Privacy Policy

This Privacy Policy ("Policy") is published by ace666, accessible at ace666.cam ("the Platform", "we", "us", or "our"). It describes how ace666 collects, processes, stores, and protects personal data in connection with the provision of our online casino, sports betting, and related services to users in Malaysia and other permitted jurisdictions.

ace666 takes the privacy and security of your personal data seriously. This Policy has been drafted in accordance with applicable data protection principles and is intended to give you a clear, honest account of how your information is handled — not simply as a legal formality, but as a reflection of our genuine commitment to responsible data stewardship.

By registering an account on ace666, making a deposit, or otherwise accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of our broader legal framework alongside our Terms & Conditions and Responsible Gambling Policy, all of which are incorporated by reference.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies, or could reasonably be used to identify, a living individual, whether directly (e.g., full name, NRIC number) or indirectly (e.g., device ID combined with location data).
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, consultation, disclosure, or deletion.
• "Data Subject" — The individual to whom Personal Data relates — in this context, the registered user of the ace666 Platform.
• "Controller" — ace666, as the entity that determines the purposes and means of processing your Personal Data.
• "Processor" — A third-party service provider that processes Personal Data on behalf of ace666 under contractual obligation (e.g., payment processors, KYC verification providers).
• "KYC" (Know Your Customer) — The mandatory identity and age verification process through which ace666 confirms a user's identity, age (minimum 21 years), and source of funds.
• "Cookies" — Small text files stored on your device by the Platform to facilitate functionality, analytics, and personalisation.
• "Sensitive Personal Data" — A subset of Personal Data warranting heightened protection, including identification document details and financial information.

ace666 collects Personal Data only to the extent necessary to provide, secure, and improve our services. We do not collect data speculatively or for purposes beyond those described in this Policy. The categories of data we collect are as follows:

ace666 processes your Personal Data for the following specific, legitimate purposes. We do not use your data for purposes incompatible with those stated below:

4.1 Service Delivery

Your registration data, financial data, and gaming activity data are used to create and manage your account, process deposits and withdrawals via Malaysian payment methods (Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency), and deliver the gaming services you have requested.

4.2 Identity Verification & Regulatory Compliance

KYC data is processed to verify that you meet the minimum age requirement of 21 years and to confirm your identity as required by applicable anti-money laundering (AML) obligations. KYC verification is mandatory for all first withdrawal requests and may be re-requested periodically or at any time at our discretion.

4.3 Fraud Prevention & Security

Technical data (including IP address, device fingerprint, and session metadata) is processed to detect and prevent unauthorised access, account takeover attempts, fraudulent transactions, and other security threats. This processing is conducted using automated systems and, where appropriate, manual review by our security team.

4.4 Responsible Gambling

Gaming activity data is monitored to identify patterns that may indicate problem gambling behaviour. This includes analysis of session duration, betting frequency, deposit patterns, and self-exclusion status. Responsible gambling monitoring is conducted in accordance with our Responsible Gambling Policy.

4.5 Marketing Communications

Where you have provided explicit consent to receive marketing communications, we may use your contact details to send you information about promotions, bonus offers, and new features available on ace666. You may withdraw marketing consent at any time by updating your account communication preferences or by contacting our support team.

4.6 Platform Improvement

Aggregated, anonymised usage data is processed to understand how users interact with the Platform, identify areas for improvement, and optimise the user experience. This processing does not involve Personal Data in an identifiable form.

ace666 processes your Personal Data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and ace666 — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC/AML requirements and the statutory age restriction of 21 years minimum.
• Legitimate Interests: Processing necessary for the legitimate interests of ace666 or third parties — including fraud prevention, platform security, and responsible gambling monitoring — where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed consent — including direct marketing communications and certain non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.

ace666 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the specific, controlled circumstances described below:

6.1 Payment Processors

To facilitate deposits and withdrawals, we share necessary financial and identity data with our payment processing partners, including the operators of Malaysian payment systems such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong. These partners process your data solely for the purpose of completing the relevant transaction and are bound by their own regulatory and data protection obligations.

6.2 KYC Verification Providers

Identity document data and biometric information submitted as part of the KYC process are shared with contracted third-party identity verification service providers. These providers are engaged under data processing agreements that prohibit use of your data for any purpose beyond KYC verification.

