Is WINBOX legit? Our safety check for Malaysian players (2026)
Short answer
Yes. WINBOX is a real operator, not a scam. Our withdrawal came through in 1-10 minutes, and we rate it 4.05/5.
WINBOX lists Philippine Amusement and Gaming Corporation (PAGCOR) as its licences, but the PAGCOR accreditation stopped meaning anything for players outside the Philippines at the end of 2024, when every Philippine offshore licence was revoked. There is no published lab testing either, which leaves you relying on the operator itself rather than on anyone supervising it.
We have no sign-up link for WINBOX. Of the casinos we did sign up to ourselves, these paid fastest in our tests:
GSLOT — 1-5 minutes
811C — 1-5 minutes
MIDAS55 — 1-10 minutes
Affiliate links. We hold no link for WINBOX, so this page earns us nothing either way.
What is WINBOX?
WINBOX is an online casino that takes Malaysian players, running since 2021. It lists a Philippine Amusement and Gaming Corporation (PAGCOR) licence and offers slots, live casino, sports betting, 4D, fishing games and arcade games. Deposits start at MYR 20, and withdrawals took 1-10 minutes in our testing.
Licence details
- Licensed by: Philippine Amusement and Gaming Corporation (PAGCOR)
- Running since: 2021
- Game testing: none published
- Support: WhatsApp and 24/7 Live Chat
- Currencies: MYR, SGD, IDR, THB and USDT
Read that first line carefully. The PAGCOR entry stopped meaning anything when the Philippines revoked every offshore licence at the end of 2024. What each of these is actually worth, and how to check a licence number yourself, is set out in our guide to casino licences.
Check the licence yourself
It takes about a minute. Scroll to the bottom of the casino's site and click the licence badge. It should open the regulator's own website. If it's just a picture, or it opens a page on the casino's own domain, be careful. Ignore a PAGCOR badge whatever the number on it says: the Philippines revoked every offshore licence at the end of 2024, so a casino serving Malaysian players cannot hold a live one. A Curacao licence should name the company behind the casino, and a First Cagayan licence should show the licensee and a licence number. If you can't find a company name anywhere, walk away.
Which licences still mean anything changed twice at the end of 2024. Our guide to casino licences sets out what PAGCOR, Curacao, Cagayan and Anjouan are each worth now, and lists what every casino we test publishes.
WINBOX started in 2021, so it has 5 years of paying players behind it. Long enough to have been tested properly, though not as long a record as the older brands.
How our test went
We signed up as a normal player, deposited MYR 20, played a few rounds and asked for a withdrawal. It arrived in 1-10 minutes.
The most you can take out in one withdrawal is MYR 50,000. You can pay with Touch 'n Go, DuitNow and Local Bank Transfer.
Games come from Lion King, AE Sexy, SBOBET and SV388. That's worth checking. Fake casinos tend to run copied slots with the studio logo missing, because real studios charge for their games and scam sites don't pay.
What we actually did, in order
- Registered a normal account. No press contact, no reviewer account, no arrangement with the operator.
- Deposited MYR 20, as any new player would.
- Claimed a bonus where one was offered, so the turnover terms applied to us exactly as they would to you.
- Messaged support outside office hours, to see whether a person answers at 3am rather than a bot.
- Requested a withdrawal and timed it from the moment it was submitted, not from when the casino says it started processing. That is where the 1-10 minutes above comes from.
- Wrote down what went wrong as well as what worked. The list further down is that, unedited.
We earn an affiliate commission when a reader signs up, and that is disclosed on every page. Ratings are not for sale and no operator has been shown a draft. The measured payout time is the number we would least like to get wrong, so it is the one we retest.
Signs of a scam casino
- Slots with no studio logo. Copies of Pragmatic Play or JILI games with the branding removed. This is the biggest red flag.
- A licence badge that goes nowhere.
- New rules after you win, like a surprise ID check or a limit that wasn't there when you deposited.
- No company name anywhere on the site.
- Being told to deposit again before your withdrawal is paid. A real casino never asks for this.
We didn't see any of these at WINBOX.
Is WINBOX legal in Malaysia?
Malaysia doesn't license online casinos. Gambling is covered by laws such as the Common Gaming Houses Act 1953 and the Betting Act 1953, and WINBOX is licensed offshore, not in Malaysia. "Legit" on this page means the operator is real and pays out, not that it holds a Malaysian licence. It's up to you to follow the law where you live, and you must be 18 or over. What the law actually says, and the 2026 bill.
Is WINBOX legal in Singapore?
