acewin8 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how acewin8 ("acewin8", "we", "us", or "our") collects, processes, stores, and protects personal data relating to individuals ("you" or "your") who access or use the acewin8 platform at acewin8.club, including all associated gaming services, account functions, and support channels.

acewin8 processes personal data in accordance with applicable data protection legislation and the requirements of its gaming licence. By registering an account on acewin8 or continuing to use the Platform following publication of any updated version of this Policy, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with the acewin8 Terms and Conditions, which govern your use of the Platform generally.

2. Who We Are

acewin8 is the operator of the online gaming platform accessible at acewin8.club. acewin8 acts as the data controller in respect of personal data collected from players registered on the Platform. As data controller, acewin8 determines the purposes and means by which personal data is processed.

For any queries relating to this Policy or to the processing of your personal data by acewin8, you may contact the acewin8 data protection team via the Support contact details set out in Section 14 of this Policy.

3. Data We Collect

acewin8 collects the following categories of personal data in the course of operating the Platform and delivering services to registered players:

• Identity Data: Full legal name, date of birth, gender, and nationality as provided during account registration or KYC verification. A copy of your Malaysian Identity Card (MyKad) or passport may be collected as part of identity verification.
• Contact Data: Malaysian mobile number, email address, and residential address as registered to your acewin8 account.
• Financial Data: Details of payment methods used for deposits and withdrawals, including Touch n Go eWallet account identifiers, Boost account identifiers, bank account or FPX details, and transaction reference numbers. acewin8 does not store full card numbers or banking credentials.
• Transaction Data: Records of all deposits, withdrawals, bets placed, game sessions, bonus claims, and wallet balance changes associated with your acewin8 account.
• Technical Data: IP address, device type, operating system, browser type and version, session duration, login timestamps, and other data automatically collected when you access the Platform.
• Usage Data: Game preferences, betting patterns, navigation behaviour within the Platform, and interaction with promotional content.
• Communications Data: Records of Support interactions, including live chat transcripts, WhatsApp communications initiated through acewin8 Support, and email correspondence.

4. How We Collect Data

acewin8 collects personal data through the following means:

• Direct provision: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting Support, or responding to surveys or promotions on acewin8;
• Automated collection: Technical and usage data collected automatically through cookies, log files, and similar technologies when you access the acewin8 Platform;
• Third-party sources: Identity and fraud screening data received from third-party KYC and AML screening providers engaged by acewin8 to assist with identity verification and regulatory compliance;
• Payment providers: Transaction confirmation and status data received from Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers integrated with acewin8.

5. Purpose & Legal Basis for Processing

acewin8 processes your personal data for the following purposes and on the following legal bases:

• Account administration and contract performance: Processing necessary to create and maintain your acewin8 account, authenticate your identity on login, and provide access to gaming services in accordance with the Terms and Conditions;
• Payment processing: Processing necessary to execute deposit and withdrawal transactions via your chosen payment method in MYR;
• KYC and regulatory compliance: Processing carried out to comply with acewin8's obligations under applicable anti-money laundering regulations, gaming licence conditions, and identity verification requirements. This processing is legally mandated and cannot be opted out of by players;
• Fraud prevention and security: Processing carried out in acewin8's legitimate interest in preventing fraudulent activity, account takeover, money laundering, and other forms of misuse of the Platform;
• Customer support: Processing necessary to respond to your support queries, resolve complaints, and manage dispute resolution;
• Responsible gaming: Processing to monitor gaming behaviour, enforce deposit limits and self-exclusion requests, and identify potential problem gambling patterns in accordance with acewin8's responsible gaming obligations;
• Marketing communications: Where you have provided consent, processing to send you promotional communications about acewin8 offers, bonuses, and new game releases. You may withdraw this consent at any time by contacting Support.

6. Disclosure to Third Parties

acewin8 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Personal data is shared with third parties only in the following limited circumstances:

• Payment service providers: Data shared as strictly necessary to process deposit and withdrawal transactions. acewin8 integrates with Touch n Go eWallet, Boost, Maybank FPX, CIMB, and Public Bank and shares only the transaction data required by each provider;
• KYC and identity verification providers: Data shared with third-party providers engaged to carry out identity screening and document verification as part of the acewin8 KYC process;
• Game software providers: Certain game providers integrated into the acewin8 Platform may receive session and wagering data necessary to operate their games and resolve game-related disputes;
• Regulatory and law enforcement authorities: Data disclosed where required by law, court order, or regulatory direction from a competent authority;
• Professional advisers: Data shared with legal advisers, auditors, or compliance consultants acting under professional confidentiality obligations where necessary in connection with acewin8's legal or regulatory obligations.

