Privacy Policy

Introduction

ace96 ("we", "us", "our", "the Company") operates the online gaming platform at https://ace96.cam (the "Platform"). We are committed to protecting and respecting the privacy of every individual who visits or registers on the Platform, particularly our Malaysian player community spanning Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond.

This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by ace96. Please read this Policy carefully to understand our approach and practices regarding your personal data.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. Defined terms used but not defined herein carry the meanings given to them in the Terms & Conditions.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, location data, contact details, and online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data; ace96 is the Data Controller for the data it collects from Platform users.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under contractual obligation.
• "Data Subject" — the natural person to whom the Personal Data relates; in this context, you as a registered Player or Platform visitor.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data for a stated purpose.
• "KYC Documents" — identity verification documents submitted by a Player during the Know Your Customer verification process.

Data Controller

ace96 is the Data Controller responsible for the Personal Data collected through the Platform. As Data Controller, ace96 determines the purposes and means by which your Personal Data is processed, and bears primary responsibility for ensuring that processing activities comply with applicable data protection principles.

Data We Collect

ace96 collects Personal Data from you in the following circumstances and categories:

4.1 Registration Data

When you create an Account, we collect: full legal name, date of birth, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru), email address, mobile phone number, and username/password credentials.

4.2 KYC & Identity Verification Data

To comply with our age verification and anti-money laundering obligations, we collect copies of government-issued identity documents (Malaysian MyKad, passport), proof of address documents, and proof of payment method documents as detailed in our Terms & Conditions.

4.3 Financial & Transaction Data

We collect records of deposits, withdrawals, wagers, and bonus transactions. This includes the payment method used (e.g., Touch 'n Go eWallet, Maybank, CIMB, DuitNow, FPX, cryptocurrency wallet addresses), transaction amounts in MYR, and transaction timestamps. We do not store full payment card numbers.

4.4 Platform Usage Data

We automatically collect technical and usage data when you access the Platform: IP address, device type, operating system, browser type and version, pages visited, games played, betting history, session durations, and clickstream data.

4.5 Communications Data

Records of communications between you and ace96 — including live chat transcripts, email correspondence, and support ticket histories — are retained for quality assurance and dispute resolution purposes.

4.6 Responsible Gambling Data

Where you utilise our responsible gambling tools (deposit limits, self-exclusion requests, reality check settings), we record your preferences and the dates on which they were applied or modified. This data is used solely to enforce your chosen safeguards.

How We Use Your Data

ace96 processes your Personal Data for the following purposes:

Legal Basis for Processing

ace96 processes your Personal Data on one or more of the following legal bases:

• Contract Performance: Processing necessary to provide the Services you have contracted for — account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing necessary for ace96's legitimate business interests, including fraud detection, platform security, and analytics — provided these interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific consent — primarily for optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

ace96 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may share your data with the following categories of recipients where strictly necessary:

• Payment Service Providers: Malaysian payment partners including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB Bank, DuitNow, and FPX — solely for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Partners: Third-party identity verification services engaged by ace96 to conduct or supplement KYC checks, operating under strict data processing agreements.
• Fraud Detection & Security Providers: Technology partners that assist ace96 in identifying and preventing fraudulent activity, operating as Data Processors under contractual obligation.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics platforms to help us understand player behaviour and improve the Platform. No individually identifiable data is included in these transfers.
• Legal and Regulatory Authorities: Where required by applicable Malaysian law, court order, or lawful request from a competent regulatory or law enforcement authority, ace96 will disclose Personal Data as legally compelled.

Data Retention

ace96 retains your Personal Data for as long as your Account remains active and for the following minimum periods thereafter:

• Account and Registration Data: Retained for a minimum of five (5) years from the date of Account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of last transaction or Account closure, whichever is later.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with applicable accounting and regulatory requirements.
• Communications Data: Live chat and email records retained for three (3) years unless required longer for an ongoing dispute or regulatory matter.
• Platform Usage Data: Aggregated, anonymised analytics data retained indefinitely. Identifiable usage logs retained for twelve (12) months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised so that it can no longer be associated with any identifiable individual.

