Official Documents

Wibox Privacy Policy – Personal Data Protection for Our Malaysian Members

Wibox takes seriously its responsibility to protect the privacy and personal data of every member. This Privacy Policy transparently explains how we collect, use, store, and protect your information — written in clear language so you fully understand your rights as a member Wibox.

Updated: 1 January 2026 Bahasa Melayu (ms-MY) Based in Malaysia
Wibox Privacy Policy Summary
Data encrypted with 256-bit SSL
We do not sell your data to third parties
You have the right to access, correct, and delete your data
Cookies are used to enhance your experience
Notifications are only sent with your consent
Transactions processed through secure Malaysian gateways
Policy may be updated with 7 days' notice

Data Protection Commitment

Six Privacy Principles That Guide How Wibox Manages Your Data

At Wibox, privacy is not just a legal document — it is a core value that shapes every technical and operational decision we make.

No Sale of Personal Data
Wibox has never and will never sell, rent, or transfer members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — we use it solely to provide you with a better service.
Full Control in Your Hands
Wibox members have the full right to access their personal data, request corrections to inaccurate information, withdraw marketing consent, and request account deletion along with associated data — all by getting in touch with our team.
Minimum Data Collection
Wibox only collects data that is genuinely necessary to provide our services — such as your name, phone number, email address, and payment information for account management. We do not collect irrelevant or excessive data without a clear and legitimate basis.
Full Transparency in Data Usage
The Wibox Privacy Policy is written in plain, easy-to-understand language — not confusing legal jargon. You know exactly what your data is used for, who can access it, and how long it is retained.
Malaysian Legal Compliance
Wibox's privacy practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related regulations. We have appointed an internal data protection officer responsible for ensuring ongoing compliance with local legal requirements.
1
Introduction and Scope of This Privacy Policy

Wibox ("we", "platform", or "Company") is committed to protecting the privacy and security of every member's personal data on our online entertainment platform. This Privacy Policy sets out in detail how Wibox collects, processes, stores, protects, and discloses your personal information when you register, log in, or use any part of the Wibox platform.

This policy applies to all Wibox members who access the platform via wibox.best, the mobile app, or any other Wibox digital channel. It also applies to individuals who are in the process of registering or who have previously been Wibox members.

Acceptance Notice

By registering or continuing to use the Wibox platform, you confirm that you have read and understood this Privacy Policy, and that you agree to how we process your personal data as described herein. If you do not agree, please stop using the platform and contact us to close your account.

This Privacy Policy forms an integral part of Wibox Terms & Conditions. Any terms not defined in this document carry the same meaning as in the relevant Terms & Conditions. In the event of any conflict between this document and the Terms & Conditions regarding data protection, this Privacy Policy shall prevail.

2
Types of Personal Data Collected by Wibox

Wibox collects your personal data through three main channels — information you provide directly, information generated automatically as you use the platform, and in certain cases, information from legitimate third-party sources. We only collect data that is genuinely necessary to provide Wibox's services.

2.1 Information You Provide Directly

  • Registration information: Full name (as per MyKad), Malaysian identity card number (MyKad), date of birth, Malaysian phone number, and email address
  • Identity verification (KYC) information: Front and back copy of MyKad, selfie with MyKad (if requested), and proof of current residential address
  • Payment information: Malaysian bank account number, bank name, account holder name, and registered e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow)
  • Communication with support: Live Chat conversation records, emails sent to support@wibox.best, and any attached documents

2.2 Automatically Generated Data

  • Technical data: IP address, device type, operating system, browser type and version, screen resolution, and language settings
  • Platform activity data: Login and logout records, game history (slots, live casino, football Sports Betting, badminton, e-sports, 4D/Toto/6D lottery), betting history, deposit and withdrawal records
  • Navigation data: Pages visited within the platform, time spent on each page, how you interact with the interface, and button clicks
  • Cookie data: Information collected through cookies and related tracking technologies — as further described in Section 8

2.3 Data from Third-Party Sources

In certain circumstances, Wibox may receive additional information about you from legitimate sources such as third-party identity verification service providers (for KYC purposes), financial institutions for transaction verification, and recognised fraud prevention agencies. Data from these sources is used solely for verification and legal compliance purposes.

Data CategoryExamplePrimary Purpose
IdentityFull name, MyKad number, date of birthRegistration & KYC
RelationshipsPhone number, emailCommunication & Security
FinancialBank account, e-walletDeposit & Withdrawal
TechnicalIP, device, browserSecurity & Analytics
ActivityGaming history and betting activityServices & VIP
3
How Wibox Uses Your Personal Data

Wibox uses your personal data solely for lawful, necessary purposes that are directly related to delivering our online entertainment platform services to you. We do not use your data for unrelated purposes without your explicit consent.

3.1 Account Management & Services

Your basic data (name, phone number, email) is used to create and manage your Wibox account, process secure logins, send important account notifications such as OTP verification and security alerts, and respond to enquiries submitted via Live Chat or support email.

3.2 Financial Transaction Processing

Your payment information — including Malaysian bank account details, e-wallet accounts (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow), and FPX records via Maybank2u or CIMB Clicks — is used to process deposits, verify account ownership during withdrawals, detect suspicious transactions, and comply with legally required financial reporting obligations.

3.3 Platform Improvement & User Experience

Your activity and navigation data helps the Wibox technical team understand how members use the platform, identify areas for improvement, test new features, and optimise platform performance — particularly for smartphone users, who account for over 85% of Wibox members.

3.4 VIP Programme and Promotions

Your gaming activity and deposit records are used to calculate your eligibility and tier within the Wibox VIP Rewards Programme (Silver, Gold, Platinum, Diamond, Elite Diamond), calculate weekly cashback credited automatically, and inform you of promotions relevant to your playing patterns — provided you have not withdrawn your marketing communications consent.

3.5 Legal Compliance & Fraud Prevention

Wibox uses your data to fulfil its legal obligations in Malaysia, including AML (Anti-Money Laundering) and KYC (Know Your Customer) requirements, to detect and prevent fraudulent activity such as bonus abuse, duplicate accounts, and money laundering, and to comply with any directives from relevant regulatory authorities or a competent court.

4
Personal Data Retention Period

Wibox retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law. Retention periods vary depending on the type of data and the relevant legal requirements.

4.1 General Retention Period

  • Active account data: Retained for as long as your Wibox account remains active
  • Financial transaction records: Minimum 7 years from the transaction date, in line with Malaysian financial regulatory requirements
  • KYC data (identity verification): Minimum 5 years after account closure
  • Support communication records: 3 years from the date of last interaction
  • Technical and security logs: 12 months from the date the record was generated
  • Gaming and betting records: 3 years from the date of activity

4.2 After Account Closure

When your account is closed for any reason, Wibox will delete or anonymise data that is no longer required within 90 days, except for data that must be retained to fulfil legal obligations as outlined above. Data retained for legal compliance purposes will be restricted to authorised personnel only and will not be used for any commercial purpose.

Data Storage Location

Wibox member data is stored on servers located in the Asia region that maintain robust data security standards. Wibox ensures that any cross-border data transfers comply with data protection standards equivalent to those required under Malaysian law.

5
Sharing and Disclosure of Data to Third Parties

Wibox does not sell, rent, or trade members' personal data to any third party for commercial or marketing purposes. However, in certain limited and lawful circumstances, Wibox may need to share some of your data with the following parties.

5.1 Trusted Service Providers

Wibox works with selected third-party service providers that help us operate the platform — including payment gateway providers for processing deposits and withdrawals via Malaysian e-wallets (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX), KYC service providers for identity verification, cloud infrastructure and security providers, and gaming providers (slots developers, Live Casino, Sports Betting platforms). All providers are bound by strict data protection agreements and are only permitted to use your data for the specific purposes set out in those agreements.

5.2 Legal Requirements and Regulatory Authorities

Wibox may be required to disclose your data to competent authorities in Malaysia when mandated by a valid court order, requests from law enforcement agencies in the course of a criminal investigation, reporting obligations under Malaysia's AML (Anti-Money Laundering) and AMLATFPUAA legislation, or other regulatory compliance requirements prescribed by applicable Malaysian law.

