AcePlay Privacy Policy – Malaysian User Personal Data Protection

AcePlay values the privacy of every user on its platform. We understand that when you register and entrust us with your personal information, that is a trust we do not take lightly. This Privacy Policy was written not merely to satisfy legal obligations, but because we genuinely want you to understand how your data is handled.

The aceplay platform complies with Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised data protection principles. This means every decision involving your data is made with a legitimate purpose, in a responsible manner, and with appropriate technical safeguards.

We are also committed to keeping this policy up to date whenever there are changes to how we operate or when relevant laws are updated — and we will notify you via email or platform notification whenever any significant changes occur.

AcePlay only collects information that is strictly necessary to deliver quality, secure services and to comply with legal requirements. The information we collect falls into three main categories:

A. Information you provide directly:

• Full name as stated on your identification document (MyKad or passport).
• Date of birth and gender.
• Email address and mobile phone number.
• Current residential address.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• Identity verification documents (KYC) such as a copy of your MyKad and a verification selfie.

B. Information collected automatically:

• IP address and approximate location based on IP.
• Device type, operating system, and browser used.
• Platform usage data such as pages visited, session duration, and gaming patterns.
• Session cookies and tracking data to enhance the user experience.

C. Information from legitimate third-party sources:

• Identity verification through approved KYC services.
• Fraud prevention information from security service providers.

Every piece of information we collect has a clear purpose. aceplay does not use your data for anything unrelated to delivering the platform's services. Below is a detailed breakdown of how data is used:

If you do not wish to receive marketing communications from AcePlay, you may unsubscribe at any time by contacting our customer support team.

AcePlay will not sell, rent, or disclose your personal information to third parties for marketing purposes without your explicit consent. This is a commitment we firmly uphold.

However, there are situations where we need to share data with certain parties for legitimate platform operations:

• Approved payment providers — to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements and only receive the data necessary to process transactions.
• KYC service providers — to verify your identity as part of the legal compliance process. Data shared covers only the information required for verification.
• Game service providers (game suppliers) — companies providing Slot Games and casino games within our platform may receive anonymised data related to game sessions for technical purposes.
• Relevant authorities — when required by Malaysian law or a valid court order, aceplay will disclose the necessary information to the relevant authorities.

Protecting your data is more than a legal obligation for aceplay — it is part of our platform's identity. We continuously invest in security infrastructure to ensure your information remains protected at all times.

The technical security measures we implement include:

• 256-bit SSL Encryption for all data transmitted between your device and aceplay's servers.
• Data encryption at rest (at-rest encryption) for all personal information stored in our databases.
• Two-factor authentication (2FA) that protects access to your account.
• Real-time security monitoring that detects suspicious activity and potential unauthorised access attempts.
• Strict internal access controls — only staff who require access to specific data are permitted to do so, and every access is automatically logged.
• Penetration testing conducted periodically by independent third parties to identify and address technical vulnerabilities.
• Automatic data backup that ensures your information is not lost even in the event of a technical failure.

AcePlay uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions smoothly, and understand how users interact with the platform.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
• Preference Cookies — saves your preferences such as language selection and display theme so you do not need to reconfigure them each time.
• Analytics Cookies — collects anonymous data on how users interact with the platform to help us improve our services. This data is not linked to your personal identity.
• Functional Cookies — enables certain features such as live chat and in-platform notifications to function correctly.

You can manage your cookie settings through your browser. However, disabling essential cookies may affect platform functionality. For more information about the cookies we use, please contact our support team.

AcePlay does not retain your data longer than necessary. Each data category has a different retention period based on operational and legal requirements:

• Active account data — retained for the duration your account is active and for 5 years after account closure, to comply with legal requirements relating to financial records.
• Financial transaction records — retained for 7 years in accordance with Malaysian legal compliance requirements.
• KYC Documents — retained for 5 years after the business relationship ends.
• Customer support communication logs — retained for 2 years after the last interaction.
• Anonymised analytics data — may be retained for a longer period as it does not contain personally identifiable information.

After the defined retention period, your data will be securely deleted or anonymised in accordance with established procedures.

As an aceplay user residing in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010. aceplay fully respects and upholds these rights.

To exercise any of the above rights, please contact the aceplay customer support team. We will process your request within 21 business days of receipt. In some cases, additional time may be required and we will notify you if this occurs.

The aceplay platform expressly does not permit individuals under the age of 18 registering for or using its services. We do not intentionally collect personal data from underage children or minors.

If we find that personal data has been collected from minors without valid parental or guardian consent, we will take immediate action to delete that data and close the account in question.

If you believe a minor has registered using false information, please contact our support team immediately. We take this matter seriously and will act promptly.

AcePlay reserves the right to amend this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or improvements to our privacy practices. When significant amendments are made, we will notify you via your registered email and through in-platform notifications at least 14 days before the changes take effect.

Continued use of the platform after the effective date of any amendment is considered acceptance of the updated policy. You are encouraged to review this page periodically.

If you have any questions, concerns, or wish to exercise your privacy rights, you can reach us via:

• Live Chat — available 24/7 directly within the aceplay platform.
• Support Email — [email protected] (responded within 1 business day).
• FAQ Page — for FAQ related to privacy and security.