Privacy Policy Ace 33 – Our Commitment to Protecting Your Data

1. Introduction – Why Privacy Matters to Ace 33

Ace 33 understands that trust is the foundation of our relationship with every player. When you choose to play on our platform, you are trusting us not only to provide a fair and secure gaming experience, but also to handle your personal information with full responsibility and integrity.

This Privacy Policy ("Policy") sets out in detail how Ace 33 ("we", "platform" or "Company") collects, processes, stores, shares, and protects your personal data as a user of the ace33.click platform. This policy applies to all registered players and website visitors residing in Malaysia.

We encourage you to read this Policy in full. If time does not permit, the most important things to know are: Ace 33 does not sell your data, we protect your data with the latest technology, and you have full control over your own personal data.

2. What Data Do We Collect?

Ace 33 collects only the personal data necessary to deliver platform services securely, meet regulatory requirements, and improve the user experience. The categories of data we collect are as follows:

2.1 Data You Provide Directly

2.2 Automatically Collected Data

When you use the Ace 33 platform, our systems automatically record certain technical information required for security and platform improvement purposes:

• IP address and network information
• Device type, operating system, and browser version
• Gaming activity history (games played, bet amounts, time spent)
• Financial transaction logs (deposits and withdrawals)
• Cookie and session token data (see Section 8)
• General location information (state/city) based on IP address

3. How We Use Your Data

Ace 33 uses your personal data only for legitimate purposes directly related to the provision of platform services. We do not process your data for any purpose not stated in this Policy without first obtaining your consent.

4. Data Sharing & Disclosure

Ace 33 does not share player data broadly. Disclosure only occurs in limited, specific circumstances as described below:

4.1 Trusted Service Providers

We share necessary data with third-party service providers who assist us in operating the platform. These include:

• Game provider: Microgaming, Evolution Gaming, Playtech, Pragmatic Play — to deliver the gaming experience
• Payment gateway: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX providers — for processing transactions
• Identity verification services: For KYC processes required by law
• Cloud infrastructure: Secure data storage on licensed and certified servers

All these providers are bound by strict data confidentiality agreements and may only use your data for the purposes we specify.

4.2 Legal Requirements

Ace 33 may be required to disclose personal data to the authorities in the following circumstances:

• Valid court orders or warrants
• Investigations related to anti-money laundering (AML) or terrorism financing
• Official requests from the Royal Malaysia Police (PDRM) or other law enforcement agencies
• Regulatory requirements for Ace 33's operating licence

5. Data Security Measures

Ace 33 continually invests in security infrastructure to ensure your personal data is always protected against increasingly sophisticated cyber threats. The following are the security layers we employ:

5.1 Data Transmission Security

• All communications between your device and Ace 33's servers are encrypted using TLS 1.3 protocol with 256-bit SSL certificates
• HTTP Security Headers (HSTS, CSP, X-Frame-Options) are enforced to prevent common web-based attacks

5.2 Data Storage Security

• Sensitive data is stored in encrypted form using AES-256
• Player passwords are stored in hashed form using the bcrypt algorithm — not even Ace 33 staff can view your original password
• Databases are protected by multi-layered firewalls and an intrusion detection system (IDS)
• Automated daily data backups are performed to geographically separate locations

5.3 Staff Access Controls

• Access to players' personal data is restricted to staff who require it to perform their job duties ("need-to-know basis")
• All database access is logged and automatically monitored
• Ace 33 staff undergo regular data protection training

6. Data Retention Period

Ace 33 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with legal requirements. Once the retention period expires, data will be securely deleted or anonymised.

After your account is closed, Ace 33 will delete or anonymise your data in accordance with the schedule above, unless we are legally required to retain it for a longer period.

7. Your Rights as an Ace 33 Player

Under Malaysia's PDPA and Ace 33's commitment to data protection, you have the following rights regarding your personal data:

7.1 Identity Verification Process for Privacy Requests

To protect the security of your account, ace 33 may require identity verification before processing any privacy rights-related requests. This is an additional safeguard to ensure that only the legitimate account holder can access or request the deletion of data.

8. Cookies, Tracking & Similar Technologies

Ace 33 uses cookies and similar tracking technologies to keep the platform running smoothly, enhance security, and understand how players use our platform.

8.1 Types of Cookies We Use

8.2 Managing Your Cookies

Essential cookies cannot be disabled as they are required for the platform to function. For all other cookies, you may:

• Manage cookie settings via the "Cookie Settings" icon located at the bottom of the ace 33 website
• Using your browser settings to block or delete cookies — though this may affect your experience on the platform
• Contact ace 33 Customer Service for further assistance with cookie settings

Ace 33 does not use third-party cookies for advertising purposes and does not share platform analytics data with external advertising networks.

9. Policy on Children's Data

The ace 33 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If you become aware that a minor has registered an account on Ace 33, please contact us immediately at privacy@ace33.click. We will take immediate action to close the account in question and delete all associated data. Ace 33 takes this responsibility extremely seriously as part of our commitment to responsible gambling.

10. Amendments to the Privacy Policy

Ace 33 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or any other relevant reason. When we make significant amendments, we will:

1. Updating the "Last Updated" date at the top of this document
2. Sending email notifications to all registered ace 33 players at least 7 days before the changes take effect
3. Displaying a clear notice on the ace 33 platform homepage

Continued use of the Ace 33 platform after any amendments take effect constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you may close your account and request data deletion in accordance with the procedure outlined in Section 7.

11. Contact the Ace 33 Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ace 33 handles your personal data, please contact our Privacy Officer:

For formal privacy-related complaints, please use the email subject line: "Privacy Complaint – [Your Account Number]". ace 33 is committed to handling all privacy complaints seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia.