ace96 Privacy Policy – How We Handle Your Personal Data

1. Introduction

ace96 (referred to in this policy as "ace96", "we", "us", or "our") is committed to protecting the privacy and personal data of all individuals who interact with the ace96 Platform, whether as registered players, prospective users, or visitors to the ace96 website at ace96.co.

This Privacy Policy has been prepared in accordance with applicable data protection principles and the requirements of the international gaming authority under which ace96 is licensed. It is intended to provide a clear and transparent account of how personal data is handled across all ace96 services, including the online casino, live dealer tables, sportsbook, and any associated mobile applications.

This Policy should be read in conjunction with the ace96 Terms & Conditions, which are incorporated herein by reference. In the event of any conflict between this Policy and the Terms & Conditions with respect to data handling, this Privacy Policy shall prevail.

2. Data Controller

For the purposes of applicable data protection law, ace96 is the data controller in respect of all personal data collected from users of the Platform. ace96 determines the purposes and means of processing personal data and is responsible for ensuring that such processing complies with its obligations under applicable law.

All queries relating to data processing, subject access requests, data correction requests, or complaints should be directed to the ace96 data protection contact, details of which are set out in Section 14 of this Policy.

3. Data We Collect

ace96 collects personal data in the categories set out below. Not all categories apply to all users — the data collected depends on the nature of your interaction with the Platform.

4. How We Collect Data

ace96 collects personal data through the following means:

• Direct provision: Data you provide when registering an ace96 account, completing KYC verification, submitting a deposit or withdrawal request, or contacting customer support.
• Automated technologies: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you access the ace96 Platform. See Section 9 for more on our cookies practices.
• Third-party sources: Identity and risk data received from KYC verification providers, fraud prevention services, and payment processors in connection with account verification and transaction processing. ace96 may also receive data from its licensed gaming software providers where relevant to account integrity.
• Publicly available sources: In limited circumstances, ace96 may consult publicly available records (for example, sanctions lists, politically exposed persons databases) as part of its anti-money laundering obligations.

5. Purpose & Legal Basis for Processing

ace96 processes personal data only where it has a lawful basis to do so. The primary purposes and corresponding legal bases are as follows:

• Account registration and management — necessary for the performance of the contract between ace96 and the player.
• Identity verification (KYC) and age verification — necessary for compliance with legal obligations and gaming licence conditions. Age verification is mandatory; ace96 does not permit access to real-money gaming by any person under 21 years of age.
• Payment processing and financial record-keeping — necessary for performance of the contract and compliance with financial regulatory obligations.
• Fraud prevention, anti-money laundering, and responsible gaming monitoring — necessary for compliance with legal obligations and legitimate interests in protecting the Platform's integrity.
• Customer support and dispute resolution — necessary for performance of the contract and legitimate interests in resolving player queries.
• Marketing communications — based on your explicit consent, where you have opted in to receive promotional communications from ace96. You may withdraw this consent at any time.
• Platform improvement and analytics — based on legitimate interests in improving the ace96 product, provided such processing does not override your fundamental rights and interests.

6. Data Sharing & Disclosure

ace96 does not sell, rent, or trade personal data. We may share data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment service providers: Banks (Maybank, CIMB, Public Bank), FPX operators, and eWallet providers (Touch 'n Go eWallet, Boost) to process deposits and withdrawals.
• KYC and identity verification providers: Third-party services engaged to verify player identities, screen against sanctions lists, and assess fraud risk.
• Gaming software providers: Certified game studios and live dealer platform operators who supply games available on ace96 and who may receive session data necessary to operate those games.
• Regulatory authorities: The gaming authority under which ace96 is licensed, tax authorities, or law enforcement agencies, where disclosure is required by law or pursuant to a lawful request.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by ace96, subject to strict professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ace96's business, player data may be transferred to the acquirer as part of that transaction. Affected players will be notified of any material change in data controller identity.

7. International Data Transfers

1. Personal data collected by ace96 may be transferred to, stored, or processed in jurisdictions outside Malaysia, including the jurisdiction in which ace96's servers and licensed gaming infrastructure are located.
2. Where personal data is transferred outside of Malaysia, ace96 ensures that appropriate safeguards are in place, which may include standard contractual clauses, binding corporate rules, or reliance on the adequacy decision of the relevant data protection authority.
3. By using the ace96 Platform, you acknowledge and consent to such transfers where they are necessary for the provision of ace96 services to you.

8. Data Retention

1. ace96 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer.
2. Player account data, including KYC documentation and transaction records, is retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
3. Gaming session logs and bet history are retained for a minimum of three (3) years for regulatory audit purposes.
4. Marketing preference records are retained until you withdraw consent or for a period of three (3) years following last interaction, whichever is earlier.
5. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its re-identification.

9. Cookies & Tracking Technologies

ace96 uses cookies and similar tracking technologies on the Platform. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, load-balancing cookies, and security tokens. They cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and account dashboard layout. Disabling these will not prevent access but may reduce convenience.
• Analytics cookies: Used to collect aggregated, anonymised information about how users interact with the Platform, helping ace96 improve its services. No personally identifiable information is shared with analytics providers.
• Marketing cookies: Used only where you have provided consent to receive tailored promotional communications from ace96. You may withdraw this consent at any time via the cookie settings panel.

You may manage cookie preferences through your browser settings. Note that blocking all cookies may prevent access to certain features of the ace96 Platform.

10. Your Data Rights

Subject to applicable law, ace96 players and Platform users have the following rights in relation to their personal data:

• Right of access: You may request a copy of the personal data ace96 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to ace96's legal retention obligations. Data that must be retained for regulatory purposes cannot be deleted prior to the mandatory retention period.
• Right to restriction of processing: You may request that ace96 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to data portability: Where processing is based on your consent or a contract, you may request that ace96 provide your personal data in a structured, machine-readable format.
• Right to object: You may object to processing based on ace96's legitimate interests. ace96 will cease such processing unless it demonstrates compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the ace96 support team as described in Section 14. ace96 will respond to valid requests within thirty (30) days.

11. Children's Privacy

1. ace96 services are strictly for individuals aged 21 years and above. The Platform does not knowingly collect personal data from any person under the age of 21.
2. Age verification is conducted as part of the KYC process for all registered players. Any account found to be operated by a person under the minimum age will be immediately closed and any associated balance forfeited.
3. If you have reason to believe that ace96 has inadvertently collected personal data from a person under 21, please contact us immediately. ace96 will take prompt steps to delete such data upon verification of the report.

12. Security Measures

ace96 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. ace96 will notify affected users and relevant authorities in the event of a data breach in accordance with applicable legal requirements.

13. Changes to This Policy

1. ace96 reserves the right to amend this Privacy Policy at any time. The version published on the Platform at any given time is the version currently in effect. Material changes will be communicated to registered players via email or in-platform notification at least fourteen (14) days before the changes take effect.
2. Your continued use of the ace96 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.
3. The date at the top of this page reflects when this Policy was most recently reviewed. ace96 conducts a formal review of this Policy at least annually.

14. Contact Us

For all privacy-related queries, data subject access requests, or complaints regarding ace96's handling of your personal data, please contact the ace96 support team.

Email (plain text — not a link): [email protected]

Live chat is available 24 hours a day, seven days a week from within the ace96 Platform following login. Our English-language support agents handle data and privacy queries and will escalate to the data protection function where appropriate.

ace96 is committed to resolving privacy concerns promptly and fairly. If you are not satisfied with ace96's response to a data complaint, you retain the right to lodge a complaint with the relevant supervisory authority in the jurisdiction in which you reside.

This Privacy Policy was last reviewed in June 2026 and supersedes all previous versions.