Data Security

ace96 implements a layered security architecture to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction:

• Encryption in Transit: All data transmitted between your browser and the Platform is encrypted using 256-bit SSL/TLS protocols. HTTPS is enforced site-wide.
• Encryption at Rest: Personal Data stored on our servers is encrypted using industry-standard encryption algorithms. Payment credentials are never stored in plain text.
• Access Controls: Access to Personal Data is restricted to ace96 personnel who require it to perform their job functions. All staff with data access are subject to confidentiality obligations and undergo regular data protection training.
• Two-Factor Authentication: Available for all Player Accounts and mandatory for internal administrative access.
• Penetration Testing & Audits: The Platform undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities.

Despite our robust measures, no system is completely immune to risk. In the unlikely event of a data breach that poses a risk to your rights and freedoms, ace96 will notify affected individuals and relevant authorities in accordance with applicable law.

Cookies & Tracking

ace96 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Essential Cookies: Required for the Platform to function correctly — session management, authentication, security token validation, and the maintenance of your logged-in state. These cannot be disabled without significantly impairing Platform functionality.
• Analytics Cookies: Used to understand how players interact with the Platform — which pages are most visited, where sessions begin and end, and how features are used. Data is aggregated and anonymised before analysis.
• Functional Cookies: Remember your preferences — language settings, game display preferences, and responsible gambling tool configurations — to personalise your experience.
• Security Cookies: Assist our fraud detection systems in identifying unusual activity patterns, preventing account hijacking, and protecting the integrity of in-play betting markets.

You may control and manage non-essential cookies through your browser settings. Instructions for managing cookies differ by browser; please consult your browser's help documentation. Note that disabling certain cookies may affect Platform functionality.

Your Rights

Subject to applicable law and certain exceptions, you hold the following rights in respect of your Personal Data held by ace96:

• Right of Access: You may request a copy of the Personal Data ace96 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For basic account information, you may update details directly in your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to our legal retention obligations — data required for AML compliance, regulatory reporting, or live dispute resolution cannot be deleted before the applicable retention period expires.
• Right to Restrict Processing: You may request that ace96 temporarily suspend processing of your data in certain circumstances — for example, while a rectification request is under review.
• Right to Data Portability: Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. For direct marketing, objection will always be honoured immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact us via live chat on the Platform or submit a written request to [email protected] (plain text only — not a clickable link). We will respond within 30 calendar days, and we may require you to verify your identity before processing the request.

Minors & Age Restriction

The ace96 Platform is strictly intended for individuals aged 21 years and above. ace96 does not knowingly collect Personal Data from persons under the age of 21. If we become aware that Personal Data from an underage individual has been collected — whether through our own review, a third-party report, or a parental notification — we will take the following steps immediately:

• Suspend the associated Account pending investigation;
• Delete or anonymise all Personal Data collected from the underage individual as soon as reasonably practicable and no later than 30 calendar days from discovery;
• Return any real-money balance (after deducting any bonus or promotional credits) to the depositing payment method;
• Report the incident to relevant regulatory authorities if required by applicable law.

International Transfers

In the course of providing the Services, your Personal Data may be transferred to and processed in jurisdictions outside of Malaysia — for example, where our technology infrastructure providers or KYC verification partners are based. Where such transfers occur, ace96 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses or equivalent protections;
• Transfers only to jurisdictions that maintain data protection standards comparable to those applicable in Malaysia;
• Technical and organisational security measures consistent with those described in Section 9 of this Policy.

ace96 does not transfer Personal Data to jurisdictions that lack adequate data protection frameworks without first implementing appropriate contractual safeguards.

Policy Amendments

ace96 reserves the right to update this Privacy Policy from time to time to reflect changes in our processing activities, applicable law, or Platform functionality. When we make material changes, we will:

• Update the "Effective Date" at the top of this page;
• Where practicable, provide notice to registered Players via the Platform or by email;
• Ensure the most current version of this Policy is always accessible at https://ace96.cam/privacy-policy.

Your continued use of the Platform following any updates to this Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by ace96, please reach us through the following channels:

For concerns relating to your responsible gambling preferences or self-exclusion settings, please additionally refer to our Responsible Gambling page where dedicated tools and guidance are available.