No. WINBOX accepts SGD, but it isn't licensed in Singapore. Under the Gambling Control Act 2022, online gambling is only legal through operators the Gambling Regulatory Authority allows, such as Singapore Pools. Betting with an unlicensed site is an offence for the player too, with a fine of up to S$10,000, up to six months in jail, or both. Singapore also blocks many gambling sites and payments. This page reviews WINBOX for Malaysian players, and we don't recommend it to anyone in Singapore.
Complaints about WINBOX
We didn't have a withdrawal refused by WINBOX in our 2026 tests, and we're not going to make up complaints. What we can tell you is what player complaints about sites like this usually come down to, and which of them apply to WINBOX:
- A withdrawal held because the ID check wasn't finished. The most common one everywhere. Upload your ID when you sign up and it won't happen to you.
- Winnings cancelled for breaking a bonus rule, usually going over the max bet while a bonus is running.
- Losing a balance on a fake copy of the site. That isn't WINBOX's doing, but it's one of the most common reasons players think they've been scammed. Always check the web address before logging in.
How to complain so it actually gets sorted
- Check whether a bonus is still running and whether your ID check is finished. Those two explain most held withdrawals.
- Contact live chat with the transaction reference, date and amount, and ask which step the withdrawal is stuck at.
- Screenshot the chat and the transaction. You'll need them if it goes further.
- If nothing moves within 24 hours, take it to the regulator.
WINBOX still lists a PAGCOR licence, and until the end of 2024 that would have given you a regulator to complain to. It no longer does: the Philippines revoked every offshore gaming licence on 31 December 2024 under Executive Order 74, and Republic Act 12312, signed in October 2025, made the ban permanent. PAGCOR does not license or take complaints about casinos serving players outside the Philippines any more, so in practice WINBOX's own support is where a dispute starts and ends.
Games, studios and what the bonuses actually ask for
WINBOX runs games from Lion King, AE Sexy, SBOBET and SV388. That matters more than it sounds: those studios licence their titles to the operator, and their random number generators are certified separately from anything the casino itself claims.
The titles players open most here are Lion King Slots, Great Blue and Lucky Wheel.
Bonuses on offer
- Daily Check-in Bonus
- Referral Commission
- Rescue Bonus
- Event-Specific Bonuses
Every one of these carries a turnover requirement. A percentage on its own tells you nothing: what decides whether a bonus is worth taking is how many times you have to bet it through and whether live casino counts. Read that line before you claim.
Cash rebate is 0.3%-0.6%, paid whether you win or lose. For anyone playing regularly that is usually worth more over a month than a one-off welcome bonus.
What we don't like
- The 0.3%-0.6% rebate is one of the lowest here. JK8 pays a flat 5.0%, and for regular players that gap adds up.
- Smaller game selection than the top sites. No Pragmatic Play and no Evolution Gaming.
- The desktop site is clearly second best. This is an app-first casino and awkward without the app.
- MYR 20 minimum deposit, double BK8 and twenty times GSLOT.
- Verifying your ID at sign-up delays your first game by a few minutes.
How players usually lose money (even at real casinos)
- Fake login pages. Copies of well-known casino sites are common in Malaysia and they look convincing. Get to WINBOX from a link you trust, check the web address before you log in, and never use a login link someone sends you on WhatsApp or Telegram.
- Leaving ID checks until you withdraw. Every licensed casino asks for ID sooner or later. Upload it when you sign up and your first withdrawal won't get held up.
- Breaking bonus rules without noticing. Going over the max bet while a bonus is active usually cancels your winnings. Autoplay makes this easy to do by accident.
What we measured at WINBOX
Each row is a number we took ourselves or a fact the operator publishes, next to where it sits against the other 21 casinos on this site. Nothing here is a score we invented.
| What | WINBOX | Against the rest |
|---|---|---|
| Payout, timed by us | 1-10 minutes | joint fifth fastest of the 22 we have timed |
| Minimum deposit | MYR 20 | 14 of the 21 priced in ringgit let you start smaller |
| Cash rebate | 0.3%-0.6% | against a best of 11% elsewhere on this site |
| Independent game testing | none published | 5 of the 22 do publish lab results |
| Licence | Philippine Amusement and Gaming Corporation (PAGCOR) | the PAGCOR accreditation stopped being live at the end of 2024 |
| Free credit | MYR 10 - MYR 20 | one of 14 of the 22 offering it |
How WINBOX compares on the one thing we measured
Every casino below was tested the same way: a withdrawal, timed from the moment it was requested. Out of the 22 we have timed, WINBOX came ninth.
| Casino | Withdrawal (we timed it) | Min deposit | Licence on its site |
|---|---|---|---|
 811C | 1-5 minutes | MYR 30 | Gaming Curacao |
 GSLOT | 1-5 minutes | MYR 1 | Gaming Curacao |
 EG33 | 2-8 minutes | MYR 10 | First Cagayan |
 S188 | 5-8 minutes | MYR 30 | First Cagayan |
 BK8 | 1-10 minutes | MYR 10 | Anjouan |
| WINBOX | 1-10 minutes | MYR 20 | PAGCOR |
Other casinos we checked
Want stronger regulation than WINBOX has? These have it:
Is 811C legit? · Is GSLOT legit? · Is 96M legit?
