Privacy Policy AceWin – Your Personal Data Protection

1. Introduction

Welcome to the AceWin Privacy Policy page. We understand that your trust is our most valuable asset. When you register and use the AceWin platform, you entrust us with your personal information – and we do not take this responsibility lightly.

This Privacy Policy is an official document that fully and transparently describes how AceWin, as the data controller, collects, processes, stores, and protects your personal data. It also outlines the rights you hold under Malaysian law, specifically the Personal Data Protection Act 2010 (PDPA).

By using the AceWin platform — whether through the website, mobile app or any other channel we provide — you acknowledge that you have read, understood and agreed to this Privacy Policy. If you do not agree with any part of this policy, we encourage you to contact our support team before continuing to use the platform.

2. Data We Collect

AceWin only collects data that is strictly necessary to provide a safe, seamless, and responsible service. We do not collect data in excess or for purposes unrelated to the platform's operations.

2.1 Data You Provide Directly

• Registration Information: Full name, date of birth, identity card number (MyKad), gender, nationality
• Contact Information: Mobile number, email address, residential address
• Financial Information: Bank account number, bank name, account holder name for deposit and withdrawal purposes
• Verification Documents (KYC): Copy of identity card, utility bill, or other documents required for identity verification
• Communications: Any messages, complaints, or requests you send to our support team

2.2 Automatically Collected Data

• Technical Data: IP address, browser type, operating system, screen resolution, time zone
• Session Data: Login date and time, session duration, pages visited, in-platform actions
• Device Data: Unique device identifier, device model, app version
• Location Data: General location based on IP address (state/city) — not precise GPS coordinates
• Cookie Data: Session cookies, preference cookies and performance cookies as described in Section 6

2.3 Data from Third Parties

In certain situations, AceWin may receive information about you from trusted third parties, including KYC service providers, payment processors, and fraud prevention agencies. This data is used solely for identity verification and account security purposes.

3. How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. AceWin does not process your personal data for purposes not stated in this policy without obtaining additional consent from you.

• Account Management: Creating, verifying, and maintaining your account on the AceWin platform
• Transaction Processing: Securely and swiftly processing deposits, withdrawals, and all financial transactions
• Identity Verification: Conducting KYC checks required by Malaysian financial authorities
• Platform Security: Identifying and preventing fraud, money laundering, and unauthorized access
• Customer Support: Responding to enquiries, resolving complaints and providing technical support
• Legal Compliance: Fulfilling reporting obligations to the relevant Malaysian authorities
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and provide assistance
• Service Improvement: Analyzing aggregated data (not individual data) to improve the user experience
• Promotional Communications: Sending information about promotions and the latest offers – only if you have consented

4. Legal Basis for Data Processing

Under Malaysia's PDPA and internationally recognised data protection principles, AceWin processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfill the service agreement between you and AceWin – including transaction processing and account management
• Legal Obligation: Processing required under Malaysian law, including KYC obligations, AML (Anti-Money Laundering), and reporting to authorities
• Legitimate Interest: Processing for the purposes of fraud prevention, platform security, and service improvement – where these interests do not override your privacy rights
• Consent: For activities such as direct marketing and promotional communications, we rely on the explicit consent you provided during registration or at a later time

5. Data Sharing

AceWin understands that you entrust us with your personal data. We do not share your data with any third party except in the circumstances stated below, and only to the extent necessary.

5.1 Our Service Providers

We work with trusted service providers who help us operate the platform. These include DuitNow payment processors and gateways, KYC verification service providers, data analytics companies, cloud infrastructure providers and gaming software providers. All providers are bound by strict data protection agreements and are only permitted to process your data for purposes we specify.

5.2 Legal Authorities

AceWin may disclose your personal data to Malaysian authorities if required by law, court order, or legitimate investigative requirements. We will endeavour to notify you of any such disclosure unless prohibited by law from doing so.

5.3 What We Do Not Do

6. Cookies & Tracking Technologies

The AceWin platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how our platform is used.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functionality — without these, you cannot log in or use the platform properly. These cookies cannot be disabled.
• Security Cookies: Used to detect and prevent fraudulent activity, including identifying suspicious login sessions.
• Preference Cookies: Saving your preferences such as preferred language, display theme, and game settings so you don't have to reconfigure them every time.
• Analytics Cookies: Helping us understand how users interact with the platform, which pages are visited most and where users may encounter issues. This data is aggregated and does not identify individuals.

6.2 Cookie Controls

You can manage cookies through your browser settings. However, disabling essential cookies will affect platform functionality. For more information on managing cookies in major browsers, please refer to your browser's help documentation.

7. Data Security

Protecting your personal data from unauthorised access, breaches or misuse is AceWin's top priority. We continuously invest in the latest security infrastructure and practices.

7.1 Technical Measures

• 256-bit SSL/TLS encryption for all data communication between your device and our servers
• Encryption at rest for all stored sensitive data
• Multi-layered firewall and intrusion detection system (IDS) operating 24/7
• Network segregation and data segmentation to limit internal access
• Regular security audits by independent third parties
• Penetration testing twice a year

7.2 Organisational Measures

• Minimum access principle – each staff member only has access to the data required for their role
• Mandatory security awareness training for all staff
• Background checks for staff handling sensitive data
• Established security incident management procedures

8. Data Retention Period

AceWin does not retain your personal data longer than necessary. Retention periods are determined based on operational needs, legal obligations, and our legitimate interests.

9. Your Rights

As an AceWin platform user and data subject under Malaysia's PDPA, you have the following rights regarding your personal data. AceWin is committed to respecting and facilitating the exercise of these rights.

To exercise any of the above rights, please contact our support team via live chat or email. We may need to verify your identity before processing your request to ensure the security of your data.

10. International Data Transfers

In the course of platform operations, AceWin may transfer your personal data to servers or service providers operating outside Malaysia. Any such transfer is carried out with adequate safeguards, including the use of approved standard contractual clauses, ensuring your data receives a level of protection equivalent to that provided in Malaysia.

All our international partners are carefully selected based on their security reputation, compliance with international data protection standards (including ISO 27001), and their ability to meet our contractual requirements. We do not transfer data to countries without adequate data protection laws without additional contractual safeguards.

11. Children's Privacy

The AceWin platform is exclusively for adult users aged 18 years and above. We do not intentionally collect, process, or store personal data of individuals under the age of 18.

If you believe a child has provided us with personal information without valid parental or guardian consent, please contact us immediately. We will take the necessary steps to verify and delete that data as soon as possible.

We conduct age verification during registration and identity document checks as part of our KYC process to prevent underage sign-ups.

12. Policy Amendments

AceWin reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business decisions. Each new version will include a clear effective date at the top of this document.

For significant changes, we will notify you via:

• In-platform notifications during your login session
• Email to the address registered with your account
• Announcement on the platform's main page

Continued use of the platform after the effective date of any amendments constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we handle your data.

13. Contact Us

If you have any questions, concerns or wish to exercise your rights regarding personal data, the AceWin privacy team is available to assist you every day, around the clock.