7. International Data Transfers

acewin8 operates an internationally hosted platform and may engage service providers located outside of Malaysia, including game software studios, cloud infrastructure providers, and KYC screening providers with operations in other jurisdictions. Where personal data is transferred outside Malaysia, acewin8 takes appropriate steps to ensure that such transfers are made only to recipients that provide an adequate level of data protection, whether through contractual safeguards, certification schemes, or equivalent mechanisms.

Players who wish to obtain further information regarding the specific safeguards applicable to any international transfer of their personal data may contact acewin8's Support team for details.

8. Data Retention

acewin8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law or regulatory obligation. The following general retention principles apply:

• Account and transaction data is retained for a minimum of five years following account closure to comply with anti-money laundering record-keeping requirements;
• KYC documentation is retained for the period required under the applicable gaming licence and AML regulations, typically a minimum of five years from the date of collection;
• Support communications are retained for a period of three years following resolution of the relevant query or complaint;
• Technical and usage data collected via cookies and log files is retained for shorter periods as described in Section 9 of this Policy.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in accordance with acewin8's data deletion procedures.

9. Cookies & Tracking Technologies

acewin8 uses cookies and similar technologies to operate certain essential platform functions, maintain your logged-in session, and analyse how players use the Platform so that we can improve the user experience over time. The categories of cookies used on acewin8 are as follows:

• Essential / Strictly Necessary Cookies: Required for the basic operation of acewin8, including session authentication, maintaining your login state, and security functions. These cookies cannot be disabled without breaking core platform functionality.
• Performance / Analytics Cookies: Used to collect aggregated, anonymised information about how players navigate the Platform — which pages are visited most, where errors occur, and how long sessions last. This data is used internally to improve acewin8's platform and services.
• Functional Cookies: Used to remember preferences such as your preferred language settings and to personalise certain aspects of your acewin8 experience.

acewin8 does not use advertising or behavioural tracking cookies that follow you across external websites. You may manage cookie preferences through your browser settings; however, disabling essential cookies will impair your ability to use acewin8.

10. Security Measures

acewin8 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and acewin8's servers;
• Encrypted storage of passwords — acewin8 never stores passwords in plain text;
• Access controls limiting internal access to personal data to acewin8 personnel with a legitimate operational need;
• Automated monitoring for suspicious login activity, including flagging of login attempts from unrecognised devices or IP addresses;
• Regular security assessments of the acewin8 Platform and its underlying infrastructure.

Notwithstanding these measures, no method of electronic data transmission or storage is entirely without risk. acewin8 cannot provide an absolute guarantee against all security incidents; however, we will notify affected players and relevant authorities of any data breach as required by applicable law.

11. Your Data Rights

Subject to applicable data protection law, you have the following rights in respect of personal data held by acewin8 about you:

• Right of Access: You may request a copy of the personal data acewin8 holds about you at any time;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to acewin8's legal and regulatory retention obligations;
• Right to Restriction: You may request that acewin8 restrict the processing of your personal data in certain circumstances;
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact acewin8 Support via live chat or email at [email protected]. acewin8 will respond to all legitimate data rights requests within the timeframe required by applicable law. Note that certain rights may be limited where retention is required by acewin8's regulatory obligations.

12. Children & Minors

acewin8 does not knowingly collect personal data from any individual under the age of 21. The Platform is strictly intended for adults aged 21 and above, and registration by minors is prohibited under acewin8's Terms and Conditions. If acewin8 becomes aware that personal data has been collected from an individual under 21, the relevant account will be immediately closed and the data will be deleted or returned as appropriate.

If you are a parent or guardian and believe that a minor has registered an account on acewin8, please contact Support immediately so that the matter can be investigated and resolved.

13. Changes to This Policy

acewin8 reserves the right to update or amend this Privacy Policy at any time. Any material changes to the manner in which acewin8 processes your personal data will be communicated via a notice on the acewin8 Platform or via your registered contact details prior to the change taking effect where practicable. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of acewin8 following any update to this Policy constitutes your acceptance of the revised terms. Players are encouraged to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to acewin8's processing of your personal data, please contact the acewin8 data protection team through any of the following channels:

• 24/7 Live Chat available on the acewin8 Platform
• WhatsApp Support — contact number displayed within your acewin8 account dashboard
• Email: [email protected]

acewin8 aims to acknowledge all privacy-related enquiries within two business days and to provide a substantive response within the timeframes required by applicable data protection legislation.