ACGWin Privacy Policy
At ACGWin, protecting the personal data of our Malaysian players is not a compliance checkbox — it is a genuine obligation we take seriously. This Policy explains exactly what we collect, why we collect it, and how we keep it safe.
Contents
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. Data Processing & Purpose
- 6. Legal Basis for Processing
- 7. Data Sharing & Disclosure
- 8. Data Retention
- 9. Data Security
- 10. Cookies & Tracking
- 11. Your Rights
- 12. Minors & Age Policy
- 13. Cross-Border Transfers
- 14. Policy Amendments
- 15. Contact Us
1. Introduction
This Privacy Policy (hereinafter referred to as "Policy" or "Privacy Notice") describes how ACGWin (hereinafter referred to as "the Company", "we", "us", or "our") collects, uses, stores, shares, and protects personal data in connection with the online sports betting and casino platform operated at https://acgwin.click (hereinafter referred to as "the Platform").
ACGWin is committed to processing personal data in a lawful, fair, and transparent manner. This Policy is designed to give you — our registered User ("you", "User", or "Member") — a clear and complete understanding of your data rights and our data obligations.
This Policy applies to all Users who access the Platform, regardless of the device or method used. It covers data collected through website interactions, account registration, financial transactions, customer support communications, and any other interaction with ACGWin Services. By registering on the Platform and accepting our Terms & Conditions, you acknowledge that you have read and understood this Privacy Policy.
2. Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
- "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, location data, and online identifiers.
- "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, disclosure, and deletion.
- "Data Subject" — the individual to whom Personal Data relates; in the context of this Policy, this refers to registered Users of the Platform.
- "Data Controller" — ACGWin, as the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
- "Third Party" — any natural or legal person, other than ACGWin or the Data Subject, who processes Personal Data under instruction from ACGWin (also referred to as a "Processor") or who receives data in their own right.
- "Cookies" — small text files stored on a User's device when they access the Platform, used to retain session information, preferences, and analytical data.
- "KYC" — Know Your Customer; the identity and age verification process used by ACGWin to confirm the identity of registered Users before processing withdrawals or in response to compliance requirements.
- "Services" — all sports betting, live casino, slot games, and other features available through the Platform at https://acgwin.click.
3. Data We Collect
ACGWin collects the following categories of Personal Data in connection with its Services:
3.1 Identity and Registration Data
- Full legal name as per government-issued identification
- Date of birth (for age verification purposes)
- Residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam)
- Nationality and citizenship status
- Copies of identity documents (e.g., MyKad, passport) submitted during KYC
3.2 Contact and Account Data
- Email address
- Mobile phone number
- Username and encrypted password
- Account preferences and settings
3.3 Financial and Transaction Data
- Bank account numbers and details for supported Malaysian institutions (Maybank, CIMB, Public Bank, Hong Leong Bank)
- E-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX
- Deposit and withdrawal transaction records, including amounts in MYR
- Cryptocurrency wallet addresses where applicable (BTC / USDT)
- Credit and debit card details for Visa and Mastercard transactions (handled via PCI-DSS compliant payment processors)
3.4 Behavioural and Usage Data
- Betting history, wager amounts, game selections, and outcomes
- Session timestamps, duration, and frequency of Platform access
- Search queries and navigation paths within the Platform
- Bonus and promotion redemption history
3.5 Technical and Device Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser version
- Unique device identifiers and mobile advertising IDs
- Cookie identifiers and session tokens
3.6 Communications Data
- Records of customer support interactions via Live Chat and email
- Feedback, complaints, and dispute records
- Marketing preference flags and communication opt-in/opt-out status
4. How We Collect Data
ACGWin collects Personal Data through the following methods:
- Direct Information you voluntarily provide during account registration, identity verification, deposit or withdrawal requests, and customer support interactions.
- Automated Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session analytics.
- Cookies Data collected via cookies, web beacons, and similar tracking technologies as described in Section 10 of this Policy.
- Third Parties Data received from payment processors, identity verification service providers, and fraud detection partners who assist ACGWin in delivering and securing its Services.
ACGWin does not collect Personal Data from third-party social media platforms or purchase data from external marketing lists without explicit User consent.
