Privacy Policy ACE365 – User Data Protection

1. Introduction

Ace365 values the privacy of every user on our platform. We understand that your trust in us depends greatly on how we handle your personal information. We are therefore committed to ensuring that all data collected is managed with full responsibility, transparency and in line with industry best practices.

This Privacy Policy applies to all services offered by ace365, including the web platform at ace365.plus, the ace365 mobile app, and all related communication channels such as support email, live chat, and any direct interactions with our team. If you do not agree with any part of this Policy, please discontinue use of our platform.

2. Information We Collect

2.1 Information You Provide Directly

When you register an ace365 account or interact with our platform, we collect the following information directly from you:

• Identity information: Full name, date of birth, national ID or passport number
• Contact information: Email address, phone number, residential address
• Account information: Username, password (stored in encrypted form), security questions
• Financial information: Bank account details, e-wallet numbers, deposit and withdrawal transaction records
• KYC documents: Copies of your national ID, passport, or proof of address documents uploaded during the identity verification process

2.2 Information Collected Automatically

While you use the ace365 platform, our systems automatically record certain technical information for security and service improvement purposes:

• Device data: Device type, operating system, web browser version
• Network data: IP address, geographic location (country/city level), internet service provider name
• Session data: Login time, logout time, pages visited, actions taken within the platform
• Wagering data: Betting history, games played, total wagers, game results

2.3 Information from Third Parties

In some cases, we may receive information about you from trusted third-party sources, including identity verification service providers, payment providers, and fraud prevention agencies. This information is used solely for verification and security purposes.

3. How We Use Your Data

Ace365 uses collected information only for legitimate purposes as stated below. We will not use your data for any other purpose without first obtaining your consent.

For marketing communications specifically, we will only send promotions, special offers, or bonus information when you have given your consent during registration or subsequently through the communication preferences settings in your account. You may withdraw this consent at any time.

4. Information Sharing with Third Parties

Ace365 does not sell or transfer your personal information to third parties for their own marketing purposes. However, we do share information with certain parties under the following limited and controlled circumstances:

• Payment service providers: To process deposits and withdrawals, we share the necessary financial information with partner banks, e-wallet operators such as Touch 'n Go, and payment gateways including DuitNow. These providers are bound by strict confidentiality agreements.
• Game software providers: Third-party casino and sports game providers receive only the minimum betting data required to operate the games. These providers are independently audited and comply with established industry standards.
• Identity verification agency: During the KYC process, your identity details may be verified through approved third-party services. This information is not retained by those third parties once verification is complete.
• Regulatory authorities: In cases required by law, we may be obliged to disclose certain information to regulatory bodies, law enforcement agencies, or the relevant courts. We will only do so when legally required and will notify you where permitted by law.

5. Cookies & Tracking Technologies

Ace365 uses cookies and similar tracking technologies to enhance the user experience, maintain account security and analyse platform usage patterns. There are several types of cookies we use:

• Strictly necessary cookies: Required for core platform functions such as secure login, session management, and account security. These cookies cannot be disabled without affecting the platform's primary functionality.
• Functional cookies: Saves your preferences such as language, display settings, and game choices to enable a more personalised experience.
• Analytics cookies: Helps us understand how users interact with the platform, which pages are visited most frequently, and where users encounter difficulties. This data is used in aggregate and does not identify individuals.
• Security cookies: Detects suspicious activity such as login attempts from unusual locations or abnormal usage patterns to protect your account.

You may manage your cookie settings through your web browser. Disabling certain cookies may affect your experience on the ace365 platform, though core functionality will remain accessible.

6. Data Security

The security of your personal information is the top priority at ace365. We implement a range of technical and organisational security measures to protect your data from unauthorised access, loss, or misuse.

The security measures we implement include 256-bit SSL encryption for all data communications, password storage using strong hashing algorithms, two-factor authentication (2FA) available for all accounts, continuous 24/7 security monitoring, multi-layered firewalls and intrusion detection systems, regular independent security audits, and frequent data security training for all ace365 staff.

While we take all reasonable steps to protect your data, no security system can guarantee 100% absolute protection. Should any security incident involving your data occur, we will notify you within the timeframe required by applicable regulatory obligations.

7. Your Rights as a User

As an ace365 user, you have the following rights regarding your personal data. You may exercise these rights by contacting our support team via email at [email protected] or through live chat.

8. Cross-Border Data Transfers

As an international online platform, some of your data may be processed or stored on servers located outside Malaysia. In all such cases, ace365 ensures that these data transfers are protected by appropriate safeguards, including data processing agreements that comply with international data protection standards.

We only use globally recognised cloud infrastructure and service providers with a proven track record in data protection. All cross-border data transfers are subject to rigorous internal risk assessments before being approved.

9. Data Retention Period

Ace365 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. The general retention periods are as follows:

• Active account data: Retained for as long as your account is active and for 5 years after account closure for regulatory compliance purposes
• Financial transaction records: Retained for a minimum of 7 years in accordance with anti-money laundering legal requirements
• Customer support communication logs: Retained for 3 years from the date of last interaction
• Cookie and session data: Session cookies are deleted when the browser is closed; persistent cookies expire after a set period, typically between 30 days and 12 months
• KYC documents: Retained for 5 years after the business relationship ends

Once the relevant retention period has expired, your data will be securely deleted or converted into an anonymised format that cannot be linked back to your identity.

10. Children's Privacy

The ace365 platform is exclusively for individuals aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18. Should we discover that we have collected data from a minor, we will take immediate action to delete that data and close the associated account.

If you become aware that a minor has registered an account at ace365, please notify us immediately through our support channels so we can take appropriate action.

11. Links to Third-Party Platforms

The ace365 platform does not contain links to external websites. However, third-party game providers integrated within our platform may have their own privacy policies. ace365 is not responsible for the privacy practices of these game software providers, although we only work with providers that have undergone thorough vetting and meet established industry standards.

12. Changes to This Privacy Policy

Ace365 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service improvements. Whenever the Privacy Policy is updated, we will revise the "Last Updated" date at the top of this document.

For significant and material changes, we will provide clearer notice via email to your registered address or through a prominent notice within the platform. Continued use of the ace365 platform after any changes to this Privacy Policy constitutes acceptance of those changes.

13. Contact Us

If you have any questions, concerns or complaints regarding your privacy and data protection, the ace365 privacy team is ready to assist through the following channels:

• Live Chat: Available 24/7 directly within the ace365 platform — the fastest way to get a response
• Email: [email protected] — for written enquiries that require documentation

For formal requests relating to data protection rights (access, correction, deletion and others), please submit a written request by email, including your account number and request details. We will acknowledge receipt within 3 business days and process the request within 30 days.