Ace67 Privacy Policy — Data Protection & Information Security

1Introduction

Welcome to the ace67 Privacy Policy. This document is an important agreement between you as a user of our platform and ace67 as the data controller. By using the ace67 platform — whether through a web browser or mobile app — you agree to the practices described in this policy.

Ace67 operates as an online betting platform offering live casino, sports betting, slot games, and a variety of digital entertainment for players in Malaysia. In the course of providing these services, we collect certain personal data necessary to ensure a safe, fair, and enjoyable user experience.

This Privacy Policy applies to all users who register, browse, or use any part of the ace67 platform at https://ace67.vin. We ensure that all data processing is carried out in accordance with internationally recognised data protection principles, including the principles of necessity, transparency, security, and purpose limitation.

2Data We Collect

Ace67 only collects data required to provide our services effectively and securely. We do not collect excessive or irrelevant data beyond what is needed for platform operations. The following are the main categories of data we collect:

Sensitive financial data such as credit card numbers and full bank account details never stored directly on ace67 servers. We use tokenization technology certified by registered and authorized third-party payment providers to process all transactions securely.

3How We Use Your Data

The data we collect is used solely for legitimate purposes directly related to the delivery of ace67 services. We do not process your data for undisclosed purposes without obtaining your consent first.

• Account management: Creating, verifying and maintaining your user account to keep it secure and fully functional.
• Transaction processing: Ensuring all deposits and withdrawals are processed accurately, promptly and securely to the correct party.
• Legal compliance (KYC/AML): Meeting legal requirements related to identity verification and anti-money laundering.
• Platform security: Detecting and preventing fraudulent activity, multi-account use and system intrusion attempts.
• Responsible wagering: Monitoring gameplay patterns to identify players who may need assistance or self-control tools.
• Customer support: Handling enquiries, complaints and support requests more effectively when we have your account context.
• Platform improvement: Analysing usage patterns in aggregate (not individually) to improve platform quality and performance.
• Service communications: Sending important notifications related to your account, transactions, security updates and policy changes.
• Marketing communications: Sending promotional information and exclusive offers — only to users who have not opted out of such communications.

4Data Sharing

Ace67 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, there are certain situations where we need to share your data with trusted parties to ensure the platform operates smoothly:

• Payment providers: Information required to process deposits and withdrawals is shared with authorised payment providers such as the FPX gateway, DuitNow, Touch 'n Go eWallet and Boost.
• Game software providers: Game data required to operate live casino and table game sessions is shared with the game software providers we work with.
• Identity verification services: Your KYC documents are shared with registered third-party identity verification service providers that comply with strict security standards.
• Legal authorities: ace67 will disclose required data if mandated by law or a valid court order.
• Fraud prevention: In cases involving serious fraud investigations, relevant information may be shared with authorised crime prevention agencies.

5Data Security

Your data security is ace67's highest priority. We continuously invest in the latest digital security infrastructure to ensure your data is always protected against increasingly sophisticated cyber threats.

Key technical security measures we implement include 256-bit SSL/TLS encryption for all data transmissions, data-at-rest encryption for sensitive records, two-factor authentication (2FA) available for all user accounts, an intrusion detection system (IDS) and 24/7 threat monitoring, as well as security penetration testing conducted regularly by independent security experts.

6Cookies & Tracking Technologies

Ace67 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyze platform usage patterns in aggregate. Cookies are small text files stored on your device by your web browser.

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Preference Cookies: Saving your settings and preferences such as language, theme and interface layout for your convenience.
• Analytics Cookies: Helping us understand how users interact with the platform for improvement purposes — data is collected anonymously.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect the functionality of the ace67 platform.

7Data Storage & Deletion

Ace67 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. Different retention periods apply to different categories of data:

• Active account data: Retained for as long as your account is active and for 7 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and financial legal requirements.
• KYC Documents: Retained for the duration of account activity and up to 5 years after account closure or document expiry.
• Security logs: Retained for 90 days for security investigation and fraud prevention purposes.
• Support communication data: Retained for 3 years to support effective customer service and dispute resolution.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

8Your Rights as a User

As an ace67 platform user, you have important rights regarding your personal data. We fully respect these rights and provide simple mechanisms for you to exercise them:

• Right of Access: You have the right to request a copy of the personal data we hold about you within 30 days of the request date.
• Right to Rectification: If your data is inaccurate or outdated, you have the right to request immediate correction. Much of this information can be updated directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data, subject to any legal retention obligations binding on us.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time, and we will honour that request unconditionally.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

9Children's Privacy

The ace67 platform is exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Should we discover that a minor's information has been collected without our knowledge, the relevant account will be closed immediately and the data will be deleted without delay.

Parents or guardians who become aware that their minor child has registered an account at ace67 are requested to contact our support team immediately so we can take the appropriate action.

10International Data Transfers

In certain operational situations, your personal data may be transferred or processed outside Malaysia — for example, when using cloud infrastructure or interacting with international game software providers. Any such data transfer only occurs to destinations that provide a level of data protection equivalent to or exceeding Malaysia's standards.

Ace67 ensures that all international data transfers are protected by binding data protection agreements and appropriate technical safeguards, including encryption in transit and strict access controls at the destination.

11Amendments to This Policy

Ace67 reserves the right to update or modify this Privacy Policy at any time in line with changes in law, industry practices, or developments to our platform. The latest version of this policy is always available on this page with a clear update date.

For significant amendments that affect how we process your data, we will notify you via your registered email or an in-platform notification at least 14 days before the changes take effect. Continued use of the ace67 platform after the effective date constitutes acceptance of the updated policy.

12Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data by ace67, our team is ready to assist you at any time.

You can reach us via the live chat available at the bottom-right corner of the platform, or through our support email. Our privacy and data protection team will respond to your enquiry as promptly as possible — typically within 24 business hours for written enquiries.