Ace888 Privacy Policy – Malaysia Member Personal Data Protection

Welcome to the ace888 Privacy Policy. We understand that trusting a platform with your personal information is a significant decision. That is why we are committed to managing your data with integrity, transparency, and accountability. This document is written in plain language — not confusing legal jargon — so you truly know what happens with your information.

1Introduction and Scope of This Policy

This Privacy Policy applies to all users who access the ace888 platform via our website, mobile app, or any digital channel we operate. It describes how ace888 ("we", "Platform") collects, processes, stores, shares, and protects your personal data ("you", "member", "user").

By registering an account or using any ace888 service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to request deletion of your data.

This policy is subject to and complies with:

• Personal Data Protection Act 2010 (PDPA) Malaysia — the primary legislation governing personal data processing in Malaysia
• ISO/IEC 27001 international security standards for information security management
• Relevant compliance requirements of the online gaming industry

2Information We Collect

Ace888 only collects information that is genuinely necessary to provide a safe, fair, and high-quality service. The following are the categories of data we collect:

2.1 Information You Provide Directly

• Full name as per valid identification document
• Date of birth and identity card or passport number
• Active email address and mobile phone number
• Current residential address
• Bank account or digital wallet details for financial transactions
• Identity verification document images (KYC) when required

2.2 Information Collected Automatically

• IP address and geographic location data (country/city level only)
• Device type, operating system, and web browser version
• Gaming activity history and transaction records within the platform
• Session duration, pages visited and usage patterns
• Cookie data and device identifiers for account security

2.3 Information from Third-Party Sources

• Identity verification via approved KYC services
• Fraud prevention data from licensed security providers
• AML (Anti-Money Laundering) compliance information required by law

3How We Use Your Information

Every piece of information we collect has a clear and lawful purpose. ace888 does not process your data for any purpose not stated in this document without obtaining your consent first.

3.1 Platform Operations

Your information is used to manage your account, process deposits and withdrawals, verify your identity at login, and ensure you receive accurate and timely service.

3.2 Security and Fraud Prevention

Technical data and usage patterns are continuously analysed to detect unusual activity, suspicious login attempts, and potential fraud. This protects your account and funds from unauthorised access.

3.3 Legal Compliance

Some data is retained and processed to fulfil legal obligations, including AML requirements, KYC, tax reporting, and lawful requests from relevant authorities.

3.4 Service Improvement

De-identified usage data (containing no personal information) is used to understand usage patterns, improve the platform interface, refine game recommendations, and develop new features relevant to Malaysia users.

3.5 Communications

We use your email and phone number to send important account notices, security updates, transaction information, and — with your consent — relevant promotional offers. You may opt out of marketing emails at any time via your account settings.

4Data Sharing and Disclosure

Ace888 does not sell, rent, or trade your personal data to any third party for marketing purposes. Full stop. However, there are limited situations where we need to share certain information:

4.1 Trusted Service Providers

We work with third-party service providers who assist us in operating the platform, including licensed payment processors, KYC service providers, customer service platforms, and certified cloud infrastructure providers. All these providers are bound by strict confidentiality agreements and may only use your data for purposes we specify.

4.2 Legal Requirements

Ace888 may be required to disclose your personal information to government authorities, law enforcement bodies, or courts when mandated by Malaysian law or a valid court order. In such situations, we disclose only the minimum information required.

4.3 Protection of Vital Interests

In emergency situations where someone's life is at risk, we reserve the right to share necessary information with the relevant authorities without prior consent.

5Data Security and Technical Protection

Ace888 invests seriously in data security infrastructure. We employ a combination of technical, organisational, and physical measures to ensure your data remains safe at all times:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers
• Data encryption at rest for all records stored in our databases
• Two-factor authentication (2FA) available and encouraged for all member accounts
• 24/7 threat monitoring by our internal cybersecurity team
• Regular security audits by an independent third-party firm
• Role-based access control — our staff can only access the data required for their specific role
• Automatic data backup with full encryption for disaster recovery

6Cookies, Tracking and Similar Technologies

The ace888 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security and analyse platform usage patterns.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, session security, and language preferences. Cannot be disabled.
• Analytics Cookies: Helps us understand how members use the platform so we can continuously improve it. Data is collected in aggregate and anonymised form.
• Preference Cookies: Saves your preferences such as display theme, preferred language and account settings for your convenience.
• Security Cookies: Detecting and preventing fraudulent activity, unauthorised login attempts and cyberattacks.

6.2 Cookie Controls

You can manage cookies through your web browser settings. Please note that disabling essential cookies may affect platform functionality. For analytics and preference cookies, you may opt out without affecting your core experience on ace888.

7Your Privacy Rights

As an ace888 member, you have strong rights over your personal data under Malaysia's PDPA. We fully respect and uphold the following rights:

8Data Retention Period

Ace888 does not retain your personal data longer than necessary. Retention periods are determined based on the original purpose of data collection and applicable legal requirements.

In general, we adhere to the following principles:

• Active account data is retained for as long as your account is active and up to 5 years after account closure
• Financial transaction records are retained for 7 years to meet tax reporting requirements
• Customer support communication logs are retained for 3 years for dispute reference
• Technical and security log data is retained for 12 months
• Data collected for marketing purposes is deleted within 30 days after you withdraw consent

Once the retention period expires, your data will be securely deleted or permanently anonymised using methods that meet industry standards.

9Children's Privacy

The ace888 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under the age of 18.

10Privacy Policy Amendments

Ace888 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material amendments will be communicated to you via:

• Email notice to the registered address at least 14 days before changes take effect
• A prominent notice on the platform's home page
• Update the "Last Updated" date at the top of this document

Continued use of the platform after amendments take effect constitutes your acceptance of the updated policy. If you do not agree with the amendments, you have the right to close your account and request data deletion before the effective date.

11Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly.