Acewin Privacy Policy — Member Data Protection for Malaysia
Your privacy is not just a priority — it is our responsibility. acewin upholds strict data protection standards to ensure that every piece of information you share with us remains safe and secure at all times.
How Acewin Protects Your Information
We know your trust is your most valuable asset. Every security layer at Acewin is specifically designed to protect your personal and financial data.
High-Level Encryption
All data transmitted between your device and acewin servers is protected with 256-bit SSL encryption — the same standard used by major banking institutions in Malaysia. Data stored in our database is also encrypted using AES-256.
Secure KYC Identity Verification
Acewin's KYC process is handled through a certified third-party verification system. Your identification documents are retained only for the period required by law, and access to those documents is strictly limited and regularly audited.
No Sale of Data to Third Parties
Acewin has never and will never sell, rent, or trade members' personal information to any third party for marketing or commercial purposes. Your data belongs to you — not to us as a business asset.
Secure Server Infrastructure
Acewin servers are hosted in internationally certified data centers with multi-layered physical and digital protection. A 24/7 cyber threat monitoring system operates continuously to detect and address any unauthorized access attempts promptly.
Full Control in Your Hands
As an acewin member, you have the full right to access, correct, or request the deletion of your personal data. Our privacy team will process each request within 30 business days in accordance with the Personal Data Protection Act 2010.
Periodic Privacy Audits
Acewin conducts regular internal and external audits to ensure our data handling practices consistently meet the latest standards. Any changes to privacy procedures will be communicated to all members via email and in-platform notices.
1Introduction and Scope of This Policy
Welcome to acewin. This Privacy Policy explains in detail how acewin ("us", "Platform") collects, stores, processes, and protects your personal information as a member or visitor of acewin.pw.
We understand that privacy is deeply personal. For many Malaysian users, choosing to register with any online platform means placing trust in that platform to handle sensitive data responsibly. Acewin takes this responsibility seriously and is committed to ensuring all our actions regarding personal data are transparent, accountable, and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).
This policy applies to all users of the Acewin platform, including unregistered visitors, prospective members in the registration process, active registered members, and former members whose accounts have been closed. By continuing to use the Acewin platform after reading this policy, you are deemed to have understood and agreed to how we handle your personal data.
This Privacy Policy forms part of Acewin's overall legal framework, which includes Terms and Conditions and Responsible Gaming Policy. You are advised to read all these documents in full to understand your rights and responsibilities as an Acewin member.
2Types of Personal Data We Collect
Acewin only collects data necessary to provide our members with a secure, lawful, and high-quality service. Below is a summary of the types of data we collect and their primary purposes:
| Data Category | Example Information | Purpose |
|---|---|---|
| Identity Information | Full name, date of birth, identity card / passport number | KYC Age Verification |
| Contact Information | Email address, mobile number, residential address | Communications Account Security |
| Financial Information | Bank account number, bank name, deposit and withdrawal transaction records | Payments Anti-Money Laundering |
| Technical Data | IP address, device type, web browser, operating system, approximate location | Security Platform Improvements |
| Activity Data | Game records, betting history, wins, login and logout logs | Accountability Legal Compliance |
| User Preferences | Language settings, favourite games, notification settings | User Experience |
We may also collect information you voluntarily provide when communicating with our customer support team, such as live chat transcripts, emails, or complaint reports. This data is retained for quality control and dispute resolution purposes.
3Purpose of Personal Data Collection
Acewin collects and processes your personal data on valid legal bases, including contractual necessity, legal obligations, legitimate platform interests, and your consent. The primary purposes of our data collection are as follows:
- Account registration and management: To create, verify, and manage your member account and ensure every account is owned by a legitimate individual.
- Payment processing: To process deposits and withdrawals securely and accurately to the payment method you have registered.
- KYC and AML legal compliance: To fulfil legal obligations related to identity verification (Know Your Customer) and anti-money laundering (AML) as required by the relevant regulatory bodies.
- Platform security: To detect and prevent fraud, account abuse, bot activity, and any other security threats that could affect members or the platform.
- Service communications: To send important notifications regarding your account, transactions, and policy changes that require your attention.
- Customer support: To enable our support team to assist you in resolving any account or platform-related issues more effectively.
- Platform improvements: To analyse aggregated usage patterns to help us improve the design, performance, and overall experience of the acewin platform.
- Responsible gaming: To monitor gambling patterns that may indicate a problem and take proactive steps in line with our responsible gaming policy.
Acewin will not use your personal data for any purpose not stated in this Privacy Policy without first obtaining your additional consent.
4How We Use and Process Your Data
All personal data processing at acewin is carried out based on the principle of data minimisation — meaning we only use data that is strictly necessary for the stated purpose. acewin staff with access to members' personal data are limited to those who require such access to perform their respective duties, and all of them are bound by strict confidentiality agreements.
In the context of daily platform operations, your data is processed in the following ways:
- An automated fraud detection system analyses transaction patterns and login activity to identify any suspicious activity in real time.
- Game records and financial transactions are stored in an encrypted database and are only accessible by authorised personnel for audit and dispute resolution purposes.
- Contact details such as email and phone number are used to send OTPs (one-time passwords) for login and financial transaction verification.
- Platform analytics data is collected in aggregate and anonymised form for product improvement purposes — Acewin does not track individual behaviour for external targeted marketing.
If you receive a communication claiming to be from Acewin but asking for your login credentials, password, or full card number via email or text message, do not respond. Acewin will never request sensitive information through unsecured channels. Contact our customer support via the official live chat for verification.
5Data Sharing with Third Parties
Acewin does not sell, rent, or disclose members' personal information to third parties for commercial purposes. However, there are specific situations where we need to share your data with certain parties to ensure the platform operates smoothly and securely:
- Payment service providers: Required transaction information is shared with banks, e-wallet operators (Touch 'n Go eWallet, GrabPay, Boost), and other payment networks to process your deposits and withdrawals.
- KYC service providers: Your identity documents are submitted to a certified third-party identity verification service provider to fulfil KYC compliance requirements.
- Game software providers: Game platform providers partnering with Acewin may receive the minimum technical information required to enable games to function within our platform.
- Legal authorities: Acewin will disclose required data to the relevant authorities if mandated by law, court order, or direction from a legitimate regulatory body.
- Infrastructure service providers: Cloud computing and cybersecurity service providers that help us operate the platform may process some of your data in their capacity as data processors.
All third parties handling acewin data are required to sign a data protection agreement and may only use shared data for the purposes that have been agreed upon. acewin conducts thorough due diligence on all third parties before any data sharing is permitted.
6Cookies, Tracking Technologies, and Analytics
Acewin uses cookies and similar tracking technologies to ensure the platform functions correctly and to improve the user experience. Cookies are small text files stored on your device when you visit acewin.pw.
Types of cookies we use:
- Essential cookies: These cookies are strictly necessary for the platform to function. Without them, you will not be able to log in, navigate the platform, or use core features. These cookies cannot be disabled.
- Performance cookies: These cookies collect information about how visitors use our platform, such as which pages are visited most frequently. This information is used to improve how our platform functions. All data collected is aggregated and anonymized.
- Functionality cookies: These cookies allow the platform to remember choices you make, such as your preferred language and display settings, to provide a more personalized experience.
- Security cookies: These cookies help Acewin detect and prevent fraudulent activity, cyberattacks, and unauthorized access attempts to your account.
You can control and manage cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality and performance of the Acewin platform on your device.
Acewin does not use third-party advertising cookies or cross-site tracking technologies to display targeted ads to our members on other websites. We reject business models that rely on selling user behavioural data to advertisers.
7Your Privacy Rights as an Acewin Member
Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have certain rights regarding your personal data held by Acewin. We are committed to respecting and facilitating the exercise of these rights:
Right of Access
You have the right to request a copy of the personal data we hold about you at any time.
Right to Rectification
If any of your personal data is inaccurate or outdated, you have the right to request immediate correction.
Right to Erasure
You may request the deletion of your personal data, subject to applicable legal data retention obligations.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time.
Data Portability Right
You may request to receive your personal data in a machine-readable format for transfer to another platform.
Right to Restriction of Processing
In certain situations, you may request that we restrict the processing of your data while an issue is being resolved.
To exercise any of the above rights, please contact the acewin privacy team via email or live chat. We will process your request within 30 business days. In complex cases, this period may be extended by up to 60 days with prior notice to you.
8Our Data Security Measures
Acewin continuously invests in cybersecurity infrastructure to ensure the personal and financial data of our members remains protected against both internal and external threats. Key technical and organisational measures we employ include:
- 256-bit SSL/TLS encryption for all data communications between user devices and acewin servers.
- AES-256 encryption for data stored in the database, including financial information and KYC documents.
- Two-factor authentication (2FA) for acewin internal system access by staff.
- Continuous 24/7 security threat monitoring by a dedicated cybersecurity team.
- Periodic penetration testing conducted by independent third-party security firms.
- Mandatory information security awareness training for all Acewin staff every quarter.
- A clearly defined and tested incident response procedure to ensure any data breach is identified, contained, and reported in the shortest time possible.
- Access restriction based on the principle of least privilege — staff only have access to data strictly necessary for their role.
In the event of any data breach affecting your personal information, acewin is committed to notifying affected members within 72 hours of the breach being confirmed, in line with international data protection best practices.
9Data Retention Period
Acewin does not retain your personal data longer than necessary for the purposes stated in this policy, or as required by law. The following are general guidelines for our data retention periods:
- Active account data: Retained for the duration your account remains active and for the additional period prescribed by law following account closure.
- Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements.
- KYC documents: Retained for a minimum of 5 years after account closure, or longer if required by law or for the purposes of an ongoing dispute resolution.
- Customer support communication logs: Retained for 3 years for quality control purposes and reference in the event of a future dispute.
- Platform analytics data: Aggregate and anonymised usage data may be retained indefinitely as it contains no personally identifiable information.
Once the stipulated retention period has lapsed, data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.
10Amendments to This Privacy Policy
Acewin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, technological developments, or updates to applicable legal requirements. The date of the latest revision will always be displayed at the top of this page.
For material amendments — that is, changes that significantly alter how we use your personal data — acewin will provide at least 14 days' advance notice before the amendment takes effect. This notice will be delivered via:
- An email sent to your registered address.
- Notices prominently displayed on the acewin.pw homepage.
- In-app notifications on the Acewin mobile app (where applicable).
Continued use of the Acewin platform after the effective date of any Privacy Policy amendment will be considered acceptance of the latest version of that policy.
11Contact the Acewin Privacy Team
If you have any questions, concerns, or complaints regarding this Privacy Policy or how Acewin handles your personal data, we encourage you to contact us directly. Our privacy team is dedicated to ensuring every inquiry is handled thoroughly and within a reasonable timeframe.
You can reach us through the following channels:
- Official Live Chat: Available 24/7 via the live chat button at the bottom right corner of the acewin platform — the fastest way to get an immediate response.
- Privacy Email: [email protected] — for written enquiries requiring documentation or formal privacy rights requests.
- Help Centre: Visit page FAQ us for answers to frequently asked questions on privacy and account security.
We aim to respond to all privacy-related inquiries within 5 business days. For more complex privacy rights requests, we will send an acknowledgment within 3 business days and resolve the request within 30 business days.
Acewin is committed to being a transparent and responsible platform. If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010.