Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") describes how h5winbox ("h5winbox", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("you", "Player", "User") who access or use the h5winbox online casino and sports betting platform at h5winbox.win.

1.2 By registering a player account with h5winbox, or by accessing any part of the h5winbox platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

1.3 This Policy should be read in conjunction with the h5winbox Terms & Conditions, which govern your use of the platform and are incorporated herein by reference.

2. Data Controller

2.1 For the purposes of applicable data protection law, h5winbox is the data controller responsible for the personal data collected through the h5winbox platform. h5winbox processes player data in accordance with its obligations under applicable international gaming authority regulations and data protection frameworks.

2.2 Questions or requests relating to the exercise of data rights, data access, or data deletion may be directed to h5winbox via the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

3.1 h5winbox collects the following categories of personal data from players and platform visitors:

• Identity Data: Full legal name, date of birth, national identification number or passport number, and a copy of a government-issued identity document where required for KYC verification;
• Contact Data: Malaysian mobile phone number, email address, and residential address;
• Financial Data: Payment method details (e.g., Touch n Go eWallet account reference, Maybank account identifier), transaction history, deposit and withdrawal records denominated in MYR;
• Technical Data: IP address, browser type and version, device type and operating system, session timestamps, and login activity records;
• Usage Data: Game history, betting activity, session duration, pages visited within the platform, and platform feature interactions;
• Communications Data: Records of correspondence between you and h5winbox customer support, including support ticket content and email communications.

3.2 h5winbox does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where health-related information is voluntarily disclosed in the context of a responsible gaming self-exclusion request.

4. How We Collect Data

4.1 h5winbox collects personal data through the following means:

• Direct Collection: Information you provide during account registration, identity verification, deposit or withdrawal requests, and customer support interactions;
• Automated Collection: Technical and usage data collected automatically through cookies, server logs, and platform analytics tools when you access h5winbox.win;
• Third-Party Sources: Identity verification data from licensed KYC/AML service providers, and fraud screening data from payment processing partners where applicable to the protection of player accounts.

5. Legal Basis for Processing

5.1 h5winbox processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract with you as a registered player, including account management, game provision, payment processing, and customer support;
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and other applicable legal or regulatory obligations;
• Legitimate Interests: Processing undertaken for the legitimate business interests of h5winbox, including fraud prevention, platform security, abuse detection, and platform performance analytics, where such interests are not overridden by your data protection rights;
• Consent: Processing of data for marketing communications, where you have provided explicit, freely given, and revocable consent.

6. How We Use Your Data

6.1 h5winbox uses the personal data it collects for the following purposes:

• Creating and managing your h5winbox player account;
• Processing deposits and withdrawals in MYR through your selected Malaysian payment method;
• Verifying your identity and age (21+) in accordance with KYC and AML obligations;
• Providing live casino games, slot games, and sportsbook services;
• Detecting and preventing fraud, money laundering, and prohibited account behaviour;
• Providing customer support and responding to enquiries or complaints;
• Administering responsible gaming tools including deposit limits, session limits, and self-exclusion requests;
• Analysing platform usage for security monitoring and performance optimisation;
• Sending transactional communications (e.g., deposit confirmations, withdrawal notifications);
• Sending marketing communications where you have provided consent or where permitted by applicable law.

7. Sharing of Personal Data

7.1 h5winbox does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes.

7.2 h5winbox may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment Processors: Providers of Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, USDT TRC20, and 7-Eleven CLiQQ payment services, to the extent necessary to process your transactions;
• Identity Verification Providers: Licensed KYC and AML compliance service providers used to verify player identity and age as required by regulatory obligations;
• Game Content Providers: Third-party game studios whose games are integrated into the h5winbox platform, where necessary for game functionality and fairness auditing;
• Regulatory Authorities: Applicable gaming regulators, financial intelligence units, or law enforcement agencies, where disclosure is required by law or regulatory direction;
• IT Infrastructure Providers: Hosting, cloud infrastructure, and cybersecurity service providers who process data on behalf of h5winbox under binding data processing agreements.

