ace66 Privacy Policy

1. Who We Are

This Privacy Policy applies to ace66, the online gaming platform accessible at ace66.club and all associated sub-domains and mobile interfaces ("the Platform"). When this policy refers to "ace66," "we," "us," or "our," it refers to the operator of the ace66 Platform, operating under international gaming authority licensing.

ace66 is the data controller in respect of personal data collected from registered players, prospective players, and visitors to the Platform. Any questions regarding this Privacy Policy or your personal data held by ace66 may be directed to our support team at the contact details provided in Section 14.

2. Personal Data We Collect

ace66 collects the following categories of personal data from players and Platform visitors:

2.1 Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (for age verification — ace66 enforces a strict 21+ minimum age requirement).
• Nationality and country of residence.
• Government-issued photo identification document number and type (e.g., MyKad, passport).

2.2 Contact Data

• Email address registered to your ace66 account.
• Malaysian mobile number registered to your account.
• Residential or mailing address (for KYC verification and correspondence).

2.3 Financial Data

• Payment method details used for deposits and withdrawals (e.g., bank account number, Touch n Go eWallet identifier, FPX details). Full payment credentials such as card numbers are not stored directly by ace66 — these are handled by regulated payment processors.
• Transaction history including deposit amounts, withdrawal amounts, and dates.
• MYR account balance and bonus wallet balance information.

2.4 Technical & Usage Data

• IP address and approximate geographical location at time of login.
• Device type, operating system, and browser used to access ace66.
• Session data including login timestamps, session duration, and pages visited.
• Game play history including games accessed, bets placed, and outcomes.

2.5 Communications Data

• Records of communications between you and the ace66 support team via live chat, email, or other channels.
• Any feedback, complaint, or dispute documentation submitted to ace66.

3. How We Collect Your Data

ace66 collects personal data through the following means:

• Direct collection: Information you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or filling in any form on the Platform.
• Automated collection: Technical and usage data collected automatically when you access and interact with the ace66 Platform, through cookies, server logs, and similar tracking technologies (see Section 7).
• Third-party sources: Identity verification data obtained through KYC service providers engaged by ace66 to verify the accuracy of information you have provided. Payment data obtained through regulated payment processors in connection with your transactions on the Platform.

4. How We Use Your Personal Data

ace66 uses personal data collected from players and visitors for the following purposes:

• Account management: Creating, operating, and maintaining your ace66 player account, including processing your deposits and withdrawals in MYR, managing your bonus wallet, and communicating account-related information to you.
• Identity verification (KYC): Verifying your identity and age as required under ace66's international gaming licence obligations. This includes document verification and, where applicable, cross-referencing with third-party identity verification services.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, money laundering, and other prohibited conduct as described in the ace66 Terms & Conditions.
• Regulatory compliance: Meeting ace66's obligations under its international gaming licence, including transaction monitoring, responsible gaming obligations, and reporting requirements.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the Platform, personalise the player experience, and develop new features. Individual players are not identifiable from data used for this purpose.
• Customer support: Responding to your queries, resolving disputes, and providing assistance with account issues through the ace66 24/7 support team.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. Players may opt out at any time.

5. Legal Basis for Processing

ace66 processes your personal data on the following legal grounds:

• Contract performance: Processing necessary to operate your ace66 account, process transactions, and deliver the gaming services you have registered to access.
• Legal obligation: Processing required to comply with ace66's obligations under its international gaming licence, including KYC/AML requirements, responsible gaming obligations, and regulatory reporting.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, which is based on your opt-in consent and may be withdrawn at any time without affecting your account.

6. Data Sharing & Disclosure

ace66 does not sell, rent, or trade your personal data to third parties. Personal data may be shared in limited circumstances as follows:

• Service providers: Third-party vendors engaged by ace66 to provide services necessary to operate the Platform, including payment processors (e.g., FPX, Touch n Go eWallet, Boost integrations), KYC identity verification providers, fraud detection services, and cloud infrastructure providers. All service providers are contractually bound to process personal data only in accordance with ace66's instructions and this Privacy Policy.
• Regulatory authorities: Disclosure to gaming licensing authorities, financial intelligence units, or law enforcement where required by applicable law, gaming regulations, or court order.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of ace66's business, personal data may be transferred to the successor entity, subject to equivalent privacy protections.
• With your consent: In any other circumstance, personal data is only shared with third parties with your explicit prior consent.

