This Privacy Policy explains how winboc may collect, use, disclose, secure and retain personal information when Malaysian adults browse the website or use available account-related services.
Effective date: 1 January 2026
winboc recognises that privacy is particularly important when a service involves identity checks, MYR transactions and responsible gambling controls. The following principles guide how information should be handled.
winboc aims to collect information for defined purposes, including account administration, age verification, fraud prevention, payment processing and service security. Personal information should not be used incompatibly with those stated purposes.
Only information reasonably needed to provide, secure or improve winboc services should be requested. Verification requirements may vary according to the account activity, payment method and level of risk identified.
This winboc Privacy Policy uses direct English suited to Malaysian users. Material privacy changes should be communicated through an appropriate website or account notice before they take effect where reasonably possible.
Administrative and technical safeguards are intended to reduce unauthorised access, loss or misuse. No internet service can promise absolute security, so users must also protect passwords and one-time verification codes.
winboc should retain personal information only while it remains necessary for the relevant purpose, legal obligation, dispute, security review or responsible gambling restriction.
Subject to applicable requirements, users may ask to access or correct their information and may object to selected marketing uses. Certain records cannot be erased immediately where retention is legally or operationally required.
This Privacy Policy applies to the winboc website at https://winboc.cam and to personal information processed in connection with services made available through the website. It should be read together with the winboc Terms & Conditions and any privacy notice displayed when specific information is requested.
In this Policy, “personal information” means information that identifies an individual or can reasonably be connected with an identifiable person. Examples include a full name, contact details, Malaysian identity document, transaction history, device identifier and account activity. Information that has been irreversibly anonymised so that it cannot reasonably identify an individual is not treated as personal information.
By using winboc, you acknowledge that your information may be handled as described in this Policy. Where consent is legally required for a particular activity, winboc should request that consent separately. Refusing optional processing does not remove obligations that arise from essential security, verification or account administration requirements.
The information collected by winboc depends on how a person uses the website. A visitor reading sports betting information may provide less information than a verified account holder making an MYR payment. Relevant categories may include:
| Category | Typical Information | Common Purpose |
|---|---|---|
| Identity data | Full name, date of birth, nationality and details from a MyKad, driving licence or passport. | Age checks, KYC verification, fraud prevention and account security. |
| Contact data | Email address, residential address and communication preferences. | Service notices, account support and requested communications. |
| Financial data | Payment method, masked account details, transaction reference and MYR deposit or withdrawal history. | Processing payments, reconciling transactions and investigating disputes. |
| Technical data | IP address, browser type, device details, approximate location, timestamps and security logs. | Website operation, security monitoring and misuse prevention. |
| Usage data | Pages viewed, navigation events, selected settings and interaction records. | Service improvement, troubleshooting and relevant content presentation. |
| Responsible play data | Deposit limits, self-exclusion status, session controls and related support communications. | Applying player-protection measures and preventing restricted access. |
winboc does not need your complete online banking password, e-wallet PIN or one-time password. Never disclose these credentials to anyone claiming to represent winboc.
Information may be collected directly when a user creates or updates an account, submits KYC documentation, selects a payment method, communicates with support, sets responsible gambling limits or otherwise provides details to winboc. Users are responsible for ensuring that submitted information is accurate and current.
Certain technical information is collected automatically when the website is used. Server logs and similar technologies may record an IP address, browser configuration, device type, requested page and event time. These records help winboc maintain availability, diagnose faults and identify unusual activity.
Information may also be received from service providers involved in identity verification, payments, fraud screening or technical delivery. For example, a payment provider may confirm whether a transfer was approved without disclosing a complete bank account credential.
winboc may process personal information where necessary to provide requested services, administer the website, fulfil contractual responsibilities, protect legitimate security interests, satisfy applicable obligations or act with the user’s consent. Specific purposes may include:
winboc should not make a decision producing a significant adverse effect solely through automated processing without appropriate safeguards where such safeguards are required. Security systems may nevertheless flag activity for manual review, such as an unusual login or an inconsistent transaction pattern.
Malaysian users may recognise payment names such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX. Mentioning a method does not mean that it is continuously available. Current options and limits depend on the services shown at the time of a transaction.
winboc may record the selected method, amount, date, transaction reference, status and limited account details needed to identify a transfer. Payment providers may process additional financial information under their own notices and security arrangements. winboc should avoid storing complete credentials when a token, masked number or provider confirmation is sufficient.
Transaction records may be retained to investigate chargebacks, correct allocation errors, meet financial recordkeeping requirements and protect users from unauthorised activity. A user should check the transaction details carefully before confirming a payment and retain their receipt until the account balance is updated.