Brands readers ask about that we haven't tested: AsiaBet33 review · 12Play review · 22Bet review · 188BET review
Bottom line
WINBOX is safe to use based on what we've seen. It pays out, the games are real, and the licence is printed on the site but no longer backed by a regulator. Whether it suits you is another question. Our full WINBOX review covers withdrawal limits, bonus terms and what we didn't like.
We have no sign-up link for WINBOX. Of the casinos we did sign up to ourselves, these paid fastest in our tests:
GSLOT — 1-5 minutes
811C — 1-5 minutes
MIDAS55 — 1-10 minutes
Affiliate links. We hold no link for WINBOX, so this page earns us nothing either way.
Compare: 2026 test data for all casinos · fastest withdrawal casinos · lowest deposit casinos · all 22 reviews
Frequently asked questions
What is WINBOX?
WINBOX is an online casino that takes Malaysian players, running since 2021. It lists a Philippine Amusement and Gaming Corporation (PAGCOR) licence and offers slots, live casino, sports betting, 4D, fishing games and arcade games.
Is WINBOX legit or a scam?
Legit, on what we could test: WINBOX uses games from real studios and paid our withdrawal in 1-10 minutes. We rate it 4.05/5. Its licence is thinner than the badge suggests: the Philippines revoked every offshore gaming licence on 31 December 2024, so the PAGCOR part is not a regulator you can complain to.
Is WINBOX safe for Malaysian players?
Yes, from what we've seen. Sign-up was normal, the payout arrived in 1-10 minutes and live chat answered. The weak spot is what happens in a dispute, not day-to-day use. See the licence section above.
Does WINBOX actually pay out?
Yes. Our withdrawal arrived in 1-10 minutes. The most you can take out in one go is MYR 50,000.
Are the games at WINBOX rigged?
The slots and live tables are not something WINBOX can rig: they are licensed from Lion King, AE Sexy, SBOBET and SV388, and the random number generators behind them are certified separately from anything the casino says about itself. What an operator does control is whether a withdrawal actually arrives, so that is the part we tested: ours came back in 1-10 minutes.
What licence does WINBOX have?
Philippine Amusement and Gaming Corporation (PAGCOR). In 2026 that is worth less than it looks: the Philippines revoked every offshore gaming licence on 31 December 2024, so the PAGCOR part is not a regulator you can complain to. It doesn't publish any outside game testing.
Is WINBOX legal in Malaysia?
Malaysia doesn't license online casinos, and WINBOX is licensed offshore. Gambling in Malaysia is covered by laws such as the Common Gaming Houses Act 1953 and the Betting Act 1953. It's up to you to follow the law where you live.
Is WINBOX legal in Singapore?
No. WINBOX accepts SGD but has no Singapore licence. Under the Gambling Control Act 2022, betting with an unlicensed online site can cost a player a fine of up to S$10,000, up to six months in jail, or both. Legal online betting in Singapore goes through Singapore Pools.
What do players complain about at WINBOX?
We didn't have a withdrawal refused in our 2026 tests. Complaints at sites like this usually come down to withdrawals held for unfinished ID checks, winnings cancelled for breaking bonus rules, and balances lost on fake copies of the site.
How do I avoid a fake WINBOX site?
Fake copies of casino login pages are common. Use a link you trust, check the web address before logging in, and ignore login links sent to you by message.
What should I do if WINBOX doesn't pay me?
First check two things: is a bonus rollover still running, and is your ID verification finished? Most stuck withdrawals come down to one of those. If it's neither, contact live chat and keep screenshots. WINBOX still lists a PAGCOR licence, and until the end of 2024 that would have given you a regulator to complain to. It no longer does: the Philippines revoked every offshore gaming licence on 31 December 2024 under Executive Order 74, and Republic Act 12312, signed in October 2025, made the ban permanent. PAGCOR does not license or take complaints about casinos serving players outside the Philippines any more, so in practice WINBOX's own support is where a dispute starts and ends.