Privacy Policy — AceWin8

AceWin8 (hereinafter "we", "us", "our", or "the Platform") operates the online gambling and sports betting services accessible at acewin8.cam. As a platform handling financial transactions and personal identity data for players across Malaysia — including individuals in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — we recognise that the responsible handling of personal data is inseparable from our core commitment to player trust.

This Privacy Policy (hereinafter "Policy") describes in detail the categories of personal data we collect from you, the purposes for which that data is processed, the basis upon which we process it, the parties with whom we may share it, the period for which it is retained, and the rights available to you as a data subject. This Policy forms part of our overall platform governance framework alongside our Terms & Conditions.

For the purposes of this Policy, the following terms carry the meanings assigned below:

AceWin8 collects personal data across several categories depending on your level of interaction with the Platform:

AceWin8 collects personal data through the following means:

• Direct Interactions: Data you provide when registering an account, submitting KYC documents, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated Technologies: Data collected passively as you navigate the Platform, including through cookies, web beacons, session logs, and device fingerprinting.
• Payment Processors: Transaction references and confirmation data received from Malaysian payment networks including FPX, DuitNow, and partner e-wallet providers upon completion of a payment.
• Identity Verification Services: Document verification outcomes and fraud screening results provided by third-party KYC service providers contracted by AceWin8.
• Third-Party Data Sources: In limited circumstances, we may supplement your profile with publicly available data or data from fraud prevention databases for compliance and security purposes.

AceWin8 processes your personal data for the following defined purposes:

• Account Management: Creating, maintaining, and administering your AceWin8 account, including processing login authentication and managing account settings.
• Transaction Processing: Executing deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20 in Malaysian Ringgit (MYR).
• Identity Verification and KYC: Verifying your identity, age (confirming 21+ eligibility), and the legitimacy of your payment methods in compliance with applicable anti-money laundering requirements.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct.
• Legal and Regulatory Compliance: Fulfilling our obligations under applicable gaming regulations, anti-money laundering laws, and financial crime prevention frameworks.
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality and responsiveness of our support services.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve game performance, user interface design, and feature development.
• Responsible Gambling: Monitoring wagering patterns to identify signs of problem gambling and to enforce responsible gambling tools such as deposit limits, session timers, and self-exclusion where invoked.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates where you have provided your consent to receive such communications. You may withdraw this consent at any time.

AceWin8 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the agreement formed when you register an account, including account administration and transaction execution.
• Legal Obligation: Processing required to comply with applicable anti-money laundering regulations, gaming licence conditions, financial record-keeping requirements, and other mandatory legal obligations.
• Legitimate Interests: Processing conducted for AceWin8's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing activities for which your specific, informed consent has been obtained, primarily relating to direct marketing communications. You have the right to withdraw this consent at any time without detriment to your account.

AceWin8 does not sell or rent your personal data. We may share your data with the following categories of third parties under strict contractual data processing obligations:

• Payment Service Providers: Malaysian financial institutions and payment networks — including FPX member banks, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency processing providers — solely for the purpose of executing your requested transactions.
• Identity Verification Providers: Third-party KYC and document verification services used to verify identity documents and screen against fraud, sanctions, and politically exposed person (PEP) lists.
• Technology and Hosting Providers: Cloud infrastructure, database, and cybersecurity service providers engaged to host and secure the Platform, all of whom are bound by data processing agreements.
• Game Content Providers: Licensed international game studios whose software is integrated into AceWin8 may receive anonymised session or wagering data necessary for game operation. No personally identifiable information is shared with game studios beyond what is technically necessary for gameplay delivery.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, AceWin8 may disclose personal data to competent authorities. We will notify you of any such disclosure where legally permissible to do so.

AceWin8 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session state, and analyse aggregated usage patterns for service improvement. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load balancing identifiers. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and last-used payment method, to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — pages visited, time on page, and navigation paths — to inform ongoing improvements to the user experience.
• Marketing Cookies: Where you have consented, these cookies may be used to deliver relevant promotional content within the Platform. You may withdraw consent for marketing cookies through your account settings.

You may manage cookie preferences through your browser settings. Note that disabling certain cookie categories may affect the functionality of the Platform. For full details on cookies used by AceWin8, please refer to our Cookie Settings panel accessible from your account dashboard.

AceWin8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations. Indicative retention periods are as follows:

• Account Data: Retained for the duration of your active account and for a period of five (5) years following account closure, to meet anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction in compliance with financial record-keeping obligations.
• KYC Documentation: Retained for five (5) years following the end of the business relationship, or longer where required by applicable law.
• Support Communications: Retained for a period of three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your consent and for a period of one (1) year following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, personal data is either permanently deleted from our systems or irreversibly anonymised such that it can no longer be associated with you as an individual.

AceWin8 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers — the same encryption standard employed by Malaysia's major banking institutions including Maybank2u and CIMB Clicks.
• Encryption of sensitive data at rest, including payment credentials and identity documents.
• Role-based access controls ensuring that personal data is accessible only to staff members with a legitimate operational need.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Two-factor authentication (2FA) requirements for account access and for internal administrative access to production systems.
• Incident response procedures to detect, report, and remediate personal data breaches within the timeframes required by applicable law.

Notwithstanding these measures, no electronic transmission or storage system is entirely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, AceWin8 will notify you in accordance with our legal obligations without undue delay.

As an AceWin8 user, you are entitled to the following rights in respect of your personal data. These rights may be exercised by submitting a request through our live chat support or by emailing us at the address provided in Section 15.

AceWin8 will respond to all valid data subject requests within thirty (30) calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days with notice to you. We will not charge a fee for reasonable requests unless they are manifestly unfounded or excessive.

AceWin8 is strictly prohibited to persons under the age of 21. We do not knowingly collect, process, or retain personal data from individuals below this age threshold. Our registration process includes age verification steps, and all accounts are subject to KYC verification that confirms the account holder's date of birth.

If AceWin8 becomes aware that personal data has been collected from a person under the age of 21 without parental or guardian verification, we will take immediate steps to delete that data, void any associated wagering activity, and permanently close the account in question.

To deliver our services, AceWin8 may transfer personal data to service providers and infrastructure partners located outside of Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place, including contractual data processing agreements that impose data protection obligations equivalent to those applicable in Malaysia.

We will not transfer your personal data to a jurisdiction that does not afford an adequate level of data protection without implementing appropriate contractual, technical, or organisational safeguards, and without informing you of the nature of such transfers upon request.

AceWin8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will provide advance notice through a platform notification or by email to the address registered on your account, no less than seven (7) days before the amended Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically to remain informed of how we protect your data. Your continued use of the AceWin8 Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by AceWin8, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the AceWin8 Platform. This is the fastest route for urgent data-related matters.
• Email: [email protected] — please allow up to 48 hours for a response to written privacy enquiries, and up to 30 calendar days for formal data subject requests.

When submitting a data subject request by email, please include your registered username, the email address associated with your account, and a clear description of your request. We may ask you to verify your identity before processing the request to protect against unauthorised access to your data.

For concerns related to responsible gambling tools, self-exclusion, or deposit limits, please refer to our Responsible Gambling page. For the full terms governing your use of the AceWin8 Platform, please review our Terms & Conditions.

This Privacy Policy was last updated on 1 January 2026. AceWin8 reserves the right to update this document in accordance with Section 14 above.