Ace88 Privacy Policy – Our Commitment to Protecting Malaysian Users' Data

Welcome to the ace88 Privacy Policy. This document outlines ace88's commitment to protecting the personal data of all users on our platform. This policy applies to all individuals who register an account, browse the ace88.cash website, use the ace88 mobile app, or interact with any services provided by ace88.

Ace88 operates in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia as well as international best practice principles in personal data management. We believe that the trust of Malaysian users is our most valuable asset — and that trust begins with transparent, responsible, and secure data handling.

In this document, "personal data" refers to any information that can be used to identify you directly or indirectly, including your name, phone number, email address, financial information, and platform usage patterns.

Ace88 collects several categories of personal data in the course of providing our services to users in Malaysia:

We does not collect sensitive information such as health data, political views, religious beliefs, or biometric information, unless required by law.

Ace88 collects personal data through several key channels:

• Account Registration: Information you provide when registering a new account with ace88, including your name, email address, phone number, and date of birth.
• Identity Verification (KYC): Documents you upload during the identity verification process, such as a copy of your MyKad or bank statement.
• Financial Transactions: Information recorded when you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u / CIMB Clicks), as well as when making withdrawals.
• Platform Usage: Data collected automatically via cookies, web beacons, and other tracking technologies while you use the ace88 platform.
• Support Interactions: Information you share when contacting our customer support team via live chat or email.
• Third-Party Sources: In certain cases, we may receive information about you from payment providers, identity verification companies, or legitimate public sources.

Ace88 uses your personal data solely for legitimate, stated purposes as outlined below. We will not process your data for unrelated purposes without first obtaining your consent:

• Service Provision: Creating and managing your account, processing deposits and withdrawals in MYR, settling Sports Betting wagers, and providing access to Live Casino games and slots.
• Identity Verification: Meeting KYC and Anti-Money Laundering (AML) requirements mandated by law, including verifying the minimum age of 18.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multiple account usage, and any misuse of the ace88 platform.
• Customer Support: Providing technical assistance and resolving complaints or disputes effectively.
• Service Improvement: Analysing usage patterns to improve the interface, enhance game offerings, and refine the overall user experience.
• Marketing Communications: Sending promotional offers, bonus information, and platform updates — only if you have opted in to receive such communications.
• Legal Compliance: Comply with legal obligations, regulations, and directives from relevant authorities.

Ace88 does not sell, rent, or trade users' personal data to third parties for their own commercial purposes. Your data is only shared in the following situations:

• Service Providers: Companies that assist ace88 in operating the platform, including payment processing providers (Touch 'n Go, GrabPay, DuitNow, FPX), casino game software providers, and cloud service providers. All such parties are bound by confidentiality agreements and are prohibited from using your data for any other purpose.
• Regulatory Authorities: Where required by Malaysian law or upon instruction from a lawful authority, ace88 will disclose the requested information.
• Fraud Prevention: Certain data may be shared with industry parties to detect and prevent fraud, money laundering, or other illegal activities.
• Business Transfer: In the event of a merger, acquisition, or sale of ace88 assets, user data may be transferred to the receiving entity, subject to the same privacy protections.

User data security is ace88's highest technical priority. We implement multiple layers of protection to ensure your data remains safe at all times:

• 256-Bit SSL Encryption: All communications between your device and ace88's servers are encrypted using TLS 1.3 — the highest security standard available.
• Two-Factor Authentication (2FA): 2FA is available for all accounts as an added layer of protection during login.
• Real-Time Monitoring: A threat detection system operates 24 hours a day to identify suspicious activity.
• Internal Access Controls: The principle of least privilege applies — only staff who genuinely require access to user data are permitted to do so.
• Regular Security Audits: Periodic security assessments are conducted by independent third parties to identify and address vulnerabilities.
• Encrypted Financial Data: Sensitive financial information is not stored directly — it is handled through licensed payment providers operating under the highest security standards.

However, we wish to remind you that no security system can guarantee 100% absolute protection against all cyber threats. You are also responsible for safeguarding your ace88 account password and login credentials.

Ace88 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by Malaysian law:

• Active Account Data: Retained for the duration of your active account and up to 7 years after account closure to meet anti-money laundering and tax record requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with Malaysian financial regulatory requirements.
• Technical Logs: Retained for 12 months for security and technical troubleshooting purposes.
• Customer Support Records: Retained for 3 years or for as long as necessary to resolve any outstanding disputes.

When data is no longer needed, it will be securely deleted or anonymised using industry-standard procedures. You may request early deletion of your data through the process described in Section 9.

Ace88 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

You can manage your cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and experience of using the ace88 platform.

As an ace88 user who is a Malaysian citizen or resident, you have the following rights under PDPA 2010 and our privacy policy:

To exercise any of the above rights, contact the ace88 privacy team at support@ace88.cash with the email subject "Personal Data Rights Request". We will respond within 30 days from the date your request is received.

The ace88 platform is strictly for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18. If you become aware that someone under 18 has registered an account with ace88, please contact us immediately at support@ace88.cash.

If we discover that personal data has been collected from an underage individual without proper verification, the account in question will be terminated immediately and all collected data will be deleted as securely as possible.

In the course of operating the ace88 platform, your personal data may be processed or stored on servers located outside Malaysia — for example, servers belonging to game software providers or international cloud storage platforms.

When this occurs, ace88 ensures that the data transfer is carried out under the following conditions:

• The recipient country has a level of data protection equivalent to or higher than that of Malaysia
• Binding standard data transfer agreements have been established with the receiving parties
• Appropriate technical and organisational measures have been implemented to protect data throughout the transfer process

All third-party service providers engaged by ace88 are required to adhere to the data protection standards set out in their service agreements with us.

Ace88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or service improvements. You will be notified of any material amendments via:

• In-platform notification on ace88 at least 14 days before amendments take effect
• Email to your registered email address
• Updates the "Last Updated" date at the top of this document

Your continued use of the ace88 platform after any amendments take effect will be considered acceptance of the revised policy. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ace88 handles your personal data, please contact us:

• Privacy Email: support@ace88.cash (Subject: "Privacy Enquiry")
• Live Chat: Available 24/7 via the ace88 platform

Our team will respond to privacy-related inquiries within 14 working days. For more complex requests such as data access or deletion applications, we aim to provide a full response within 30 days in accordance with PDPA requirements.