface design, and the overall player experience. |
| Customer Support | Responding to enquiries, resolving disputes, and maintaining communication records for quality assurance and regulatory purposes. |
| Responsible Gambling | Monitoring gaming patterns to identify potentially problematic behaviour; administering self-exclusion, deposit limits, and other player-protection tools. |
| Marketing (Consent Only) | Sending promotional offers, bonus notifications, and relevant communications to players who have explicitly opted in to receive them. |
| Legal & Regulatory Compliance | Retaining records as required by applicable licensing conditions, responding to lawful requests from regulatory or law enforcement authorities. |
6 Legal Basis for Processing
winblx processes Personal Data under one or more of the following legal bases, as applicable to each processing activity:
- Contractual Necessity: Processing required to perform our obligations under the Player Account agreement, including account administration, payment processing, and service delivery;
- Legal Obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering obligations, KYC requirements, and regulatory reporting duties under our operating licence;
- Legitimate Interests: Processing carried out in pursuit of our legitimate business interests, including fraud prevention, platform security, and analytics — provided those interests are not overridden by your fundamental rights and freedoms; and
- Consent: Processing for marketing and promotional communications, which is carried out only where you have given free and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
7 Data Sharing & Disclosure
winblx does not sell, rent, or disclose your Personal Data to third parties for commercial or marketing purposes. We may share your data with the following categories of recipients, strictly as required to deliver our services or comply with our legal obligations:
- Payment Processors: Malaysian payment service providers and gateway operators — including those facilitating Touch 'n Go eWallet, DuitNow/FPX, GrabPay, Boost, Maybank, CIMB Bank, Public Bank, and Hong Leong Bank transactions — receive the minimum data necessary to process deposit and withdrawal requests;
- KYC & Identity Verification Partners: Third-party verification services authorised to process identity documents and confirm player eligibility for anti-money laundering compliance;
- Game Software Providers: Licensed third-party game studios and platform providers who host games available on the winblx Platform. These providers receive only technical session data necessary to deliver the game experience and may process certain gameplay data under their own privacy frameworks;
- Regulatory Authorities: Our licensing authority and, where legally required, other competent regulatory or law enforcement bodies, who may request account data in connection with lawful investigations;
- IT & Cloud Infrastructure Providers: Hosting and server providers who store Platform data on our behalf under contractual data processing agreements that impose equivalent security obligations; and
- Professional Advisers: Legal, accounting, and auditing professionals bound by confidentiality obligations, where disclosure is necessary for the operation of our business.
All third parties with whom we share Personal Data are required to implement and maintain appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose other than that for which it was shared.
8 Cookies & Tracking Technologies
winblx uses cookies and similar tracking technologies to operate improve the Platform. When you access the Platform, cookies may be placed on your device for the following purposes:
- Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, load balancing cookies, and security tokens. These cookies cannot be disabled without impairing Platform functionality;
- Performance & Analytics Cookies: Used to collect aggregate, anonymised data about how players interact with the Platform — such as pages visited, session duration, and error events — to help us improve the user experience;
- Functional Cookies: Store your preferences — such as language selection and display settings — to personalise your experience on return visits; and
- Marketing Cookies (Consent Only): Used to deliver relevant promotional content to players who have opted in to marketing communications. These cookies are not set without your consent.
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality. For detailed cookie management instructions, consult your browser's help documentation.
Cookie Consent: Upon first accessing the Platform, you will be presented with a cookie consent notice. By continuing to use the Platform after this notice, you consent to the use of strictly necessary and functional cookies. Consent to marketing cookies is collected separately.
9 Data Retention
winblx retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as general guide:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Duration of account plus five (5) years following closure, in compliance with AML record-keeping requirements. |
| KYC Documents | Minimum five (5) years from submission date, as required under applicable anti-money laundering regulations. |
| Transaction Records | Seven (7) years from the date of the transaction, consistent with standard financial record-keeping obligations. |
| Gaming Activity Logs | Five (5) years from account closure or the date of the most recent activity, whichever is later. |
| Support Communications | Three (3) years from the date of the communication, or longer where the communication is relevant to an unresolved dispute. |
| Marketing Consent Records | Until consent is withdrawn, plus three (3) years thereafter as evidence of consent. |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in manner that makes re-identification impossible.
