Privacy Policy ace99 —
Your Data, Our Responsibility

This Privacy Policy is issued by ace99 ("we", "Platform", "ace99") and applies to all users who access or use the ace99.bar website, the ace99 mobile app, and all related services we offer.

We take privacy protection seriously. As an online casino platform operating in Malaysia, we are subject to strict compliance requirements regarding user data management, including KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations. All data processing activities are carried out for legitimate purposes and with proportionate safeguards in place.

By registering or using the ace99 platform, you acknowledge that you have read and understood this Privacy Policy. If you have any questions, our support team is available via 24/7 live chat.

Ace99 collects your personal data through several means: information you provide directly during registration, data generated automatically through your use of the platform, and information we receive from trusted third parties for verification purposes.

Identity & Account Information:

Financial & Transaction Information:

Technical & Usage Data:

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for purposes unrelated to delivering ace99 services. The following are the primary purposes for which your personal data is used:

• Account Management: Creating and maintaining your account, processing registration, and enabling you to log in securely to the ace99 platform.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions quickly and securely through your chosen payment method.
• KYC & AML Compliance: Verifying your identity to fulfil legal requirements related to anti-money laundering and counter-terrorism financing.
• Account Security: Detecting and preventing unauthorised access, fraud, and suspicious activity that may compromise your account or funds.
• Customer Support: Responding to inquiries, resolving complaints, and providing effective technical support whenever you need assistance.
• Experience Personalisation: Personalising game recommendations, promotions, and the platform interface based on your preferences and usage patterns.
• Service Communications: Sending account-related notices, security updates, terms changes, and promotional information (subject to your communication preferences).
• Analytics & Improvement: Understanding platform usage patterns to continuously improve the user experience and technical performance of ace99.

Ace99 does not sell, rent, or transfer your personal data to third parties for commercial marketing purposes. However, in the course of operating the platform, we may share your data with the following categories of parties:

• Payment Service Providers: Financial institutions, payment processors, e-wallet providers, and crypto partners that process your financial transactions. This sharing is limited strictly to the information required to complete the transaction.
• Game Software Providers: Game development companies that supply casino content to our platform receive only the minimum data necessary to run your gaming session.
• KYC Service Providers: Trusted third-party identity verification companies help us securely verify your documents and identity information.
• Regulatory Authority: We will disclose data to law enforcement authorities, financial regulators, or courts when required to do so by law or a valid court order.
• Analytics Partners: Analytics service providers that help us understand platform usage receive only de-identified and aggregated data.

Your data security is our top technical priority. ace99 continuously invests in security infrastructure to ensure your information is always protected against increasingly sophisticated cyber threats.

• 256-bit SSL Encryption: All data transmitted between your device and ace99 servers is protected by 256-bit SSL/TLS encryption — the same industry standard used by banking institutions.
• Data Encryption at Rest: Sensitive data stored in our databases, particularly financial information and KYC documents, is encrypted using AES-256.
• Two-Factor Authentication (2FA): We offer 2FA for all user accounts to add an extra layer of security during login.
• Continuous Monitoring: Our automated threat detection system monitors platform traffic and activity 24/7 to identify any anomalies or intrusion attempts.
• Strict Access Controls: Only explicitly authorised staff may access user data, and all access is logged and regularly audited.
• Penetration Testing: The ace99 platform undergoes regular security testing by independent cybersecurity experts to identify and patch any vulnerabilities before they can be exploited.

While we employ comprehensive security measures, no system can guarantee 100% absolute security. We encourage you to play your part in protecting your account by using a strong password and not sharing your login credentials.

Ace99 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and tailor content to your preferences. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication, security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Storing your preferences such as language, display settings, and interface layout so you don't have to reconfigure them each time.
• Analytics Cookies: Helping us understand how users interact with the platform — the most frequently visited pages, time spent, and points where users encounter difficulties. This data is aggregated and does not identify individuals.
• Security Cookies: Used to detect suspicious login attempts, verify device identity, and prevent CSRF (Cross-Site Request Forgery) attacks.

You can manage your cookie settings through your browser settings at any time. However, disabling essential cookies may affect your ability to use certain features of the ace99 platform.

Ace99 recognises and respects your rights regarding personal data. The following are the rights you hold and how to exercise them:

Ace99 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by law. Our data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account is active and for 5 years after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial compliance legislation and audit requirements.
• KYC Documents: Retained for 5 years from the date of last verification or from the account closure date, whichever is later.
• Security Logs: Retained for 2 years for the purpose of security incident investigation and digital forensics.
• Cookie & Analytics Data: Session data is deleted after logout; aggregated analytics data is retained for 2 years.
• Support Communication Records: Support tickets and live chat transcripts are retained for 3 years.

Once the retention period expires, your data will be securely deleted or anonymised using methods that prevent recovery.

Ace99 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending email notices to all registered users at least 7 days before changes take effect.
• Displaying clear notices on the platform's home page and login page.

Your continued use of the ace99 platform after any Privacy Policy changes take effect will be considered your acceptance of the updated policy. If you do not agree with the changes, you must stop using the platform and close your account.

If you have any questions, concerns, or wish to exercise your privacy rights, there are several ways to reach the ace99 privacy team:

• Live Chat 24/7: The fastest way to get an immediate response from our support team, available at all times.
• Privacy Email: For more detailed written enquiries, you may reach us via the support email listed in the footer of this page.
• Help Centre: Visit the FAQ us for answers to frequently asked questions about privacy and security.

We are committed to responding to all privacy-related inquiries within 48 working hours. For complaints involving possible data breaches, we aim to provide an initial response within 24 hours.