Privacy Policy ace67 —
Member Data Protection & Privacy

1 Introduction

Ace67 understands that your trust is our most valuable asset. We know that when you register and play on our platform, you are entrusting us with some of your personal information — and we do not take that responsibility lightly.

This Privacy Policy ("Policy") explains in detail how ace67 ("we", "Platform") collects, processes, stores, and protects your personal data ("Member", "you") when you use the ace67.plus website, our mobile app, or any related services.

We operate in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Every decision relating to data processing is made with your privacy and security as a member as our top priority.

If you have any questions about how we handle your data, our privacy team is ready to assist via the support channels available on the platform.

2 Personal Data We Collect

Ace67 only collects data that is genuinely necessary to provide you with a safe, seamless and quality service. The following are the categories of data we collect:

We do not collect sensitive data such as medical information, biometric data, or credit card details directly — all payments are processed through trusted, integrated payment gateways with end-to-end encryption.

3 How We Collect Data

Your personal data is collected through the following methods:

• Account Registration: Information you provide during the registration process, including your name, email, phone number, and date of birth.
• KYC Verification: Identity documents and proof of address uploaded during the identity verification process.
• Financial Transactions: Details related to deposits and withdrawals you make through the platform.
• Platform Usage: Data generated automatically as you browse and play on ace67, including activity logs and session data.
• Support Communications: Chat and email records between you and the ace67 customer support team.
• Cookies and Similar Technologies: Technical information collected automatically via cookies and tracking technologies as described in Section 7.

4 Data Usage Purposes

Ace67 uses your personal data for clear and legitimate purposes only. We do not process your data for any purpose other than those stated below:

• Account Management: Creates, manages, and maintains your account on the ace67 platform.
• Identity Verification: Conducts the KYC process to comply with anti-money laundering (AML) legal requirements.
• Payment Processing: Processes deposits, withdrawals, and any financial transactions related to your account.
• Service Provision: Enables you to access all games and features on the ace67 platform.
• Security and Fraud: Detects and prevents fraudulent activity, hacking, and platform abuse.
• Customer Support: Helps resolve queries, complaints, and technical issues you report.
• Platform Communications: Sends important notifications relating to your account, security, and service changes.
• Service Improvement: Analyses usage patterns anonymously to improve platform quality.
• Legal Compliance: Fulfils legal and regulatory obligations imposed on online platform operators.

Where you have given consent, we may also use your data to send relevant promotional information and bonus offers. You can withdraw this consent at any time through your account settings.

5 Data Sharing with Third Parties

Ace67 does not share your personal data with third parties for marketing purposes. Your data is only shared in limited and necessary situations, namely:

• Payment Providers: Payment gateways integrated with our platform receive the data required to securely process your financial transactions.
• Technology Service Providers: Companies providing technical infrastructure, cloud hosting and cybersecurity services to ace67 — all bound by strict confidentiality agreements.
• Authority: Government agencies, law enforcement, or regulatory bodies when required by law or court order.
• Game Providers: Third-party gaming companies that provide game content on our platform receive only the session data required to run the games — no personally identifiable information is shared.

6 Data Security

Protecting your data is not merely a legal obligation for us — it is a moral responsibility we take seriously. ace67 implements multiple layers of security to safeguard member personal data:

• Data Encryption: All stored data is protected with AES-256 encryption and all data transmissions use TLS 1.3 protocol.
• Access Control: Access to systems containing members' personal data is restricted to authorized personnel only, with mandatory two-factor authentication.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity.
• Regular Security Audits: ace67 conducts regular independent penetration testing and security audits to identify and patch any system vulnerabilities.
• Data Backup: Data is regularly backed up to a separate, secure location to ensure service continuity and data recovery in the event of any disruption.

While we take all reasonable precautions, no security system can guarantee 100% safety under all circumstances. You also play a role in keeping your account secure by using a strong password and never sharing your login credentials with anyone.

7 Cookies and Tracking Technologies

Ace67 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helps us understand how members interact with the platform for technical improvement purposes — data is collected anonymously.
• Preference Cookies: Remembers your settings and preferences such as your chosen language and display configuration for a more comfortable experience.
• Security Cookies: Used to detect and prevent fraudulent activity and to ensure the security of your login sessions.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the ace67 platform.

8 Your Rights as a Member

Under Malaysia's PDPA and the data protection principles we uphold, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our privacy team via Live Chat or support email. All requests will be processed within 7 working days and we may require identity verification before processing certain requests for security purposes.

9 Data Retention

Ace67 retains your personal data for as long as your account is active and for the period required after account closure to fulfil legal and regulatory obligations.

• Active Account Data: Retained for the duration that your account remains active on the ace67 platform.
• Financial & KYC Data: Retained for a minimum of 7 years after account closure in accordance with Malaysia's anti-money laundering legal requirements.
• Communication Logs: Customer support interaction records are retained for 3 years for quality assurance and dispute resolution purposes.
• Technical Data: System logs and anonymous usage data are retained for 12 months for technical improvement purposes.

Once the applicable retention period has expired, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

10 Changes to the Privacy Policy

Ace67 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technology. All amendments will be communicated to members via:

• In-platform notification via ace67 within at least 14 days before the amendments take effect.
• Email notifications sent to the email address registered to your account.
• Update the "Last Updated" date at the top of this document.

Continued use of the ace67 platform after the amendment's effective date constitutes your acceptance of the updated Privacy Policy. If you do not agree with the amendments, please contact us to discuss your available options before the effective date.

11 Contact Our Privacy Team

If you have any questions, concerns or wish to exercise your privacy rights, the ace67 privacy team is available to help at any time:

• Live Chat: Available 24/7 directly within the platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — for official requests relating to personal data rights.
• Support Email: [email protected] — for general privacy and data enquiries.

For data rights requests (access, correction, deletion), please include your account number and a detailed description of your request. All requests will be acknowledged within 24 hours and resolved within 7 business days.

We also encourage you to refer to Terms and Conditions and our Responsible Gaming for a more comprehensive understanding of your rights and responsibilities as an ace67 member.