AceWin Privacy Policy – Protecting Your Personal Data in Malaysia

AceWin only collects personal data that is strictly necessary to provide our services safely and effectively. We do not collect excessive or irrelevant data. In general, the data we collect falls into three main categories.

A. Information You Provide Directly:

• Full name (as shown on MyKad)
• National identification number (MyKad) or passport
• Date of birth
• Active email address
• Malaysian mobile number
• Residential address
• Bank account or e-wallet details (for payment purposes only — we do not store full credit/debit card numbers)

B. Automatically Collected Information:

• Your device's IP address
• Browser type and version used
• Device operating system
• Pages visited within the AceWin platform and time of visit
• Activity log data — including bets placed, games played, and transactions made
• General location data (country/city, based on IP address — we do not access your GPS)

C. Information from Third-Party Sources:

In certain cases, AceWin may receive information about you from legitimate sources such as identity verification service providers, payment processors (such as DuitNow, Touch 'n Go eWallet, GrabPay, or FPX gateways), and fraud prevention agencies.

AceWin uses your personal data only for legitimate, necessary purposes directly related to the provision of our services. We do not use your data for purposes you would not expect or that are unrelated to the AceWin platform.

Marketing Communications Opt-Out: If you do not wish to receive promotional emails or SMS notifications from AceWin, you may opt out at any time via the "Unsubscribe" link in our emails, or by contacting the AceWin support team at support@acewin.run. Opting out of marketing communications will not affect important account-related communications.

AceWin does not sell your personal data. However, in certain limited and legitimate circumstances, we may need to share your data with specific third parties to ensure the platform operates properly and securely.

Parties That May Access Your Data:

• Payment Processors: Payment service providers that process your deposit and withdrawal transactions — including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX-linked banks such as Maybank2u and CIMB Clicks. They receive only the data necessary to process the relevant transaction.
• Identity Verification Service Providers: Third-party companies that assist AceWin with the KYC (Know Your Customer) process to verify member identities for security and legal compliance purposes.
• Game Software Providers: Companies that provide game software for the AceWin platform may access the game session data required to run those games. They are bound by strict confidentiality agreements.
• Legal Authorities: AceWin will disclose personal data to government authorities or law enforcement where legally required, such as pursuant to a court order or valid official directive.
• Cloud Services: AceWin's server infrastructure runs on internationally certified cloud services governed by data protection agreements that comply with global security standards.

AceWin invests seriously in data security infrastructure to ensure your personal information remains protected against unauthorised access, theft, loss, or misuse.

Technical Security Measures We Use:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols
• Data encryption at rest for all sensitive information
• Two-factor authentication (2FA) that members can enable for additional login protection
• Real-time threat monitoring system operating 24 hours a day
• Regular independent security audits
• Passwords are stored in hashed form and are unreadable (never stored as plain text)
• Strict internal access controls — only authorised personnel may access sensitive member data

Your Responsibilities: While AceWin takes all reasonable steps to protect your data, the security of your account also depends on your own actions. Make sure you use a strong and unique password for your AceWin account, never share your login credentials with anyone, and always log out from shared devices after using the AceWin platform.

AceWin uses cookies and related tracking technologies to enhance your experience on our platform, ensure security features function correctly, and understand how members use our services.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login session management, form security, and cart management. These cookies cannot be disabled as they are essential for the platform to operate.
• Functional Cookies: Saves your preferences such as preferred language, currency, and display settings. Helps the platform remember your settings between sessions.
• Analytics Cookies: Collects anonymous usage data to help us understand which pages are most visited, how long members spend on the platform, and where technical issues occur. This data is used solely to improve the AceWin platform.
• Security Cookies: Detect suspicious access patterns and help prevent unauthorised access to member accounts.

How to Manage Cookies: You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete, or block cookies. Please note, however, that disabling certain cookies may affect the functionality and user experience of the AceWin platform.

As an AceWin member and a Malaysian citizen or resident, you have certain rights regarding your personal data, all of which we fully respect.

To exercise any of the rights above, contact the AceWin privacy team by email at privacy@acewin.run with the subject line "Personal Data Rights Request". We will process your request within 30 business days.

AceWin retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration of your active account and for 6 years following account closure, in accordance with financial record-keeping requirements.
• Transaction Records: Retained for 7 years in accordance with Malaysian accounting and financial regulatory requirements.
• Support Communication Logs: Retained for 3 years for reference and dispute resolution.
• Activity Log Data: Retained for 12 months for security and analytics purposes, then anonymised or deleted.
• KYC Records: Retained for 5 years in accordance with anti-money laundering legal requirements.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you.

The AceWin platform is strictly for individuals aged 18 and above. AceWin does not knowingly collect personal data from children or individuals under the age of 18.

If we discover that personal data belonging to an individual under 18 has been collected without proper knowledge or consent, we will take immediate steps to delete that data and close the account in question. Any funds deposited by an underage individual will be returned to the rightful guardian through the established process.

AceWin reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data handling practices, legal requirements or new platform features.

How We Communicate Changes:

• The "Last Updated" date at the top of this page will be revised to reflect the most recent update.
• For significant changes or those that affect your fundamental rights, AceWin will send a notification via email to your registered address at least 14 days before the changes take effect.
• A notice regarding changes to the Privacy Policy will also be displayed on the AceWin platform login page for a reasonable period.

Continued use of the AceWin platform after any changes take effect constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before they come into effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by AceWin, please do not hesitate to get in touch with us.