Ace666 Privacy Policy – Malaysia User Data Protection

1 ace666 Privacy Introduction and Commitment

Ace666 takes the privacy of every user on our platform seriously. As an online entertainment platform serving users across Malaysia, we recognise that user trust is the foundation of every relationship we build.

This Privacy Policy ("Policy") details the types of personal information we collect, the purposes for collection, how we use it, and the measures we take to keep your information safe and protected at all times.

We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) in all matters involving the processing of our users' personal data. This commitment is more than a legal obligation — it is a core value of ace666 that places users' interests above all else.

2 Types of Personal Information We Collect

Ace666 collects various types of information from users for specific purposes outlined in this Policy. The following are the categories of information we collect:

We only collect information that is genuinely necessary for the stated purposes. Any additional information you provide voluntarily is subject to the same protections under this Policy.

3 How ace666 Uses Your Information

The personal information we collect is used for lawful and transparent purposes. The following are the primary purposes for which your data is used :

• Account Management: Create, verify, and maintain your user account, including the Login process and password resets.
• Transaction Processing: Process your deposits, withdrawals, and all financial transactions securely and accurately.
• Identity Verification (KYC): Verify your identity and age in line with legal compliance requirements and anti-money laundering (AML) regulations.
• Service Provision: Provide access to all games, promotions, and ace666 platform features you are eligible to use.
• Customer Support: Assist in resolving queries, complaints, and technical issues you encounter.
• Platform Security: Detect and prevent fraud, hacking, account abuse, and suspicious activity.
• Service Improvement: Analyse usage patterns to improve user experience, platform stability, and new features.
• Marketing Communications: Send promotional offers, bonuses, and the latest updates — only if you have given consent to receive such communications.
• Legal Compliance: Fulfil legal obligations, regulatory reporting, and orders from lawful authorities.

4 Legal Basis for Data Processing

Ace666 processes your personal information on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). Depending on the purpose of processing, the legal bases we rely on are:

• Consent: When you register an account and accept these Terms and Conditions and Privacy Policy, you give explicit consent for data processing for the stated purposes.
• Contract Performance: Processing necessary to fulfil the service agreement between you and ace666, such as transaction processing and account management.
• Legal Obligation: Processing necessary to fulfil our legal obligations, including KYC and AML requirements and reporting to authorities.
• Legitimate Interest: Processing for the purposes of platform security, fraud prevention, and service improvement that does not affect your fundamental rights.

5 Information Sharing and Disclosure

Ace666 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are specific situations where we may need to share your information with selected parties:

• Payment Service Providers: Payment processors such as DuitNow, FPX, and e-wallet providers that assist in processing your transactions. All such providers are bound by strict confidentiality agreements.
• Game Providers: Third-party game software providers that supply slot games, live casino, and sports betting on our platform, for the purpose of game session management.
• KYC and AML Services: Registered and trusted identity verification and anti-money laundering monitoring service providers.
• Authorities: When required by law, court order, or direction from a legitimate enforcement agency in Malaysia.
• Business Transfers: In the event of a company merger, acquisition, or asset transfer, user information may be transferred to the new entity, which will continue to uphold equivalent data protection standards.

6 Cookies and Tracking Technologies

Ace666 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Essential Cookies: Required for core platform functions such as login authentication, session security and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collect information on how you use our website to help us improve platform performance and responsiveness.
• Functional Cookies: Remember your preferences such as display settings and game preferences to deliver a more personalised experience.
• Analytics Cookies: Used by our internal analytics tools to understand usage patterns and improve our services.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality or user experience of the ace666 platform.

7 Data Security and Protection

The security of your personal information is the absolute top priority of ace666. We implement multiple layers of technical and organisational protection to safeguard your data against unauthorised access, disclosure, modification, or destruction.

• 256-bit SSL Encryption: All data transmitted between your device and ace666 servers is protected by industry-standard 256-bit SSL encryption, ensuring your information cannot be intercepted in transit.
• Stored Data Encryption: Sensitive information such as passwords is stored in encrypted form using modern hashing algorithms. No one, including ace666 staff, can view your actual password.
• Internal Access Control: Only authorised personnel may access users' personal information, and only to the extent necessary for their duties.
• 24/7 Security Monitoring: Our automated monitoring system runs continuously to detect and block any suspicious activity or unauthorised access attempts.
• Two-Factor Authentication (2FA): User accounts are protected with two-factor authentication options for an additional layer of security during login.
• Regular Security Audits: ace666's technical infrastructure undergoes regular security assessments by independent cybersecurity experts.

8 Data Retention Period

Ace666 retains your personal information only for as long as necessary to fulfil the purposes stated in this Policy or as required by applicable law.

• Active Account Data: Retained for the duration your account remains active and for a specified period after account closure for dispute resolution and legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date, in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Documents: Retained for the period required under applicable KYC and AML regulations, typically no less than 5 years after the end of the business relationship.
• Support Communication Logs: Retained for 2 years for reference and service improvement purposes.
• Technical and Analytics Data: Stored in anonymised aggregate form for longer periods for trend analysis and platform improvement purposes.

Upon expiry of the retention period, your data will be securely deleted or converted into anonymised form that cannot be identified.

9 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal information that we hold:

To exercise any of the above rights, please contact the ace666 customer support team via Live Chat on the platform. We will process your request within a reasonable timeframe, typically within 30 working days, subject to identity verification.

10 Cross-Border Data Transfers

In the course of its operations, ace666 may process or store user data on servers located outside Malaysia. Any cross-border data transfers will be carried out with adequate safeguards to ensure your data is protected to a standard equivalent to or higher than Malaysia's PDPA requirements.

The protective measures we use for international data transfers include:

• Legally binding data processing agreements with all third-party service providers.
• Transfers only to countries or entities recognised as having an adequate level of data protection.
• Consistent application of security standards and encryption regardless of the physical server location.

11 Children's Privacy

The ace666 platform is strictly for adult users aged 18 years and above. We do not intentionally collect, store or process personal information from individuals under the age of 18.

If we find that a child's information has been collected without valid parental or guardian consent, we will take immediate steps to delete that information and close the relevant account. Our KYC process is specifically designed to detect and prevent registration by underage individuals.

12 Changes to This Privacy Policy

Ace666 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or improvements in how we handle data.

When material changes are made to this Policy:

• The "Last Updated" date at the top of this document will be revised accordingly.
• A clear notice will be displayed on the ace666 website to inform users of any changes that take effect.
• For significant changes, we will send direct notifications to registered users via email or in-account notifications.

Continued use of the ace666 platform after any Privacy Policy changes are published will be considered your acceptance of the updated terms. We encourage you to review this page periodically to ensure you are always informed of the latest version.