8. Data Retention

8.1 h5winbox retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with applicable legal, regulatory, and reporting obligations.

8.2 For registered player accounts, h5winbox retains personal data and transaction records for a minimum of five (5) years following the closure of the account, in accordance with standard AML/KYC record-keeping requirements applicable to online gaming operators.

8.3 Where a player has self-excluded from h5winbox, identity data sufficient to enforce the self-exclusion will be retained for the duration of the exclusion period and for a reasonable period thereafter to prevent re-registration.

8.4 Technical and usage data collected via cookies and server logs is retained for a period of up to 24 months, unless a shorter or longer retention period is required for legitimate security or compliance purposes.

9. Cookies & Similar Technologies

9.1 h5winbox uses cookies and similar tracking technologies on the h5winbox.win platform. Cookies are small text files stored on your device that help h5winbox deliver a functional and personalised platform experience.

9.2 h5winbox uses the following categories of cookies:

• Essential Cookies: Required for core platform functionality including login session management, game loading, and payment flow security. These cookies cannot be disabled without impairing platform functionality;
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the platform, enabling h5winbox to identify performance issues and improve the user experience;
• Preference Cookies: Used to remember your platform preferences, such as language settings, to personalise your experience on return visits.

9.3 You may manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of certain h5winbox platform features.

10. Security Measures

10.1 h5winbox implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the h5winbox platform;
• Encryption of sensitive personal data fields at rest within h5winbox's data storage infrastructure;
• Role-based access controls limiting internal access to player data to authorised personnel with a documented operational need;
• Regular security assessments and penetration testing of platform infrastructure;
• Multi-factor authentication requirements for administrative access to systems containing player data.

10.2 Notwithstanding the measures described above, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. h5winbox cannot guarantee the absolute security of your personal data and shall not be liable for losses resulting from security breaches caused by factors outside h5winbox's reasonable control.

11. Your Data Rights

11.1 Subject to applicable law, registered h5winbox players have the following rights in respect of their personal data:

• Right of Access: The right to request a copy of the personal data h5winbox holds about you;
• Right of Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to h5winbox's legal retention obligations and the requirements of applicable AML/KYC regulations;
• Right to Restrict Processing: The right to request that h5winbox limits the processing of your personal data in certain circumstances;
• Right to Object: The right to object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing;
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11.2 To exercise any of the rights described above, please contact h5winbox via the support email listed in Section 15. h5winbox will respond to verified data rights requests within 30 days of receipt.

12. Children & Minors

12.1 h5winbox does not knowingly collect personal data from individuals under the age of 21. The h5winbox platform is strictly for adults aged 21 and above. Where h5winbox becomes aware that personal data has been collected from an individual under the minimum age, that data will be deleted and the associated account will be permanently closed.

12.2 If you believe that a minor has registered an account on h5winbox, please notify us immediately via the contact details in Section 15.

13. Third-Party Links

13.1 The h5winbox platform may contain references to or integrations with third-party services, including payment processors and game content providers. h5winbox is not responsible for the privacy practices of such third parties and this Policy does not apply to data collected directly by those third parties through their own interfaces. We encourage you to review the privacy policies of any third-party services you interact with.

14. Changes to This Policy

14.1 h5winbox reserves the right to update or revise this Privacy Policy at any time. Where changes are material, registered players will be notified via their registered contact details or by prominent notice on the platform prior to the changes taking effect. The current version of this Policy is always available at h5winbox.win/privacy-policy. Continued use of the h5winbox platform after the effective date of any revision constitutes acceptance of the updated Policy.

15. Contact Us

15.1 For any questions, concerns, or requests relating to this Privacy Policy or h5winbox's data processing practices, please contact:

When submitting a data rights request, please include your full registered name, registered mobile number, and a brief description of your request to assist h5winbox in verifying your identity and processing your request efficiently.