Your privacy is not merely a priority — it is our responsibility. Find out exactly how ace67 collects, uses, and protects your personal information at all times.
Ace67 is an online gaming platform operating in Malaysia, fully committed to protecting the privacy and personal data security of every member. We understand that your trust is our most valuable asset — therefore, we adhere to strict data protection standards across every aspect of our operations.
This Privacy Policy details what data we collect from you, why we need it, how we use it, with whom it may be shared under limited circumstances, and what rights you hold as the data owner. This document applies to all ace67 services, including the official website, mobile app, and all associated communication channels.
Privacy is not simply a legal compliance matter for us — it is a core value that shapes how we design our systems, train our staff, and make technology decisions. Every time you play at ace67, you can be confident that your information is in responsible hands.
Ace67 only collects data that is genuinely necessary to provide a safe, seamless, and responsible service. We do not collect excessive or irrelevant information beyond the scope of our service.
| Data Type | Primary Purpose | Legal Basis |
|---|---|---|
| Name & Identification Information | Identity verification, KYC, account management | Contractual requirement |
| Phone Number & Email | Communications, security OTPs, account notifications | Contractual requirement |
| Bank Account Information | Processing deposits and fund withdrawals | Contractual requirement |
| IP Address & Device Data | Security, fraud detection, geo-compliance | Legitimate interest |
| Game History | Responsible gaming monitoring, dispute resolution | Legitimate interest & legal obligation |
| Analytics Cookie Data | Platform experience improvements, performance analytics | User consent |
Every piece of data we collect has a clear and limited purpose. ace67 does not use your data for purposes beyond the stated scope without obtaining fresh consent from you.
Your registration data is used to create and manage your ace67 account, verify your identity during login, process deposits and withdrawals, and send important account notifications such as transaction confirmations and security alerts.
Ace67 continuously analyses usage patterns and session data to identify suspicious activity. This includes logins from unusual locations, multiple access attempts, or wagering patterns indicative of potential fraud or money laundering. Our security system operates 24 hours a day, 7 days a week without interruption.
Your game history and betting patterns are actively monitored to identify early signs of problem gambling. If our system detects concerning patterns, our responsible gaming team may proactively reach out to you or suggest appropriate self-control tools.
With your consent, ace67 may send you information about the latest promotions, new bonuses, and platform updates via email or in-app notifications. You may opt out of marketing communications at any time through your account settings or by contacting our customer support. Unsubscribing from marketing does not affect important account-related notifications.
Ace67 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, there are limited circumstances where your data may be shared with specific parties, and this is done solely to enable our services to operate safely and in compliance with the law.
All third-party service providers we work with have signed data processing agreements binding them to the same strict privacy standards as ace67's internal policies.
Ace67 may disclose your data to relevant authorities if lawfully requested through a court order, criminal investigation, or regulatory compliance requirement. In all cases, we will disclose only the minimum necessary information and will notify you where permitted by law.
Protecting your data from unauthorised access, loss, or breach is ace67's highest technical priority. We continuously invest in the latest security infrastructure to ensure our platform stays ahead of cyber threats.
All data transmitted between your device and ace67 servers is protected by SSL/TLS 256-bit encryption — the same standard used by leading banking institutions. Data stored on our servers is also encrypted using AES-256 algorithms, ensuring that even in the event of a server breach, your data remains unreadable without the correct encryption key.
Access to members' personal data within ace67's internal systems is strictly limited on a need-to-know basis. All staff with access to sensitive data undergo rigorous background checks and comprehensive privacy training. Every access event is logged and regularly audited.
Ace67's security monitoring system operates around the clock to detect any anomalies or intrusion attempts. Should any security incident affecting your data occur, we are committed to notifying you within 72 hours of the incident being identified, in line with industry best practices for data protection.
Ace67 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device that help the platform remember your preferences and deliver a more personalised experience.
You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of certain parts of the platform. Further details on cookie management are available in your account Settings section.
As an ace67 member, you have clear and enforceable rights over your personal data. ace67 fully respects these rights and provides simple mechanisms for you to exercise them.
You have the right to request and receive a copy of all personal data we hold about you. Such requests will be processed within 14 business days.
If any data we hold is inaccurate or outdated, you have the right to request prompt correction through your account settings or customer support.
You may request the deletion of your personal data, subject to legal retention requirements that bind ace67 to retain certain records.
You may object to the use of your data for marketing or profiling purposes at any time. Such objections take effect immediately.
You have the right to receive your personal data in a machine-readable format (JSON or CSV) for transfer to another service provider.
In certain circumstances, you may request that we restrict how we process your data while a dispute or review is ongoing.
Ace67 does not retain your data longer than necessary. Retention periods are determined based on operational requirements, legal obligations, and platform security interests.
Once the retention period expires, your data will be securely deleted or fully anonymised so that it can no longer be linked to your identity.
Ace67 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or service improvements. Each amendment will be accompanied by a clear effective date at the top of this document.
For material amendments — meaning changes that substantially alter how we use or protect your data — ace67 will send a notification to your registered email or display a prominent notice within the platform at least 14 days before the amendment takes effect. Continued use of the ace67 platform after the effective date constitutes acceptance of the amended terms.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the ace67 privacy team is ready to assist you.
You can reach us by email at [email protected] or via the live chat function within the ace67 platform, available 24 hours a day, 7 days a week. All privacy-related enquiries will be handled by a qualified privacy officer and will receive a response within 2 business days.
If you feel your request has not been handled satisfactorily, you have the right to lodge a complaint with the relevant data protection authority in Malaysia. ace67 is committed to fully cooperating with any related investigations.
Your data security does not rely on a single mechanism alone — we use a multi-layered approach where each measure reinforces the others.
All data transmitted between your device and ace67 servers is encrypted with SSL/TLS 256-bit — the same encryption technology used by major Malaysian banks. No one can intercept or read your data in transit.
Logging in to your ace67 account is protected by two-factor authentication via an OTP sent to your registered phone number. Even if your password is compromised, your account remains secure without verification from your device.
Ace67's artificial intelligence system monitors every login and transaction in real time. Any activity that deviates from your usual patterns will trigger an automatic security review before the action proceeds.
Ace67 data is stored in Tier III-rated data centres with physical access controls, full storage encryption, and automatic backup systems. Our servers undergo independent security audits on a regular basis to ensure compliance with international standards.
The ace67 identity verification process conducts KYC checks through an integrated system recorded with a complete audit trail. Documents you submit are processed in an isolated environment and deleted once verification is complete.
Every ace67 staff member with access to member data undergoes comprehensive privacy and data security training. Data access is strictly limited based on job role and is continuously monitored by our internal team.
Fully understand how the ace67 platform operates by reading the following supporting documents.