What This Policy Actually Covers
We treat your personal information as something you lend us, not something we own. When you open an account with winbox02, we record what's needed to process deposits and withdrawals — details tied to Touch 'n Go eWallet, Boost or GrabPay transfers, your DuitNow reference numbers
-
1
where FPX banking is used, and basic device details such as browser type and login timestamps. This data lets us confirm a transaction actually came from your wallet, match it to your account, and resolve a dispute if one of your transfers doesn't clear the way
-
2
it should. We don't sell this data to outside marketers, and we only share it with the payment partners and verification services needed to settle a transaction or meet a legal request. How long we keep a given record, and which authority can ask us to
-
3
disclose it, depends on local law and is available where local law permits — Malaysia's rules differ from other markets we might reference internally. If you want to know what we hold on your account, or you'd like a record corrected, our support team can explain
-
4
the steps without you needing to file anything formal. We update this policy whenever our payment partners change their own data-handling terms, so the version you're reading reflects how Touch 'n Go eWallet, Boost, GrabPay and FPX settlements are currently processed on our side.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.