Privacy Policy

wbx2u ("the Platform", "We", "Us", "Our") is committed to protecting the privacy and personal data of all users who access or register on our online gaming platform at wbx2u.cam. This Privacy Policy ("Policy") describes our practices in relation to the collection, use, storage, sharing, and protection of personal data provided by you ("Player", "User", "You") when using our services.

This Policy applies to all personal data collected through the wbx2u website, any mobile-optimised interfaces, and any communications between you and wbx2u through support channels including Live Chat, email, and messaging platforms.

This Policy should be read in conjunction with our Terms & Conditions. Where there is any inconsistency between this Policy and the Terms, the Terms shall prevail unless otherwise specified.

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, identification number, email address, phone number, payment details, and IP address.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — wbx2u, being the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" — A third party that processes personal data on behalf of wbx2u, under our instructions and subject to contractual data protection obligations.
• "KYC" — Know Your Customer verification procedures, including identity and address verification required prior to withdrawal processing.
• "Consent" — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Cookies" — Small text files placed on your device by the Platform to store preferences, session state, and analytical data.

wbx2u collects the following categories of personal data from users of the Platform:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data unless explicitly required and legally justified for responsible gambling compliance purposes (e.g., processing a self-exclusion request where a player discloses a gambling problem).

wbx2u collects personal data through the following channels and methods:

• Direct Collection: Information you provide when registering an account, completing KYC verification, contacting support, or updating your account profile.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity logs.
• Payment Processors: Transaction confirmation data received from payment intermediaries when you make deposits or withdrawals via Touch 'n Go eWallet, DuitNow, FPX, or direct bank transfer through Maybank, CIMB, Public Bank, or Hong Leong Bank.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar technologies as described in Section 11 of this Policy.
• Third-Party Verification Services: Identity verification data from KYC service providers engaged by wbx2u to validate your identity documents.
• Fraud Prevention Services: Information received from fraud detection and anti-money laundering (AML) compliance tools used to identify suspicious activity on the Platform.

wbx2u processes your personal data for the following specified purposes:

1. Account Registration and Management: To create and maintain your wbx2u account, verify your identity, and administer your account settings and preferences.
2. Transaction Processing: To process deposits and withdrawals in MYR, verify payment method ownership, and maintain accurate financial records of all transactions on your account.
3. KYC and Age Verification: To verify that you are at least 21 years of age and to confirm your identity as required for regulatory compliance and responsible gambling obligations.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, and other illegal or prohibited conduct on the Platform.
5. Customer Support: To respond to your enquiries, resolve complaints, and provide assistance via Live Chat, email, and other support channels in English, Chinese, and Bahasa Melayu.
6. Responsible Gambling: To implement and manage responsible gambling tools including deposit limits, session controls, and self-exclusion requests, and to identify patterns of play that may indicate problematic gambling behaviour.
7. Legal and Regulatory Compliance: To comply with applicable laws, licensing requirements, court orders, and requests from competent regulatory or law enforcement authorities.
8. Platform Improvement: To analyse usage patterns, identify technical issues, and improve the performance, design, and functionality of the wbx2u Platform.
9. Marketing Communications: To send promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications. You may opt out at any time by contacting support or updating your communication preferences in your account settings.

wbx2u processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and wbx2u — including account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws — including KYC, anti-money laundering (AML) obligations, and responsible gambling regulations imposed under our international gaming licence.
• Legitimate Interests: Processing carried out for wbx2u's legitimate business interests — including fraud detection, platform security, and general analytics — provided these interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your specific, informed consent — including marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

wbx2u does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processing Partners: E-wallet providers, banks, and payment intermediaries involved in processing your MYR deposits and withdrawals (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank) receive only the transactional data necessary to complete the payment.
• KYC and Identity Verification Providers: Third-party services engaged to verify identity documents submitted during the KYC process. These providers process your identity data solely for verification purposes and are contractually prohibited from using it for any other purpose.
• Fraud Prevention and AML Tools: Compliance and risk management platforms used to screen for money laundering, fraud, and sanctioned individuals. Data shared is limited to what is necessary for risk assessment.
• Game Content Providers: Game studios whose titles are hosted on the wbx2u Platform may receive anonymised or aggregated gameplay data for the purpose of game operation and performance monitoring. No personally identifiable information is shared with game studios without your explicit consent.
• Legal and Regulatory Authorities: Where required by law, court order, or a competent regulatory or law enforcement authority, wbx2u may disclose personal data without prior notice.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving wbx2u, personal data may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

wbx2u operates under international gaming licensing frameworks. As a result, your personal data may be transferred to and processed in countries outside of Malaysia, including the jurisdiction where wbx2u holds its gaming licence and the locations of our data centres and third-party service providers.

Where personal data is transferred to countries that do not provide an equivalent level of data protection to Malaysia's Personal Data Protection Act 2010 (PDPA), wbx2u will take appropriate steps to ensure that such transfers are protected by contractual safeguards — such as data processing agreements incorporating standard contractual clauses — or other legally recognised transfer mechanisms.

By using the wbx2u Platform, you acknowledge that your personal data may be processed in locations outside Malaysia as described in this Policy.

wbx2u retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligations. The following general retention principles apply:

• Account Data: Retained for the duration of your active account relationship with wbx2u, and for a minimum of five years following account closure to satisfy anti-money laundering and gaming licence compliance obligations.
• Transaction Records: Retained for a minimum of five years from the date of the transaction, or such longer period as required by applicable financial regulations.
• KYC and Identity Documents: Retained for a minimum of five years following the date of verification or account closure, whichever is later.
• Support and Communication Records: Retained for up to three years from the date of the last interaction, unless a longer retention period is required in connection with an active dispute or legal proceeding.
• Marketing Preferences: Retained until you withdraw consent or request deletion of this data.
• Self-Exclusion Records: Retained for the duration of the self-exclusion period and for a minimum of five years thereafter to prevent re-registration.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

wbx2u implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the wbx2u Platform;
• Encryption of sensitive data stored at rest on our servers;
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate operational need;
• Two-factor authentication (2FA) options for player account access;
• Regular penetration testing, vulnerability assessments, and security audits conducted by qualified third-party security professionals;
• Incident response procedures to detect, contain, and notify affected parties of any data breach within required timeframes.

Notwithstanding the above, no method of electronic transmission or data storage is 100% secure. While we apply best-practice controls, we cannot guarantee absolute security. You are encouraged to use a strong, unique password for your wbx2u account and to enable two-factor authentication where available.

wbx2u uses cookies and similar technologies to operate the Platform, improve your experience, and for analytical purposes. Cookies are small text files placed on your device when you visit our website.

The following categories of cookies are used on the wbx2u Platform:

• Strictly Necessary Cookies: Essential for the operation of the Platform — including session management, login state, and security functions. These cannot be disabled as they are required for the Platform to function.
• Functional Cookies: Used to remember your preferences, language settings, and account customisations between sessions. Disabling these may affect your experience.
• Analytical Cookies: Used to collect anonymised data about how users interact with the Platform — including pages visited, session duration, and navigation paths — to help us improve our services. This data does not identify you personally.
• Marketing Cookies: Used to deliver relevant promotional content and offers. These are only placed with your consent and can be withdrawn at any time via your account cookie preferences.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the wbx2u Platform.

Subject to applicable law and certain limitations, you have the following rights in relation to the personal data that wbx2u holds about you: