Ace77 Privacy Policy – We Protect Your Data Like a Valued Asset

Ace77 collects personal information from you through several methods, including during the account registration process, while you use the platform, and when you interact with our support team. Below are the categories of data we collect and the purposes for which they are collected:

We only collect data that is strictly necessary to provide you with a safe, high-quality service. Our data minimisation principle (data minimisation) is central to how we handle user information. You may choose not to provide certain optional details, but this may limit your access to some features on the ace77 platform.

Every piece of data ace77 collects is used for a specific and legitimate purpose. We do not use your data for purposes unrelated to providing our services to you without first obtaining your consent. The following are the primary ways we use the information you provide:

• Account Management: Creating, verifying, and managing your ace77 account, including the identity verification (KYC) process required to ensure platform security.
• Transaction Processing: Processing your deposits and withdrawals securely through your preferred payment methods such as DuitNow, FPX, Touch 'n Go eWallet, and USDT.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, multi-account usage, and any suspicious activity on our platform.
• Personalised Experience: Delivering game recommendations, promotions, and relevant content based on your interests and gameplay habits on ace77.
• Responsible Gaming: Monitoring gameplay habits to identify signs of problem gambling and provide appropriate support when needed.
• Service Communications: Sending important notifications related to your account, transactions, promotions you have opted into, and platform updates.
• Product Improvement: Analysing usage patterns on an aggregate (non-individual) basis to enhance the user experience and develop new platform features.
• Legal Compliance: Meeting the legal and regulatory requirements applicable to ace77's platform operations, including reporting required by regulatory bodies.

Ace77 understands that sharing personal data is a sensitive matter that requires full transparency. We only share your information in limited circumstances and with parties that have a legitimate need to receive it, subject to strict confidentiality agreements.

Parties That May Receive Your Data:

• Payment Service Provider: Transaction information that must be shared with payment processors such as local banks, DuitNow operators, and digital wallet providers to enable deposits and withdrawals to be processed securely.
• Gaming Platform Provider: Certain game session data that must be shared with third-party game software providers to ensure games function correctly, subject to strict data protection agreements.
• Regulatory Bodies & Law Enforcement: In situations where ace77 is legally required or ordered by a court to disclose certain information to the relevant authorities.
• Identity Verification Service: Third parties that provide document verification and background check services for KYC and fraud prevention purposes.
• Internal Analytics Service: Analytics service providers we use to understand platform performance, where data is processed in aggregate and without individual identification.

In all data sharing scenarios above, ace77 ensures that the receiving parties are subject to data protection obligations equal to or stricter than the standards we uphold. We do not allow third parties to use your data for their own separate purposes beyond what we have specified.

Protecting your personal data from unauthorised access, breaches, and misuse is ace77's absolute top priority. We continuously invest in the latest security infrastructure to ensure your information remains safe in our care.

Technical Security Measures We Use:

• 256-bit SSL/TLS Encryption: All communications between your web browser or app and ace77 servers are encrypted using SSL/TLS protocol with 256-bit key strength, ensuring no third party can intercept the data transmitted.
• Two-Factor Authentication (2FA): ace77 offers a 2FA feature that can be enabled in your account settings to add an extra layer of protection to your login process.
• Data-at-Rest Encryption: All sensitive data stored in our databases — including financial information and identity documents — is encrypted at rest (encryption at rest) using AES-256 encryption standards.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect any suspicious activity or intrusion attempts and respond immediately.
• Strict Access Controls: Access to user personal data within ace77's internal systems is restricted to authorised personnel only, based on the principle of least privilege (least privilege principle).
• Regular Security Audits: ace77's security infrastructure undergoes regular independent audits by certified third-party cybersecurity firms to ensure compliance with the latest standards.
• Secure Data Backup: All data is regularly backed up to a secure, encrypted location to ensure service continuity and protection against data loss.

While ace77 takes every reasonable measure to protect your data, no security system in the world can guarantee 100% absolute protection. We therefore encourage you to also play your part in keeping your account secure by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

Ace77 uses cookies (cookies) and similar tracking technologies to enhance your experience on our platform, secure login sessions, and understand how users interact with our website. This section explains the types of cookies we use and how you can manage them.

Types of Cookies Used by ace77:

• Essential Cookies (Essential Cookies): These cookies are required for core platform functions such as login session authentication, security, and platform stability. You cannot disable these cookies without affecting platform functionality.
• Functional Cookies (Functional Cookies): Used to remember your preferences such as language, display settings, and login details to make returning to the ace77 platform more convenient.
• Analytics Cookies (Analytics Cookies): Helping us understand how users interact with the platform — most visited pages, time spent, and navigation paths — for the purpose of improving the overall user experience.
• Security Cookies (Security Cookies): Used exclusively to detect suspicious activity, prevent unauthorised login attempts, and protect user accounts.

You can manage your cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the ace77 platform.

As an ace77 platform user, you have certain rights regarding your personal data. ace77 is committed to respecting and facilitating the exercise of these rights in a straightforward manner, free from unnecessary barriers.

• Right of Access: You have the right to request and receive a copy of all personal data we hold about you. Requests will be processed within 30 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure: Under certain circumstances, you have the right to request that your personal data be deleted from our systems, subject to legal and operational requirements that necessitate retaining the data for a specified period.
• Right to Withdraw Consent: Where processing of your data is based on consent you have provided, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider if desired.
• Right to Object: You may object to the processing of your data for specific purposes such as direct marketing at any time.

To exercise any of the rights above, please contact the ace77 Privacy team via the live chat available on the platform or through our support email. All requests will be handled with care and responded to within the stipulated timeframe.

Ace77 does not retain your personal data longer than necessary for the purposes for which it was collected. Retention periods are determined based on our operational requirements, legal obligations, and internal audit needs.

Upon expiry of the defined retention period, your personal data will be securely deleted or anonymised (anonymised) in a way that ensures it can no longer be linked back to you as an individual.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the ace77 Privacy team is here to help. We are committed to providing accurate and helpful responses in a timely manner.

• Live Chat: The fastest way to reach us — available 24/7 via the chat icon in the corner of the ace77 platform.
• Email: Submit your written enquiry to our privacy team. We will respond within 2 business days.
• Via Account: Log in to your ace77 account and use the Privacy Settings section to manage your data preferences directly.

Ace77 also welcomes feedback and suggestions from users regarding improvements to our privacy policy. We are constantly striving to be more transparent and more responsible in handling the personal data of our Malaysian users.