5. Data Processing & Purpose
ACGWin processes Personal Data only for specified, explicit, and legitimate purposes. The table below summarises the primary processing activities and their corresponding purposes:
| Processing Activity | Purpose | Data Categories Used |
|---|---|---|
| Account registration | Create and manage your ACGWin Account | Identity, Contact |
| Age & identity verification (KYC) | Confirm you are 21+ and meet eligibility requirements | Identity, Document copies |
| Deposit & withdrawal processing | Execute and record financial transactions in MYR | Financial, Identity |
| Bet settlement & game operation | Process wagers and deliver gaming services | Behavioural, Financial |
| Fraud detection & security monitoring | Detect unauthorised activity, protect Platform integrity | Technical, Behavioural, Financial |
| Customer support | Respond to queries, complaints, and escalations | Contact, Communications |
| Responsible gambling monitoring | Identify at-risk behaviour and deliver player protection tools | Behavioural, Account |
| Marketing communications | Send promotions and offers where you have consented | Contact, Communications |
| Regulatory compliance & audit | Meet legal reporting and record-keeping obligations | All categories as required |
| Platform analytics & improvement | Understand usage patterns and improve user experience | Technical, Behavioural |
6. Legal Basis for Processing
ACGWin relies on the following legal grounds to process your Personal Data:
- 6.1 Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions to which you have agreed — including account management, bet settlement, and payment processing.
- 6.2 Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, age verification obligations, and financial record-keeping mandates.
- 6.3 Legitimate Interests: Processing conducted in pursuit of ACGWin's legitimate interests where these do not override your fundamental rights — including fraud prevention, Platform security, and service improvement.
- 6.4 Consent: Processing based on your freely given, specific, and informed consent — primarily for the delivery of marketing communications and the use of non-essential cookies. You may withdraw consent at any time by contacting our support team or adjusting your Account preferences.
7. Data Sharing & Disclosure
ACGWin does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your data in the following limited and controlled circumstances:
7.1 Service Providers and Data Processors
ACGWin engages carefully selected third-party service providers who process Personal Data on our behalf under binding contractual arrangements. These include payment processors (handling transactions through DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and card schemes), identity verification providers, IT infrastructure suppliers, and cybersecurity partners. All such processors are required to handle data in accordance with our instructions and applicable data protection standards.
7.2 Regulatory and Law Enforcement Authorities
ACGWin may disclose Personal Data to competent governmental, regulatory, or law enforcement authorities where required by applicable law, or in response to a lawful order, subpoena, or official request. Such disclosures are made only to the extent necessary to fulfil the relevant legal obligation.
7.3 Anti-Fraud and Anti-Money Laundering Partners
Where there is a reasonable suspicion of fraudulent activity, money laundering, or other financial crime, ACGWin may share relevant transaction and account data with specialist fraud prevention agencies or financial intelligence bodies, as permitted under applicable law.
7.4 Business Transfers
In the event of a merger, acquisition, or transfer of all or part of ACGWin's business assets, Personal Data held by ACGWin may be transferred to the acquiring entity. Users will be notified of any such transfer in advance, to the extent practicable, and their rights under this Policy will continue to apply.
8. Data Retention
ACGWin retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, or as required by applicable legal and regulatory obligations.
- Active Accounts: Personal Data associated with active accounts is retained for the duration of the account's existence and for a period after closure as required by law.
- Financial Records: Transaction records, deposit and withdrawal logs, and KYC documentation are retained for a minimum period of five (5) to seven (7) years following the last relevant transaction, in accordance with financial record-keeping requirements.
- Communications Data: Customer support records and complaint correspondence are retained for a minimum of three (3) years from the date of the interaction.
- Marketing Data: Consent records and marketing preference data are retained until consent is withdrawn and for a reasonable period thereafter for compliance purposes.
- Anonymised Analytics: Aggregated, anonymised usage data that cannot be re-linked to an individual may be retained indefinitely for Platform improvement purposes.
Where data is no longer required, ACGWin securely deletes or irreversibly anonymises it.
9. Data Security
ACGWin implements appropriate technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or unlawful disclosure. These measures include:
- 256-bit SSL/TLS encryption applied to all data transmitted between your device and our Platform.
- Password hashing using industry-standard cryptographic algorithms — we do not store plaintext passwords under any circumstances.
- Access controls limiting internal access to Personal Data on a strict need-to-know basis, with audit logging of all administrative access.
- PCI-DSS compliant payment processing for all card transactions handled through certified payment partners.
- Two-factor authentication (2FA) available to all Users and encouraged as a standard account security measure.
- Regular security assessments and vulnerability testing of Platform infrastructure.
While ACGWin employs robust technical safeguards, no method of electronic transmission or data storage is entirely infallible. Users are reminded to maintain the security of their own login credentials and to report any suspected unauthorised access to their Account to our support team immediately.
10. Cookies & Tracking Technologies
ACGWin uses cookies and similar tracking technologies to provide, secure, and improve the Platform experience. Cookies are small text files placed on your device when you visit the Platform.
10.1 Types of Cookies We Use
- Essential Cookies: Required for the Platform to function correctly. These include session authentication tokens, login state management, and security cookies. These cannot be disabled without impairing Platform functionality.
- Analytical Cookies: Used to understand how Users interact with the Platform — including pages visited, session duration, and feature usage — in order to improve the User experience. This data is processed in aggregated, anonymised form where possible.
