Updated: January 2026

Privacy Policy Winbook – Malaysia Player Data Protection

Winbook cares about your privacy. This page explains in detail how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Our Privacy Commitment
Your data is protected with 256-bit SSL encryption
No sale of personal data to third parties
Full compliance with Malaysia PDPA
Player rights to access, correct & delete data
Secure servers with 24/7 threat monitoring
Transparent and configurable cookie controls

Layers of Protection winbook Data

Player data security is not just a promise — it is at the core of every system and process we build at Winbook.

End-to-End Encryption

All data transmitted between your device and Winbook servers is protected using 256-bit SSL encryption — the same technology used by leading banks in Malaysia.

Secure KYC Verification

Our KYC (Know Your Customer) process uses an encrypted identity verification system. Documents you upload are stored in a restricted-access server environment and are not shared with any external parties.

No Data Sales

Winbook has never and will never sell, rent, or commercialize players' personal data to any third party for marketing or other business purposes without your explicit consent.

24/7 Threat Monitoring

Our automated security system monitors for any suspicious activity at all times. If an anomaly is detected, your account will be protected immediately and you will be notified via email or SMS.

Secure Data Storage

Personal data is stored on servers equipped with multi-layered firewalls, strict access controls, and regular backups. Only authorised personnel with a legitimate business need may access your data.

Malaysia PDPA Compliance

The winbook Privacy Policy is built in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the full right to access, correct, and request the deletion of your data at any time.


This Privacy Policy describes winbook's personal data processing practices. It applies to all players using the winbook platform via the website or mobile app. By registering or continuing to use the platform, you agree to the terms of this Privacy Policy.

1Introduction

Winbook is an online entertainment platform committed to safeguarding every player's privacy to the highest standard. We understand that personal data is a trust placed in us, and we do not take this responsibility lightly.

This Privacy Policy clearly outlines what data we collect, why we need it, how we use it, and who may access it. We also explain your rights as a player and how to exercise those rights when needed. This document should be read together with the Terms & Conditions Winbook.

If you have any questions after reading this policy, don't hesitate to contact our support team, available 24 hours a day via live chat in the app.

2Personal Data We Collect

We only collect data that is strictly necessary to provide winbook's services safely and efficiently. The data we collect can be grouped into several categories:

Data You Provide Directly

  • Registration information: Full name, date of birth, phone number, email address and password (stored in hashed form).
  • Financial information: Bank account number, account name and payment methods used for deposits or withdrawals.
  • KYC documents: Copies of your national ID, passport or other identity documents uploaded for identity verification.
  • Support information: Any information you share when contacting our customer support team.

Automatically Collected Data

  • Technical data: IP address, browser type, operating system, screen resolution and device information.
  • Usage data: Games played, session duration, betting history and platform usage patterns.
  • Location data: General location based on IP address to ensure compliance with local laws.
  • Cookie data: Session cookies, preference cookies and analytics cookies that help us improve the user experience.
Winbook does not collect credit card numbers directly. All transactions are processed through third-party payment providers that maintain their own PCI-DSS security standards.
Data Type Purpose of Collection Retention Period
Identity Information Account verification & legal compliance Throughout the active account period + 5 years
Financial Information Deposit & Withdrawal Processing 7 years (financial audit requirement)
Game Data Transaction Verification & Customer Support 3 years after account closure
Technical Data Platform Security & Improvements 12 months rolling
KYC Documents AML Compliance & Identity Verification 5 years after account closure

3How We Use Your Data

Every use of your personal data at Winbook has a clear and lawful purpose. We do not use your data for purposes unrelated to the provision of platform services.

  • Account management: Creating, verifying and maintaining your player account.
  • Transaction processing: Processing deposits, withdrawals and all financial transactions securely.
  • Legal compliance: Meeting KYC, AML (Anti-Money Laundering) and applicable gambling regulation requirements.
  • Customer support: Enables our support team to assist in resolving any account or technical issues.
  • Platform security: Detecting and preventing fraud, account abuse and illegal activity.
  • Service improvements: Analysing usage patterns to improve the gaming experience and platform interface.
  • Important communications: Sending account-related notices, policy updates and important security information.
  • Relevant promotions: Sending relevant bonus offers and promotions based on your gaming preferences, subject to your consent.