5.3 What Wibox Does NOT Do

  • Wibox does not sell your data to advertisers or marketing companies
  • Wibox does not share your playing profile or habits with industry competitors
  • Wibox does not disclose your financial information to any party not directly involved in processing your transaction
  • Wibox does not use your data to build psychographic profiles for behavioural manipulation purposes
Be Cautious with Third Parties

Wibox is not responsible for the privacy practices of any third-party websites, apps, or services that may be linked to or referenced in other contexts. Please review the privacy policy of each platform separately.

6
Data Security Measures Implemented by Wibox

Data security is an ongoing investment at Wibox — not just a checkbox on a compliance list. We implement multiple layers of technical and operational protection to keep your personal and financial data safe at all times.

6.1 Technical Safeguards

  • 256-bit SSL/TLS Encryption: All communications between your browser and the Wibox platform are fully encrypted
  • Encryption of data at rest: Sensitive data such as passwords and payment information is encrypted in our database using robust hashing algorithms
  • Two-factor authentication (2FA): Available to all members as an additional security layer during login
  • Continuous security monitoring: An active 24/7 intrusion detection system (IDS) monitors for unusual traffic and unauthorised access attempts
  • Regular penetration testing: Wibox conducts regular penetration testing through independent third parties to identify and address vulnerabilities

6.2 Internal Access Controls

Access to members' personal data within Wibox systems is restricted to staff with a legitimate business need who have signed strict confidentiality agreements. All internal access is recorded in audit logs that are reviewed on a regular basis. Staff who leave the company have all access privileges revoked immediately.

6.3 Data Breach Response

In the event of a data breach affecting members' personal information, Wibox has a clear incident response procedure in place. We will notify affected members within 72 hours of confirming the incident via their registered email address, and report the incident to the relevant authorities as required under Malaysian law.

Your Responsibility in Account Security

Wibox account security is a shared responsibility. Use a strong and unique password, enable 2FA, never share your login credentials with anyone, and contact our support team immediately if you suspect any suspicious activity on your account.

7
Your Personal Data Rights

As a Wibox member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. Wibox respects and facilitates the exercise of all these rights.

Right of Access
You have the right to request a copy of the personal data Wibox holds about you. We will provide the records in a readable format within 14 business days of receiving your request.
Right to Rectification
If your personal data is inaccurate or out of date, you have the right to request a correction. Log in to your Wibox account to update basic information, or contact support for more complex corrections.
Right to Erasure
You may request deletion of your personal data when it is no longer required for its original purpose, subject to our legal retention obligations. Requests will be processed within 30 days.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time without providing a reason. Click "unsubscribe" in any marketing email or contact our support team.
Right to Restriction
In certain circumstances, you have the right to request that Wibox restrict (rather than delete) the processing of your data — for example, while you are disputing the accuracy of your data or while an investigation is ongoing.
Data Portability Right
You have the right to receive the personal data you have provided to Wibox in a structured, machine-readable format (such as CSV or JSON), for transfer to another service provider should you wish.

To submit any request relating to the rights above, please contact the Wibox Data Protection Officer by email at support@wibox.best and state "Data Rights Request" in the message subject line. We may require identity verification before processing your request in order to protect you from unauthorised submissions.

8
Cookie & Tracking Technology Policy

Wibox uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit Wibox. They allow the platform to remember your preferences and ensure certain features work correctly.

8.1 Types of Cookies Used by Wibox

8.2 Cookie Controls

You can manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the Wibox platform. To disable Wibox-specific analytics and marketing cookies without affecting core functionality, log in to your account and go to Settings → Privacy → Cookie Management.

9
Child & Minor User Protection

The Wibox platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

Absolute Prohibitions

If you are under 18 years of age, you are strictly prohibited from using or registering for a Wibox account. If Wibox determines that a member has provided false information about their age, the account will be immediately closed, all balances and winnings will be forfeited, and the incident may be reported to the relevant authorities.

If you believe a child or teenager under the age of 18 has registered on Wibox, please contact us immediately at support@wibox.best. We will investigate and take prompt action to close the account and delete all data associated with that minor.

