Score below 50. Serious problems found.
What we checked (1 Nov 2026). Winbox is one of the most searched casino names in Malaysia. It is an app-based platform with many look-alike websites; we checked the address reviewed on Trustpilot, winboxmalay.com, which also runs the register.winboxmalay.com and login.winboxmalay.com pages. We checked the licence claim against regulators’ registers and PAGCOR’s notice, the public game pages, complaint sites and warning lists, the published terms, the domain records and the payment information shown.
What we found. The site names no regulator, no licence number and no company; it says only that it adheres to “stringent regulatory standards”. There is no terms-and-conditions or privacy page anywhere on the site: the promotions page refers to “the latest Winbox terms and conditions” without publishing them and warns that “Registration through another page may not qualify”. Games run only inside the app after login, so we could not inspect the game host or RTP (HotStakes never downloads casino apps or registers). Trustpilot scores the brand 2.6 out of 5 from 28 reviews: reviewers say withdrawals now take about two days and need live chat, one was asked for another bank account and an IC photo before being paid, one says the brand runs cloned websites, and the operator has not replied to negative reviews. The domain was registered in March 2024 with the owner hidden (country shown as Hong Kong), and the site’s own security notice tells players to check the web address before entering account details. On the positive side, Winbox publishes a support email and we found no regulator warning and no documented refusal to pay.
What readers should do. Score 30/100: avoid. With no licence, no company, no public terms and games locked inside an app, you cannot check the rules before you deposit, and the many copy-cat Winbox sites make it easy to hand your money to the wrong one. If you already have money there, withdraw what you can and keep screenshots of every transaction and every chat. Winbox is welcome to reply with a licence number, company name and a public terms page; we will add any reply here and re-check.
Right of reply. Winbox publishes a support email on winboxmalay.com (checked 1 Nov 2026). HotStakes has asked for internal approval to send a right-of-reply email; the operator can also reply at any time through hotstakes.io/list-your-brand/ and we will update this page.
| Check | Score | Finding |
|---|---|---|
| Licence | 0/20 | winboxmalay.com and its About page name no regulator, no licence number and no company; the only wording is 'Adhering to stringent regulatory standards' and 'a premier international online gaming company' (checked 1 Nov 2026). No auditor or certifying body is named. Not on PAGCOR's reported-websites notice. No licence claimed = 0. source source |
| Clone games | 10/20 | Winbox is app-based: the website's game pages (Lucky365, Lion King, Pragmatic Play, 918Kiss, Play8, JILI, Microslot, live casino) are descriptions, and play requires the Android/iOS app and an account. HotStakes does not download casino apps or register, so the game host and RTP could not be inspected. Could not inspect without an account. source source |
| Payout reports | 10/20 | HotStakes has 0 visitor reports. Trustpilot (winboxmalay.com) scores 2.6/5 from 28 reviews (43% one-star; 13 in the last 12 months); reviewers in Oct 2025 and Aug 2026 say withdrawals now take about two days and need live chat, an Aug 2026 reviewer was asked for another bank account and an IC photo, and a Jul 2026 reviewer says the brand runs cloned websites; the operator has not replied to negative reviews. Not on Bank Negara Malaysia's Financial Consumer Alert list (checked 1 Nov 2026). Repeated delay complaints but no documented refusal to pay or fee-to-withdraw demand: 10. source source |
| Trap terms | 3/15 | No terms and conditions or privacy policy page is linked anywhere on winboxmalay.com (1 Nov 2026). The promotions page refers to 'the latest Winbox terms and conditions' without publishing them, says claims need 'the required account verification and eligible deposit requirements' without giving amounts, and warns that 'Registration through another page may not qualify'. Bonus turnover, withdrawal caps and confiscation rules cannot be read before you deposit. source source |
| Website facts | 4/10 | winboxmalay.com was registered on 22 Mar 2024 (Cloudflare, expires 22 Mar 2030) with the registrant redacted and country shown as Hong Kong. No company name or address. The brand appears on many other addresses (the site itself points to winboxmy.co; search results show winbox88, winboxmy168 and similar landing pages) and its own security notice tells players to 'Check the web address before entering account details'. A public support email (support at winboxmalay.com) and a Telegram channel (wbxmalay) are published; the Telegram link is also labelled 'Ang Pao'. source source source |
| Payment safety | 3/10 | No payment methods, bank names, e-wallets or crypto addresses are shown anywhere on the public website (1 Nov 2026); deposits happen inside the app after login, so the HotStakes USDT address check could not be used and we could not see whether deposits go to a company or a personal account. A Trustpilot reviewer reports being asked to use 'another bank acc' for a withdrawal. source source source |
| HotStakes test | 0/5 | Winbox is not listed by HotStakes. Not tested by HotStakes. source |
Checked by Cyndia's team (no deposit made). Some links are affiliate links. See all verified operators. 18+. Online gambling is illegal in some countries, including Malaysia; check your local law.
Facts and evidence only, checked on the date shown. "Reported by users" means we received reports we could not fully verify. Operators can reply or correct a fact at [email protected]. Had a problem with this casino? Report it. 18+.
We use cookies for analytics (Google Analytics) and to measure our social posts (Meta pixel). They are only set if you accept. Without your OK we only count visits anonymously, with no cookies. Cookie Policy