4Data Sharing with Third Parties

Winbook does not sell or rent your personal data to any party. However, there are certain situations where we need to share information with trusted third parties to enable our services to function properly:

Authorised Service Providers

We work with third-party service providers who act on our instructions and are bound by strict data protection agreements. These include payment processors (FPX, DuitNow, Touch 'n Go), identity verification service providers, secure server infrastructure providers, and internal analytics platforms.

Legal Requirements

Under certain circumstances required by Malaysian law, we may need to disclose information to authorities such as the Royal Malaysia Police, Bank Negara Malaysia, the Financial Intelligence Unit (FIU), or a court of competent jurisdiction.

Any data sharing with authorities is carried out solely on the basis of legal necessity and not at Winbook's voluntary initiative. We will notify you should such a request arise, unless we are prohibited from doing so by a court order.

5Data Security

We implement a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

  • 256-bit SSL/TLS encryption for all data transmitted over the network.
  • Encryption of data stored in databases using the AES-256 algorithm.
  • Role-based access controls — only personnel with a legitimate business need may access specific data.
  • Two-factor authentication (2FA) for all staff access to internal systems.
  • Regular security audits conducted by qualified independent third parties.
  • Real-time threat monitoring using intrusion detection systems (IDS).
  • A clear incident response plan in the event of any data breach.

While we work hard to protect your data, no security system is 100% perfect. We therefore also encourage you to take personal security measures such as using a strong password, enabling 2FA on your Winbook account, and not sharing your login credentials with anyone.

6Cookies & Tracking Technologies

Winbook uses cookies and similar tracking technologies to enhance the user experience and analyze platform usage. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
  • Functional Cookies: Saving your preferences such as language and display settings for a smoother return experience.
  • Analytics Cookies: Helps us understand how players interact with the platform so we can make meaningful improvements.
  • Performance Cookies: Optimising page load speeds and quickly identifying any technical issues.

You can manage and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the winbook platform.

7Your Rights as a Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and winbook's internal policies, you have the following rights regarding your personal data:

Right of Access

You may request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request that we correct any inaccurate or outdated data.

Right to Erasure

You may request the deletion of your data, subject to legal obligations that require us to retain it.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Restrict Processing

You may request that we restrict the processing of your data under certain circumstances.

To exercise any of the above rights, contact the Winbook customer support team via live chat in the app or email us at [email protected]. We will process your request within 14 business days.

8Data Retention Period

Winbook only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Generally:

  • Active account data is retained for as long as your account remains active on the winbook platform.
  • Following account closure, identity and financial data are retained for a minimum of five to seven years to meet audit and AML requirements.
  • Technical log data is retained for 12 months on a rolling basis before being automatically deleted.
  • Customer support communication records are retained for three years for historical reference and training purposes.

Once the specified retention period has elapsed, your personal data will be securely deleted or anonymized using methods that ensure it can no longer be linked back to you.

9Changes to This Privacy Policy

Winbook reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform improvements. Any material changes will be communicated to you via your registered email or a notice on the platform at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the date of the latest version of this Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

10Contact Us for Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the Winbook Data Protection Officer (DPO):

  • Email: [email protected]
  • Live Chat: Available 24/7 via the Winbook app or official website
  • Response time: Within 3 business days for written enquiries

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Multimedia.

This Privacy Policy forms part of the binding agreement between you and winbook. Please also read the Terms & Conditions and Responsible Gaming Guide us for a full overview of your rights and responsibilities as a Winbook player.

Your Data Is Safe. Play with Full Confidence.

Your privacy is our priority. Register now and enjoy a safe, fair and enjoyable gaming experience with over 500,000 Malaysian players who already trust Winbook.

By registering, you agree to the Terms & Conditions and the Winbook Privacy Policy. Our platform is fully compliant with Malaysia's PDPA. Please practise responsible gaming.
Bahasa Melayu