- Functional Cookies: Used to remember your preferences, such as language and display settings, to provide a more personalised experience.
- Marketing Cookies: Used to deliver relevant promotions and targeted communications. These are only activated where you have provided explicit consent.
10.2 Managing Cookies
You may configure your browser settings to decline non-essential cookies or to be notified when cookies are being set. Note that disabling certain cookies may affect the functionality of some Platform features. For essential cookies required for login and security, disabling them will prevent normal Platform use.
11. Your Rights
As a Data Subject, you hold the following rights in relation to your Personal Data processed by ACGWin. To exercise any of these rights, please contact our support team via the details in Section 15.
- 11.1 Right of Access: You have the right to request a copy of the Personal Data ACGWin holds about you, along with information about how it is being processed.
- 11.2 Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request its correction.
- 11.3 Right to Erasure: Subject to applicable legal obligations (including financial record-keeping requirements), you may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected.
- 11.4 Right to Restrict Processing: You may request that ACGWin limit its processing of your data in certain circumstances — for example, while the accuracy of data is disputed.
- 11.5 Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that we provide your Personal Data in a structured, commonly used, and machine-readable format.
- 11.6 Right to Object: You have the right to object to the processing of your Personal Data where it is based on ACGWin's legitimate interests, including direct marketing.
- 11.7 Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to the withdrawal.
ACGWin will respond to all verified data subject requests within a reasonable timeframe, and no later than thirty (30) days from the date of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days, and will notify you accordingly.
12. Minors & Age Policy
Age verification is conducted as part of the registration process and at the point of withdrawal. Where ACGWin discovers that Personal Data has been collected from an individual below the minimum age of 21, the relevant Account will be closed immediately, all balances forfeited, and the personal data deleted as promptly as reasonably practicable.
If you believe that a minor has registered on the Platform or that data belonging to a minor is being processed, please contact our support team immediately at [email protected].
13. Cross-Border Data Transfers
ACGWin operates as an online platform and may engage service providers and infrastructure partners located in jurisdictions outside Malaysia, including cloud computing providers and cybersecurity vendors. Where Personal Data is transferred to a jurisdiction that does not provide the same level of data protection as Malaysia, ACGWin implements appropriate contractual safeguards — such as standard contractual clauses or equivalent protective mechanisms — to ensure that your data remains protected in accordance with the standards described in this Policy.
ACGWin does not transfer Personal Data to jurisdictions where adequate data protection cannot be assured without first implementing appropriate safeguards and, where required, notifying the relevant competent authority.
14. Policy Amendments
ACGWin reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we intend to process Personal Data for a new purpose or where significant changes to data sharing practices are proposed — ACGWin will notify registered Users in advance via email notification or a prominent on-site banner.
The effective date of the current version of this Policy is stated at the top of the document and in the sidebar. We encourage Users to review this Policy periodically. Continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms.
15. Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 11, or wish to raise a data protection concern, please contact ACGWin through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week, directly on the Platform — our preferred channel for time-sensitive queries.
- Email: [email protected] — please include "Privacy Request" in your subject line for data-related queries. We aim to respond within 15 minutes during peak hours (MYT).
For account closure, self-exclusion, and responsible gambling matters, please also visit our Responsible Gambling page. For general Platform terms and betting rules, please review our Terms & Conditions.
ACGWin — https://acgwin.click | This Privacy Policy was last updated on 1 January 2026.
How ACGWin Protects Your Data
256-Bit SSL Encryption
Every data transmission between your device and the ACGWin Platform is protected with bank-grade 256-bit SSL/TLS encryption — the same standard used by major Malaysian financial institutions.
Your Data Is Never Sold
ACGWin does not sell, rent, or trade your Personal Data to advertisers, data brokers, or marketing firms under any circumstance. Data sharing is strictly limited to operational necessity and legal compliance.
Full Data Subject Rights
You can access, correct, export, or request deletion of your Personal Data at any time. Submit your request via Live Chat or email and our team will respond within the required timeframe.
PCI-DSS Payment Security
All card transactions — Visa, Mastercard — are processed through PCI-DSS certified payment gateways. ACGWin does not store raw card data on its own servers.
Minimal Data Collection
We collect only what is genuinely necessary to operate your Account, process transactions, and fulfil legal obligations. We do not gather data speculatively or for purposes we cannot clearly justify.
Transparent Policy Updates
When this Privacy Policy changes materially, we notify registered Users by email before the changes take effect — not after. You will always have time to review updates before they apply to you.
Questions About Your Privacy?
Our support team is available 24/7 on Malaysian time to handle any privacy-related queries, data access requests, or concerns about how your information is used on ACGWin.
For players aged 21 and above only. Please gamble responsibly.