Privacy Policy ace365 —
Your Data Protection & Personal Information

1. Introduction

Ace365 ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, use, disclose and protect your personal information when you use the ace365.ml website or our mobile app.

This policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in digital privacy management. By using the ace365 platform, you agree to the processing of your personal data as described in this policy.

We encourage you to read this policy carefully and to contact us should you have any questions or concerns regarding your data privacy. Your satisfaction and trust are our priority.

2. Types of Personal Data We Collect

Ace365 collects various types of personal information depending on your interactions with our platform. The table below provides a comprehensive overview of the data categories we process:

We only collect data that is strictly necessary for the stated purposes. Data minimisation is central to our approach to privacy management.

3. Data Collection Methods

Ace365 collects your personal information through several different channels:

• Account Registration — Information you provide when creating a new account, including your name, email, and phone number.
• KYC Verification — Identity documents and proof of address uploaded during the member verification process.
• Financial Transactions — Information shared when you make a deposit or withdrawal through various payment methods.
• Platform Usage — Data automatically generated as you browse, play, or interact with platform features.
• Communications — Information you share when contacting customer support via Live Chat, email, or other channels.
• Cookies & Similar Technologies — Data automatically collected through cookies, tracking pixels, and the analytics tools we use.

4. Purpose of Personal Data Use

Personal information we collect is used for lawful and specific purposes. ace365 will not use your data for any other purpose without prior notice and, where required, your consent.

• Verifying your identity and age during registration and the KYC process.
• Processing deposits, withdrawals and other financial transactions securely and accurately.
• Providing access to games, promotions and relevant platform features.
• Sending important service notifications, account updates and security alerts.
• Detecting and preventing fraud, money laundering and platform abuse.
• Fulfilling legal compliance obligations and regulatory reporting requirements.
• Improving user experience based on usage patterns and feedback.
• Sending marketing communications related to promotions and latest offers — subject to your notification preference settings.

You may opt out of marketing communications at any time by updating your notification settings in your account or by contacting our support team.

5. Data Sharing & Disclosure

Ace365 does not sell or trade members' personal data to third parties. However, in certain limited situations, we may share your information with the following parties:

• Payment Service Providers — To securely process deposit and withdrawal transactions via FPX, DuitNow, e-wallets, and other channels.
• Game Service Providers — Minimum information required to enable access to games provided by third-party providers who have signed a confidentiality agreement with us.
• Legal Authorities — When required by court order, regulatory requirement, or a valid request from law enforcement authorities.
• Fraud Prevention Services — To verify identity and detect any suspicious activity in order to protect the security of all members.
• Cloud Infrastructure Servers — Technical infrastructure providers used to operate our platform, subject to strict data processing agreements.

All third parties receiving ace365 member data are required to comply with strict confidentiality policies and use that data only for agreed purposes. We do not permit any party to use your data for their own marketing purposes.

6. Data Security

Protecting your personal data from unauthorised access, disclosure, alteration or destruction is a top priority for ace365. We implement multiple layers of technical and organisational security measures, including:

• 256-bit SSL/TLS encryption for all data communications between client and server.
• Encryption at rest for all sensitive information stored in our databases.
• Role-based access control (RBAC) — only authorised personnel can access specific data.
• Intrusion detection system (IDS) and round-the-clock real-time security monitoring.
• Regular security audits and penetration testing by independent third parties.
• Two-factor authentication (2FA) for all personnel access to critical systems.
• Mandatory cybersecurity training programme for all ace365 staff.

While we take all reasonable precautions, no system can be guaranteed 100% secure. We encourage you to take protective measures on your end as well — such as using a strong, unique password and enabling 2FA on your ace365 account.

7. Cookies & Tracking Technologies

Ace365 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies — Required for core platform functions such as login session verification and security. Cannot be disabled.
• Preference Cookies — Saves your preferences such as display language and interface settings for your convenience.
• Analytics Cookies — Helps us understand how users interact with the platform for continuous improvement. Data is collected in aggregate and anonymised form.
• Performance Cookies — Used to monitor platform speed and stability to ensure a smooth user experience.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some ace365 platform features.

8. Your Rights Regarding Personal Data

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data processed by ace365. We are committed to facilitating the exercise of these rights:

9. Data Retention Period

Ace365 retains your personal data for as long as your account is active or as long as necessary to provide services to you. After account closure, we will retain your data for an additional period to fulfil our legal and regulatory obligations:

• Financial transaction data and KYC records: retained for a minimum of 7 years in compliance with Malaysia's anti-money laundering legal requirements.
• Communication and customer support logs: retained for 3 years for reference and dispute resolution purposes.
• Technical and security log data: retained for 12 months for forensic analysis in the event of a security incident.
• Marketing data and communication preferences: retained until you withdraw consent or close your account.

When the retention period expires and there is no legal basis to retain the data, ace365 will securely delete or anonymise your data using industry-standard approved methods.

10. Privacy Policy Amendments

Ace365 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Any amendments will take effect immediately upon publication on this page.

For major or material changes, we will notify members via in-platform notifications or registered email at least 14 days before the changes take effect. The "Updated" date at the top of this page will reflect the date of the latest amendment.

Your continued use of the ace365 platform after any amendments are published constitutes your acceptance of the latest version of the Privacy Policy. We encourage you to review this page periodically.

11. Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how ace365 handles your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform

We are committed to responding to every privacy enquiry within 5 business days. For more complex complaints, we may require up to 30 business days for a thorough investigation.