7. Cookies & Tracking Technologies

ace66 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used by ace66 are:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your ace66 account and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences and settings (e.g., language, display preferences) to improve your experience on ace66.
• Analytics cookies: Collect anonymised data about how players use the Platform to help ace66 understand usage patterns and improve the service. No personally identifiable information is collected via analytics cookies.
• Performance cookies: Help ace66 monitor Platform performance and identify technical issues affecting load times or game availability.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect Platform functionality, including your ability to remain logged in to ace66.

8. Data Retention

ace66 retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following:

• Account data (identity, contact, and financial records) is retained for the lifetime of your ace66 account and for a minimum of five (5) years following account closure, as required under international gaming licence anti-money laundering (AML) obligations.
• KYC documentation is retained for the period required by applicable gaming and financial regulations, typically a minimum of five (5) years.
• Support communications are retained for a minimum of three (3) years to enable resolution of any disputes that may arise.
• Technical and usage data is retained for up to twenty-four (24) months for Platform analysis and security purposes.

Where personal data is no longer required for any legitimate purpose, ace66 takes steps to securely delete or anonymise it in accordance with applicable data protection standards.

9. Your Privacy Rights

As a registered player or Platform visitor, you have the following rights in respect of your personal data held by ace66:

• Right of access: You may request a copy of the personal data ace66 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Certain corrections (e.g., legal name) may require supporting documentation.
• Right to erasure: You may request deletion of your personal data, subject to applicable legal and regulatory retention requirements. Note that ace66 may be unable to delete data that must be retained under its gaming licence obligations.
• Right to restrict processing: You may request that ace66 restrict the processing of your personal data in certain circumstances, such as while an inaccuracy is investigated.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though ace66 may be able to demonstrate overriding grounds to continue.
• Right to data portability: You may request that certain personal data you have provided to ace66 be transferred to you or to a third party in a structured, commonly used machine-readable format.

To exercise any of these rights, please contact ace66 support as described in Section 14. ace66 will respond to valid requests within 30 days. Requests may require identity verification before processing.

10. Data Security

ace66 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ace66 servers — the same encryption standard used by major Malaysian banks including Maybank, CIMB, and Public Bank.
• Encryption of personal data at rest using industry-standard symmetric encryption.
• Role-based access controls restricting internal access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform.
• Multi-factor authentication requirements for all ace66 staff with access to personal data systems.

While ace66 employs robust security measures, no internet-based system can guarantee absolute security. Players are encouraged to use strong, unique passwords for their ace66 account and to enable two-factor authentication (2FA) for additional protection.

11. Children & Underage Players

ace66 does not knowingly collect personal data from persons under the age of 21. The ace66 Platform is strictly for adults aged 21 and above. If ace66 discovers that personal data has been collected from a person below the minimum age, that data will be deleted and the associated account closed immediately.

Parents or guardians who believe that a minor has registered on ace66 should contact our support team immediately so that the account can be reviewed and closed without delay.

12. Cross-Border Data Transfers

The ace66 Platform is operated under international gaming licensing and may involve the transfer of personal data to countries outside Malaysia in connection with the services of third-party providers (including KYC verification services, cloud infrastructure, and payment processors). Where such transfers occur, ace66 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant supervisory authorities.
• Binding corporate rules where applicable.
• Transfers to countries recognised as providing an adequate level of data protection.

ace66 does not transfer personal data to third parties in countries without adequate safeguards in place.

13. Changes to This Privacy Policy

ace66 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. The effective date of the current version is shown at the top of this page.

Where changes are material, ace66 will notify registered players via email or Platform notification prior to the changes taking effect. Minor clarifications may be made without separate notification. Your continued use of ace66 following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes.

ace66 recommends that players review this page periodically to stay informed of how their personal data is being handled.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data ace66 holds about you, please contact us through the following channels:

ace66 aims to acknowledge all privacy-related queries within 24 hours and to provide a substantive response within 30 calendar days. For complex requests involving data access or deletion, additional time may be required, and you will be informed accordingly.