6.3 Regulatory Authorities

ace666 may be required by law to disclose Personal Data to regulatory authorities, law enforcement agencies, or courts in response to a valid legal request, court order, or as required under applicable AML legislation. We will notify affected users of such disclosure where legally permitted to do so.

6.4 Game Content Providers

To enable the delivery of third-party slot games and live casino content, limited technical data (such as session tokens and account identifiers) is shared with licensed game content providers. These providers receive only the data strictly necessary to deliver their respective gaming services and do not receive personally identifiable information beyond what is required for this purpose.

ace666 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and conduct analytics. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. Essential cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Used to remember your preferences, including language selection (English/Bahasa Melayu/Chinese), responsible gambling settings, and display preferences.
• Analytics Cookies: Used to collect anonymised, aggregated data about how users interact with the Platform — including pages visited, session duration, and navigation paths. This data helps us improve Platform performance and user experience.
• Security Cookies: Used to detect and prevent fraud, identify suspicious login activity, and protect your account from unauthorised access.

Non-essential cookies (functional and analytics) are activated only upon your consent, which may be provided or withdrawn through the Platform's cookie preference centre. Essential and security cookies operate without consent as they are required for the Platform to function safely.

ace666 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and internal governance obligations. The following general retention principles apply:

• Account Data: Retained for the duration of your account's existence and for a period of at least five (5) years following account closure, to satisfy legal and regulatory record-keeping requirements including AML obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission, as required by applicable AML regulations.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years to satisfy statutory financial record-keeping requirements.
• Support Communications: Live chat transcripts and support correspondence are retained for a minimum of two (2) years for dispute resolution and quality assurance purposes.
• Technical/Log Data: System logs and access records are retained for a period of up to twelve (12) months, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

ace666 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ace666 Platform is encrypted in transit using industry-standard 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive Personal Data — including KYC documents and financial details — is encrypted at rest using AES-256 encryption within our secure data storage infrastructure.
• Access Controls: Access to Personal Data within ace666 is granted on a strict need-to-know basis. Employee access to sensitive data is logged, monitored, and subject to periodic access reviews.
• Two-Factor Authentication (2FA): 2FA is available to all registered users and is strongly recommended as an additional layer of account security.
• Penetration Testing & Security Audits: The Platform undergoes regular third-party security assessments to identify and remediate vulnerabilities.
• Incident Response: ace666 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities in accordance with applicable requirements.

As a Data Subject, you hold the following rights in relation to your Personal Data held by ace666. To exercise any of these rights, please contact our support team at [email protected]. We will acknowledge all data rights requests within 5 business days and aim to fulfil verified requests within 30 calendar days.

• Right of Access: You may request a copy of the Personal Data ace666 holds about you, along with information about how it is used.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held about you.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (where consent was the lawful basis). Note: erasure requests may be subject to retention obligations under applicable law.
• Right to Restrict Processing: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: You may request that we provide your Personal Data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: You may object to processing of your Personal Data carried out on the basis of legitimate interests, including direct marketing. Upon receipt of a marketing opt-out, we will cease marketing communications without delay.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

ace666 strictly prohibits registration and use of the Platform by persons under the age of 21 years. We do not knowingly collect Personal Data from individuals under 21.

Age verification is conducted as part of the KYC process for all users. Where ace666 becomes aware that Personal Data has been collected from a person under the age of 21 — whether through a false declaration of age during registration or any other means — we will immediately close the relevant account, forfeit any associated balances, and securely delete the minor's Personal Data to the extent not required for legal reporting purposes.

If you believe a minor has accessed ace666 using your account or through any fraudulent means, please contact our support team immediately. We take this matter seriously and will act promptly.

ace666 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. The date of the most recent revision is displayed at the top of this page.

Where material changes are made to this Policy — particularly changes that affect how your data is used or your data rights — we will endeavour to notify registered users by posting a prominent notice on the Platform or sending a notification to your registered contact details.

Your continued use of the Platform following any amendment to this Policy constitutes your acknowledgement of the updated terms. If you do not agree with any amendment, you should cease using the Platform and contact us to request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by ace666, please contact our dedicated Data Support team. We are committed to responding to all privacy-related enquiries promptly and transparently.

ace666 treats all privacy-related correspondence with strict confidentiality. We maintain a full log of all data rights requests and our responses for accountability purposes. All communications should be conducted in writing (email or live chat) to ensure an accurate record is maintained.