Introduction
AWClub (awclub.fun) takes our responsibility to protect every member's privacy seriously. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.
This document details what data we collect, why we need it, how we use it, and what choices you have as a member. By continuing to use the AWClub platform, you agree to the terms set out in this Privacy Policy.
AWClub does not sell, rent, or transfer your personal data to any third party for marketing purposes without your explicit consent.
Information We Collect
To deliver the best, safest, and most compliant service, awclub collects the following categories of information:
| Data Category | Example Information | Primary Purpose |
|---|---|---|
| Identity Information | Full name, date of birth, identification card number | Identity verification (KYC) |
| Contact Information | Email address, phone number, residential address | Communication and support |
| Financial Information | Bank account details, transaction history | Deposit and withdrawal processing |
| Usage Data | IP address, device type, activity history | Platform security and improvements |
| Technical Data | Server logs, browser information, session cookies | Technical performance and fraud detection |
All information collected is based on legitimate operational needs and is only gathered when strictly necessary for platform operations.
How We Use Your Data
AWClub uses collected information solely for legitimate and transparent purposes. The primary uses of your data are:
- Account Verification: Verifying your identity through the KYC process to ensure security and prevent fraud.
- Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and efficiently.
- Service Communications: Sending important notifications related to your account, transactions, promotions, and platform updates.
- Platform Improvements: Analysing usage patterns to enhance the overall user experience and system performance.
- Legal Compliance: Meeting legal obligations, including reporting to the relevant regulatory bodies when required.
- Fraud Prevention: Detecting and investigating any suspicious or unauthorised activity on the platform.
- Customer Support: Providing relevant and personalised assistance when you contact our support team.
AWClub will not use your data to make automated decisions that materially affect your rights without clear notice and an opportunity for you to contest such decisions.
Sharing Information With Third Parties
AWClub shares your personal information only in limited circumstances and on legitimate grounds. Third parties that may receive a portion of your data include:
- Payment Service Provider: Payment gateways and financial institutions that process your transactions — only data necessary for the transaction will be shared.
- KYC Service Provider: A third-party identity verification platform that helps us securely verify your information.
- Cloud Infrastructure Provider: Cloud hosting and computing services that store and process your data in a secure, encrypted environment.
- Relevant Authorities: Law enforcement agencies or regulatory bodies when required by Malaysian law.
All third-party partners of awclub are required to sign strict data protection agreements and are only permitted to use your data for specified purposes.
Security & Data Protection
Protecting your personal data is AWClub's top commitment. We continuously invest in cutting-edge security infrastructure to ensure your information remains safeguarded at all times. Our security measures include:
- 256-bit SSL Encryption: All data transmitted between your device and awclub servers is encrypted using industry-standard SSL/TLS technology.
- Data-at-Rest Encryption: Sensitive data such as financial information and identity documents are stored in encrypted form on protected servers.
- Internal Access Controls: Only authorised AWClub staff may access your personal data, and every access is recorded in an audit log.
- 24/7 Monitoring: A round-the-clock threat monitoring system that detects and responds to any intrusion attempts.
- Regular Security Testing: Security audits and penetration testing are conducted regularly by independent security experts.
- Two-Factor Authentication: An additional security layer via two-factor authentication is available to protect your account login.
While we take all reasonable precautions, no security system is entirely foolproof. We encourage you to play an active role by safeguarding your password and account login credentials.
Cookies & Tracking Technologies
AWClub uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use include:
- Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
- Performance Cookies: Helping us understand how users interact with the platform so we can make relevant improvements.
- Functional Cookies: Saving your preferences such as language and display settings to deliver a more personalised experience.
- Analytics Cookies: Collecting anonymous information about platform usage for analysis and service improvement purposes.
You can manage your cookie settings through your internet browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the AWClub platform.
Your Rights as a Member
Under the Personal Data Protection Act 2010 and AWClub's policies, you have the following rights regarding your personal data:
To exercise any of the rights above, please contact our privacy team via the email address listed at the bottom of this page. We will process your request within 30 business days.
Data Retention Period
AWClub retains your personal data only for as long as necessary to fulfil the stated purposes or as required by law. Generally:
- Active Account Data: Retained for as long as your account is active and for a minimum of 7 years after account closure to comply with financial regulatory requirements.
- Transaction Records: Retained for a minimum of 7 years in line with financial reporting and anti-fraud requirements.
- KYC Documents: Retained for 5 years after the business relationship ends to comply with anti-money laundering regulations.
- Communication Logs: Retained for 3 years for customer support reference and dispute resolution purposes.
- Technical Data: System logs and analytics data are retained for a maximum of 12 months before being automatically deleted.
Children's Privacy
The awclub platform is exclusively for users aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18. Should we discover that a minor's information has been inadvertently collected, we will promptly delete that information and close the relevant account.
If you are a parent or guardian and believe your child has registered on our platform, please contact our support team immediately so we can take the appropriate action.
Changes to the Privacy Policy
AWClub reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When material changes occur, we will:
- Displaying a clear notice on the platform's home page for a minimum of 30 days.
- Sending notifications via registered email to all active members.
- Updating the "Last Updated" date displayed at the top of this page.
Your continued use of the awclub platform after changes take effect constitutes your acceptance of the updated Privacy Policy.
Contact Our Privacy Officer
If you have any questions, concerns, or wish to exercise your privacy rights, our team is ready to assist. You may contact the awclub Data Protection Officer via:
- Privacy Email: [email protected]
- General Support Email: [email protected]
- Response Time: Within 3–5 business days
- Supported Languages: Malay and English
For complaints that cannot be resolved through our internal channels, you have the right to submit a complaint to the Malaysia Personal Data Protection Department or the relevant regulatory authority.