10 Data Security
winblx implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
- Encrypted storage of sensitive data, including KYC documents and payment records, using industry-standard encryption at rest;
- Access controls limiting staff access to Personal Data on a strict need-to-know basis, enforced through role-based permissions and multi-factor authentication;
- Regular security audits and penetration testing conducted by qualified third-party security specialists;
- Intrusion detection systems and real-time monitoring to detect and respond to potential security incidents; and
- Staff training on data protection obligations and security best practices, conducted at onboarding and refreshed annually.
In the event of a data breach that is likely to result in a high risk to affected individuals, winblx will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.
Your Role in Security: You are responsible for maintaining the confidentiality of your account credentials. Use a strong, unique password and enable two-factor authentication. Never share your login details with anyone, including individuals claiming to represent winblx.
11 Your Rights
Subject to applicable data protection law and the limitations imposed by our legal obligations, you have the following rights in relation to your Personal Data held by winblx:
You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
You may request correction of any inaccurate or incomplete Personal Data we hold about you.
You may request deletion of your Personal Data where we no longer have a lawful basis to retain it. This right is subject to our legal record-keeping obligations.
You may request a structured, machine-readable export of your Personal Data where technically feasible and legally permissible.
You may object to the processing of your Personal Data based on our legitimate interests, including processing for direct marketing purposes.
You may request that we restrict processing of your data in certain circumstances, such as while a rectification request is being assessed.
To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond within thirty (30) days of receiving your request. Where requests are complex or numerous, we may extend this period by a further thirty (30) days with notification to you.
Note that certain rights may be limited where processing is required to comply with a legal obligation or to establish, exercise, or defend legal claims.
12 Children's Privacy
winblx is strictly an adult platform. Access and participation are limited to individuals who are at least 21 years of age. We do not knowingly collect or process Personal Data from any person under the age of 21.
If we discover or have reason to believe that Personal Data has been collected from a person under the age of 21, we will immediately close the associated Player Account, refund any balance in accordance with our legal obligations, delete all associated Personal Data, and report the incident in accordance with applicable requirements.
Parents or guardians who have reason to believe that a minor has registered on the Platform should contact our support team immediately at [email protected].
13 International Data Transfers
In the course of providing our services, Personal Data may be transferred to and processed in countries outside Malaysia. This may occur in connection with our use of cloud hosting infrastructure, game software providers, or payment processing partners who operate server facilities in other jurisdictions.
Where such transfers occur, winblx takes reasonable steps to ensure that appropriate safeguards are in place — including contractual protections and technical security measures — so that your Personal Data receives a standard of protection consistent with the principles set out in this Policy. By using the Platform, you acknowledge and consent to such transfers.
14 Third-Party Services
The Platform may reference or integrate third-party services, such as payment gateways and game providers, each of which operates under its own privacy policy. winblx is not responsible for the privacy practices of such third parties and encourages you to review their policies separately.
winblx does not include external advertising links or third-party marketing trackers on the Platform. Any integration with a third-party service is for operational purposes only and is governed by a contractual data processing agreement.
15 Amendments to This Policy
winblx reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or business operations. The revised Policy will be published on this page with an updated "Last Updated" date.
Where amendments are material — meaning they significantly affect your rights or our data processing obligations — we will notify active players via email or an in-platform notification in advance of the changes taking effect. Continued use of the Platform after the effective date of any revised Policy constitutes acceptance of the updated terms.
We recommend that you review this page periodically. Archived versions of previous Privacy Policies are available on request from our support team.
16 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data, please contact our Data Protection team through any of the following channels:
Response: under 5 minutes
and Chinese agents
Please mark privacy-related enquiries clearly as"Privacy / Data Request" to ensure prompt routing to our Data Protection team.
Play onwinblx with
Complete Privacy Confidence
Every transaction, every game session, and every support interaction on winblx is handled with strict data protection standards. Your information stays yours.
For players aged21 and above only. Please gamble responsibly. Responsible Gambling | Terms & Conditions