Welcome to the winboleh Privacy Policy page. We understand that your trust is the most valuable asset we must safeguard. This document is written in clear, plain language — free from confusing legal jargon — so you truly know what happens to your personal data when you use the winboleh platform.
This Privacy Policy applies to all registered members, website visitors, and any individuals who interact with the WinBoleh platform through our website, mobile app, or customer service channels.
1. Information We Collect
Winboleh only collects information that is strictly necessary to provide our members with quality, secure, and responsible services. We divide this information into two main categories:
Information You Provide Directly
When you register an account or use WinBoleh's services, you voluntarily provide the following information:
- Identity information: Full name as per MyKad or passport, date of birth, identification card number.
- Contact information: Email address, active mobile number, current residential address.
- Financial information: Bank account number, bank name, e-wallet account number (Touch 'n Go, GrabPay, Boost) for deposit and withdrawal processing.
- KYC verification documents: MyKad copy (both sides), utility bill or bank statement as proof of address.
- Communication information: Messages you send to our customer support team via live chat or email.
Automatically Collected Information
While you are using the winboleh platform, our systems automatically record certain technical information for security, performance analysis, and service improvement purposes:
| Data Type | Collection Purpose | Retention Period |
|---|---|---|
| IP address & general location | Fraud detection, regional compliance | 12 months |
| Session data & activity logs | Account security, internal audits | 6 months |
| Device type & browser | Platform optimisation, technical support | 6 months |
| Transaction history | Financial records, legal compliance | 7 years |
| Game data & wagering | Fraud detection, behavioural analytics | 24 months |
| Cookie data & platform preferences | Personalised experience, website performance | 90 days |
Winboleh does not collect sensitive information such as biometric data, health information, or political affiliation. All data collection is based on legitimate service requirements and complies with Malaysia's PDPA 2010.
2. How We Use Your Information
Every piece of information collected by winboleh has a clear and legitimate purpose. We do not use your data for anything unrelated to the services you use. The following are the primary purposes for which your information is used:
Account Management and Services
- Creating and managing your member account securely.
- Processing deposits, withdrawals, and other financial transactions swiftly and accurately.
- Verifying your identity during the KYC process to prevent fraud and misuse.
- Providing responsive and effective customer support whenever you need assistance.
Security & Compliance
- Detecting and preventing fraudulent activity, money laundering, or unauthorized access.
- Fulfilling legal and regulatory obligations related to platform operations.
- Conducting regular internal audits and risk assessments.
- Complying with instructions from legitimate Malaysian government authorities when required.
User Experience Enhancement
- Personalizing the interface and game recommendations based on your preferences.
- Analyzing usage patterns to improve platform performance and functionality.
- Sending relevant promotional information, bonuses, and platform updates — only with your consent.
Winboleh does not use your personal data to make automated decisions that materially affect your rights or interests without appropriate human oversight. Any decision affecting your account will be reviewed by our team.
3. Data Sharing and Disclosure
WinBoleh does not sell, does not rent, and does not commercialise members' personal data to any third party for marketing or profit purposes. However, there are certain situations where we may need to share your information with trusted parties:
Third-Party Service Providers
Winboleh works with carefully selected business partners to support platform operations. These parties have limited access to your data solely to fulfil their service functions, and are bound by strict confidentiality agreements:
- Payment processors: FPX, Touch 'n Go eWallet, GrabPay, Boost — to process your financial transactions.
- Licensed game providers: Licensed gaming companies that provide casino and betting content.
- Identity verification services: Third-party KYC providers to verify identity documents.
- Cloud infrastructure: Hosting and cybersecurity providers that store and protect data.
Legal Requirements
Winboleh may disclose member information to the relevant authorities when required by Malaysian law, including:
- Court orders or valid summons from law enforcement agencies.
- Official investigations related to fraud, money laundering, or financial crime.
- Compliance with directives from Bank Negara Malaysia or relevant regulatory bodies.
In all data sharing cases, WinBoleh ensures that only the minimum necessary information is disclosed. We also ensure that recipient parties have adequate security protections in place before any data is shared.
4. Data Security and Encryption
Member data security is an absolute priority at WinBoleh. Our platform implements multiple layers of security to ensure your personal information is always protected against unauthorized access, data breaches, or misuse.
Technical Security Measures
- TLS 1.3 (256-bit) encryption: All communications between your device and winboleh servers are encrypted to the highest industry standards.
- Hashed password storage: Your password is never stored in plain text — we use the bcrypt algorithm with a unique random salt for every account.
- Two-Factor Authentication (2FA): An additional security layer requiring verification via your mobile device every time you log in.
- 24/7 security monitoring: An automated threat detection system that monitors suspicious activity in real time.
- Regular security assessments: Security audits and penetration testing are conducted periodically by independent security experts.
Internal Access Controls
Access to members' personal data within the WinBoleh organisation is strictly governed on a need-to-know basis. All access is automatically logged and audited. WinBoleh staff who handle member data have undergone background checks and data protection training.
5. Cookies and Tracking Technologies
Winboleh uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
Types of Cookies We Use
- Essential Cookies: Required for core platform functions such as login session verification and security. Cannot be disabled.
- Preference Cookies: Saving your preferences such as language, theme, and display settings for a more comfortable experience.
- Analytics Cookies: Collecting anonymized usage data to help us understand how members use the platform and identify areas for improvement.
- Security Cookies: Helps detect suspicious login attempts and protects your account from unauthorized access.
You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of the WinBoleh platform.
6. Your Privacy Rights
As a winboleh member, you have privacy rights guaranteed under Malaysia's Personal Data Protection Act 2010 (PDPA). We fully respect and facilitate the exercise of these rights.