Cookies are small files stored through a browser. winboc may use essential cookies to maintain sessions, remember privacy choices and support security functions. Performance cookies may help identify slow pages or technical faults, while preference cookies may retain settings selected by the user.
Where required, non-essential cookies should be used only after an appropriate choice has been provided. A browser can usually block or remove cookies, although disabling essential cookies may prevent certain winboc features from operating correctly. Cookie settings affect the relevant browser and device, so users may need to repeat their choices on another phone or computer.
winboc does not treat personal information as a product for unrestricted sale. Information may be disclosed only where a legitimate operational, security or legal reason applies. Recipients may include identity-verification providers, payment processors, hosting and security vendors, professional advisers and public authorities acting within their lawful powers.
Service providers should receive only the information reasonably needed for their assigned purpose and should be subject to confidentiality and security obligations. winboc may also disclose information in connection with a genuine corporate restructuring, provided that appropriate safeguards continue to apply.
Support conversations may contain sensitive account details. Do not send an unmasked identity document, password, banking PIN or one-time code through an unsecured chat channel.
Online services may use infrastructure or specialist providers located outside Malaysia. As a result, information may be processed in a country with privacy rules that differ from Malaysian requirements. Where such processing occurs, winboc should use appropriate contractual, organisational or technical safeguards proportionate to the nature of the information and applicable obligations.
International processing does not remove winboc’s responsibility to handle information consistently with this Policy. Users may request general information about relevant categories of providers and safeguards, subject to security, confidentiality and legal limitations.
winboc uses reasonable safeguards intended to protect information against accidental loss, unauthorised disclosure, misuse and alteration. Measures may include encrypted connections, access controls, logging, environment separation, staff confidentiality requirements and reviews of suspicious activity.
Users also have an important role. Choose a unique password, do not reuse credentials from another casino or sportsbook, keep devices updated and sign out on shared computers. If an unfamiliar login, payment or support message appears, stop interacting with it and contact winboc through the website information shown in this Policy.
No digital security programme can guarantee that a breach will never occur. If winboc identifies an incident affecting personal information, it should investigate promptly, contain the risk and issue notifications where required by applicable rules.
Retention periods vary according to the type of record and the reason for processing it. Account, identity and transaction records may need to remain available after account closure to address disputes, fraud reviews, financial recordkeeping and other applicable requirements.
Responsible gambling information can require longer retention. For example, deleting a self-exclusion record immediately could allow a restricted user to open another account. winboc may therefore keep limited identification and exclusion data where necessary to preserve a protection requested by the user.
When information is no longer needed, it should be deleted, securely destroyed or anonymised. Backup copies may remain for a limited technical cycle before being overwritten, with access restricted during that period.
Subject to applicable Malaysian requirements and relevant exemptions, a user may ask winboc to provide access to personal information, correct inaccurate details, explain certain processing, restrict selected uses or consider a deletion request. Users may also withdraw consent for an optional activity where consent is the basis for that activity.
A request should identify the account and explain the action sought. winboc may ask for proportionate identity verification before releasing or changing personal information. This step protects information from being obtained by an impersonator. Requests may be limited where disclosure would affect another person’s privacy, reveal protected security information or conflict with a lawful retention requirement.
Marketing preferences may be changed without closing an account. Essential messages concerning security, material policy updates, a transaction or an account restriction are service communications and may still be sent where necessary.
winboc is intended only for adults aged 21 and above. The website and any gambling-related services are not directed to children or younger users. winboc may request identity documents to confirm age and may suspend access while verification is incomplete.
If information indicates that a person under 21 has attempted to use an adult service, winboc may close or restrict the relevant account, preserve records needed to investigate the issue and remove other information where appropriate. A parent or guardian who believes a younger person has supplied information may contact winboc using the details below.
winboc may revise this Privacy Policy when services, technology, security practices or applicable requirements change. The updated version should identify its effective date. Where a change materially affects how existing personal information is used, winboc should provide an additional notice where reasonably appropriate.
Users are encouraged to review this page periodically. Continued browsing after an ordinary update acknowledges the revised notice, but it does not replace consent where separate consent is legally required.
Questions about this Privacy Policy, an information request or a suspected account-security issue may be directed to winboc using the website email below:
Website email: [email protected]
The email address is displayed as plain text for safety and is not a clickable mail link. When writing, provide enough information to identify the issue but do not include a password, one-time code, complete bank credential or unnecessary identity-document details.
Privacy requests are reviewed according to their nature, complexity and verification needs. winboc may first acknowledge the request and then ask for additional information required to respond securely.
Review the platform rules, explore responsible gambling guidance or return to the winboc homepage. Protect your account credentials and share personal information only through secure, trusted channels.
For players aged 21 and above only. Play responsibly.