10
Amendments to This Privacy Policy

Wibox reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new Malaysian legal requirements, or new platform features. Any material changes to this Policy will be communicated to members through:

  • In-platform notifications on Wibox displayed upon next login
  • Email to the member's registered address at least 7 days before the changes take effect
  • A prominent notice displayed on the wibox.best homepage

Non-material changes — such as spelling corrections, language clarifications, or layout improvements — may be made without prior notice. The "Updated" date at the top of this page will always reflect the latest version of the Privacy Policy currently in effect.

Continued use of the platform Wibox after the effective date of the updated Privacy Policy will be considered your acceptance of those changes. If you disagree with any changes, you have the right to close your account before they take effect.

Current Version

This Privacy Policy is the version in effect from 1 January 2026. If you require a previous version for reference, please contact support@wibox.best.

11
Contact Us About Privacy

If you have any questions, concerns, or complaints about how Wibox handles your personal data, or if you wish to submit a request to exercise your rights as described in Section 7, please reach out to us through the following channels:

  • Data Protection Officer Email: support@wibox.best — include "Privacy Enquiry" or "Data Rights Request" in the email subject line
  • Platform Live Chat: Available 24/7 within your Wibox account — for more general privacy enquiries

Wibox aims to respond to all privacy-related enquiries within 5 business days. For more complex requests, such as comprehensive data access or deletion requests, the process may take up to 14 business days and you will be kept updated on the progress of your request.

If you are not satisfied with how Wibox has handled your privacy request after exhausting all available internal resolution channels, you have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant data protection authority in Malaysia.

Related Documents

This Privacy Policy should be read together with Wibox Terms & Conditions and Responsible Gaming Policy us for a full understanding of your rights and responsibilities as a Wibox member. For any enquiries, contact us at support@wibox.best.

Frequently Asked Questions

Frequently Asked Questions About the Wibox Privacy Policy

No. Wibox has never and will never sell, rent, or share members' personal data with any other company for marketing or commercial purposes. Your data is only shared with selected service providers who help us operate the platform — such as payment gateways (Touch 'n Go, GrabPay, DuitNow, FPX) and KYC providers — and all such parties are bound by strict data protection agreements. We may also be required to disclose data to Malaysian legal authorities if mandated by a valid court order.

You may request deletion of your personal data by emailing support@wibox.best with the subject line "Data Deletion Request". Please state your full name and registered email address. We will verify your identity before processing the request. Please note that certain data may need to be retained to fulfil Malaysian legal obligations (for example, financial transaction records must be kept for a minimum of 7 years). Data not subject to legal retention requirements will be deleted within 30 days of confirming your request.

When you close your Wibox account, data that is no longer required will be deleted or anonymised within 90 days. However, certain categories of data must be retained to comply with Malaysian law — financial transaction records are kept for a minimum of 7 years, KYC data for a minimum of 5 years, and support communication records for 3 years. Data retained after account closure is accessible only to authorised personnel for legal compliance purposes and is not used for any commercial purpose.

Wibox does not store your credit card numbers or e-wallet passwords directly in our systems. All transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks) are processed through secure, certified payment gateways. Bank account information registered for withdrawal purposes is stored in encrypted form and used solely to verify account ownership during the withdrawal process. Wibox uses 256-bit SSL encryption for all communications involving financial information.
Responsible Gaming Warning: The Wibox platform is for adult entertainment purposes and is strictly for users aged 18 and above. Gambling can be addictive — play within limits you set for yourself and only use disposable funds you can afford to lose. If you or a family member is experiencing a gambling problem, please contact Health Helpline 1800-22-2088 or visit Responsible Gaming us.

Your Data is Safe with Wibox — Register and Play with Confidence

Your privacy and data security are Wibox's top priority. From slots and Live Casino to football and badminton betting, e-sports, 4D lottery and Toto — everything on Wibox can be enjoyed with full confidence that your data is completely protected.

For members aged 18 and above only  ·  Data protected by 256-bit SSL  ·  Please gamble responsibly

Bahasa Melayu