ace666 Privacy Policy – How We Collect, Use, and Protect Your Personal Data

1. Data Controller

1.1 For the purposes of applicable data protection legislation, ace666 is the data controller responsible for the personal data of players who register and use the ace666 platform at ace666.org.

1.2 ace666 operates under international gaming licensing and is subject to data protection obligations under the laws of its licensing jurisdiction as well as any applicable local laws governing the processing of personal data of Malaysian residents.

1.3 Any questions relating to the identity of the data controller or the exercise of data subject rights may be directed to ace666 via the contact details set out in Section 13 of this Policy.

2. Personal Data We Collect

ace666 collects the following categories of personal data from players in the course of account registration, platform use, and support interactions:

2.1 Registration Data:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Email address and mobile phone number;
• Residential address (including postcode and state within Malaysia);
• Username and encrypted password.

2.2 Identity Verification (KYC) Data:

• Government-issued identity document (Malaysian MyKad, passport, or equivalent);
• Proof of address documentation;
• Selfie photograph where required for identity confirmation.

2.3 Financial Data:

• Payment method identifiers (eWallet account reference, bank account name — but never full account numbers or card numbers);
• Transaction history: deposits, withdrawals, bonus credits, and bet history within the ace666 platform.

2.4 Technical & Usage Data:

• IP address and approximate geographic location at time of login;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features accessed within the ace666 platform;
• Referring URL where applicable.

2.5 Support Communications:

• Records of live chat conversations, email correspondence, and any documentation submitted in support of a complaint or enquiry.

3. How We Use Your Personal Data

ace666 uses the personal data collected for the following purposes:

• Account Administration: Creating, managing, and securing your ace666 player account;
• Identity & Age Verification: Confirming that you are aged 21 or above and that you are who you say you are, in compliance with our licensing obligations;
• Transaction Processing: Processing your deposits, withdrawals, bonus credits, and bet settlements in MYR;
• Fraud & AML Prevention: Detecting and investigating suspicious account activity, bonus abuse, multi-accounting, and potential money laundering in compliance with applicable financial crime laws;
• Customer Support: Responding to your enquiries, resolving disputes, and processing complaints;
• Responsible Gaming: Monitoring gaming patterns to identify potential indicators of problem gambling and to administer self-exclusion or limit requests;
• Marketing Communications: Sending promotional offers, reload bonus notifications, and VIP programme updates — subject to your marketing preferences and opt-out rights;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the ace666 platform's performance, design, and game library.

4. Legal Basis for Processing

ace666 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the player account agreement — including identity verification, transaction processing, and support;
• Legal Obligation: Processing required to comply with anti-money laundering laws, age verification obligations, and licensing conditions;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — where such interests are not overridden by your data protection rights;
• Consent: Processing for optional marketing communications — which you may withdraw at any time.

5. Sharing of Personal Data

5.1 ace666 does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own marketing purposes.

5.2 ace666 may share your personal data with the following categories of third parties, strictly as necessary to deliver our services:

• Payment Service Providers: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and FPX processors — for the purpose of facilitating deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and AML screening services used to verify player identity documents;
• Game Content Providers: Certified international game software providers whose games are accessible through the ace666 platform — limited to session data necessary to operate the game;
• Regulatory & Law Enforcement Authorities: Where disclosure is required by applicable law, court order, or regulatory direction;
• Technology Infrastructure Providers: Cloud hosting and cybersecurity service providers operating under strict data processing agreements with ace666.

5.3 All third-party data processors engaged by ace666 are subject to contractual data protection obligations consistent with this Privacy Policy.

6. Cookies & Tracking Technologies

6.1 The ace666 platform uses cookies and similar tracking technologies to operate platform functionality and to analyse usage patterns. The following cookie categories are used:

• Strictly Necessary Cookies: Required for the platform to function — including login session management, security tokens, and load balancing. These cannot be disabled.
• Functional Cookies: Remember your preferences (language, game settings) to personalise your experience.
• Analytics Cookies: Collect anonymised data about how players use the ace666 platform — pages visited, session lengths, and navigation paths. Used exclusively for internal platform improvement.

6.2 ace666 does not use advertising or retargeting cookies that track you across third-party websites.

6.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair platform functionality, including the ability to maintain a login session.

7. Data Security

7.1 ace666 implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold. These measures include:

• 128-bit SSL/TLS encryption for all data transmitted between your device and ace666 servers;
• AES-256 encryption for personal data at rest in ace666 databases;
• Access controls limiting personal data access to authorised ace666 personnel on a need-to-know basis;
• Regular security audits and penetration testing of the ace666 platform infrastructure;
• Two-factor authentication options for player accounts.

7.2 Notwithstanding the above, no data transmission over the internet or electronic storage system is entirely secure. ace666 cannot guarantee absolute security, and players transmit data at their own risk. In the event of a data breach that poses a risk to player rights, ace666 will notify affected players and relevant authorities as required by applicable law.

8. Data Retention

8.1 ace666 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, including compliance with legal, regulatory, and audit obligations.

8.2 The following standard retention periods apply:

• Active Account Data: Retained for the duration of the account plus five (5) years following account closure, to comply with AML record-keeping requirements;
• Transaction Records: Retained for seven (7) years following the date of the transaction;
• KYC Documents: Retained for five (5) years following account closure;
• Support Communications: Retained for three (3) years from the date of the interaction;
• Marketing Consent Records: Retained until withdrawal of consent plus one (1) year.

8.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player.

9. Your Data Rights

Subject to applicable law, you have the following rights with respect to your personal data held by ace666:

• Right of Access: Request a copy of the personal data ace666 holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected — subject to ace666's legal retention obligations;
• Right to Restriction: Request that ace666 restrict the processing of your data in certain circumstances;
• Right to Data Portability: Receive a copy of your data in a structured, machine-readable format where processing is based on consent or contract;
• Right to Object: Object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: Withdraw any previously granted consent for optional data processing (such as marketing) at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact ace666 support via live chat or at [email protected]. ace666 will respond within thirty (30) days of receiving a valid data rights request.

10. Children's Privacy

10.1 The ace666 platform is strictly prohibited to individuals under the age of 21. ace666 does not knowingly collect personal data from minors. If ace666 becomes aware that personal data has been collected from an individual under 21, the account will be immediately closed and all data associated with that account deleted.

10.2 If you believe that a minor has registered an ace666 account, please notify ace666 immediately via live chat or email so that the matter can be investigated and resolved without delay.

11. International Data Transfers

11.1 ace666 operates from a jurisdiction outside Malaysia. Personal data of Malaysian players is therefore transferred to and processed in servers located outside of Malaysia. These international transfers are carried out under appropriate data transfer safeguards, including contractual protections that require recipients to treat your data with the same standard of protection described in this Policy.

11.2 Payment processing partners (including local Malaysian eWallet providers and banks) may process data within Malaysia in accordance with their own privacy policies and applicable Malaysian law.

12. Amendments to This Policy

12.1 ace666 reserves the right to update this Privacy Policy at any time. When material changes are made, ace666 will notify registered players via email to their registered address and/or via a prominent notice on the ace666 platform, no less than seven (7) days before the amended policy takes effect.

12.2 Continued use of the ace666 platform following notification of a policy update constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you should cease using the platform and close your account.

13. Contact & Complaints

For any questions, concerns, or complaints regarding this Privacy Policy or ace666's data practices, please contact us through the following channels:

• Live Chat: Available 24/7 via the ace666 platform — the fastest method for urgent data concerns;
• Email: [email protected] — for formal data rights requests and privacy complaints.

ace666 acknowledges all privacy-related correspondence within 48 hours and aims to provide a full substantive response within 30 calendar days. If you are not satisfied with ace666's response to a privacy complaint, you may escalate the matter to the relevant data protection supervisory authority in the applicable jurisdiction.