Your Data Protection & Privacy

Privacy Policy ace365 – Malaysian Player Data Protection

At ace365, your privacy is not merely a legal obligation — it is a core value that guides every operational decision we make. Find out exactly what data we collect, how we use it, and what rights you have as a member.

Effective Date: 1 January 2026  |  Version: 2.1  |  Language: Bahasa Melayu (ms-MY)

Ace365's 6 Privacy Commitments to Malaysian Players

Before you read the full policy, here are the core principles that shape how ace365 handles the personal data of every member.

No Sale of Data to Third Parties

Ace365 has never and will never sell, rent, or share members' personal data with any third party for marketing purposes. Your information belongs to you — we only store and use it for the purposes you have consented to.

Your Data is Secure
Data Minimisation Principle

Ace365 only collects data that is genuinely necessary to provide the services you request. We do not collect excessive or irrelevant information — every data field in our registration forms and transactions has a clear and specific purpose.

Minimal Data
Full Control in Your Hands

As an ace365 member, you have the right to access, correct, download, and request the deletion of your personal data at any time. Requests are processed within 30 days and require no justification on your part.

Full Member Rights
Personal Data Protection Act Compliance

The ace365 Privacy Policy is drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). As a platform serving Malaysian players, we are bound by local legal requirements that protect your privacy rights.

PDPA 2010
Communication Preferences Control

You can choose which types of communications you wish to receive from ace365 — bonus promotions, game updates, or news about the Malaysia Super League and MPL esports. Unsubscribe from any communication category at any time via your account settings.

Your Choices

Your Rights as an ace365 Member

Under Malaysia's Personal Data Protection Act 2010 and the ace365 Privacy Policy, you have the following rights with respect to your personal data.

1
Right of Access

You have the right to request a copy of all personal data held by ace365 about you. Such requests will be fulfilled within 30 working days in a readily readable format.

2
Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request an immediate correction. Contact ace365 support with supporting evidence for prompt rectification.

3
Right to Erasure

You may request the deletion of your personal data from ace365's systems — subject to applicable legal retention and audit requirements. Such requests are processed within 30 days.

4
Right to Portability

You have the right to receive your personal data in a machine-readable format (JSON or CSV) for the purpose of transferring it to another platform if required.

5
Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Such objections will be actioned immediately without any additional conditions.

6
Right to Withdraw Consent

Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing that took place prior to that date.

Ace365 Data Usage Summary

A quick-reference table of the types of data collected and how they are used — transparency is ace365's commitment to every Malaysian member.

Data Type Primary Purpose Shared with Third Parties? Retention Period
Name & IC Information Identity verification (KYC) No — internal use only 7 years after account closure
Phone Number & Email Communications & account security No — internal use only Account active period + 3 years
Payment Details (TnG, GrabPay, etc.) Deposit & withdrawal processing Yes — licensed payment processors 7 years (tax requirement)
Betting & Gaming Records Audit, dispute resolution No — internal use only 5 years after transaction
IP Address & Device Data Security & fraud detection No — internal use only Rolling 90 days
Cookie & Site Behaviour Data Personalise your platform experience Not without consent Until cookies are deleted
Communication Preferences Sending relevant promotions No — internal use only Active account period

1. Introduction & Scope of Privacy Policy

This Privacy Policy explains how ace365 ("we", "the Platform", or "ace365") collects, uses, stores, protects, and discloses your personal information when you use the ace365-jit.com platform and all related services.

This policy applies to all users of the ace365 platform, including registered members, website visitors, and any individual who interacts with our platform in any capacity. By using the ace365 platform, you confirm that you have read and understood this Privacy Policy and agree to the practices described within it.

Platform Scope: This policy covers all activities on the ace365 platform, including jackpot slots, Live Casino (roulette, baccarat, blackjack), Sports Betting (Malaysia Super League football, EPL, BWF badminton, MPL MY esports), poker, and all related support services.

Ace365 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of personal data processing. As a responsible data controller, we ensure that all data processing is carried out lawfully, fairly, and transparently.

2. Personal Data We Collect

Ace365 collects your personal data through several channels — directly when you register or transact, automatically as you use the platform, and via third parties such as licensed payment processors. Below are the categories of data we collect:

Data You Provide Directly:

  • Identity Information: Full name as per MyKad or passport, identity card (MyKad) or passport number, date of birth, gender, and nationality.
  • Contact Information: Email address, mobile number, and mailing address where applicable for verification purposes.
  • Financial Information: Details of the payment methods you use for deposits and withdrawals — including e-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay), DuitNow phone numbers, or bank details for FPX (Maybank2u, CIMB Clicks). ace365 does not store credit or debit card numbers directly — this is handled by our licensed payment processors.
  • Verification Documents: A copy of your identity card or passport is required during the KYC (Know Your Customer) process before your first withdrawal or when certain limits are reached.

Automatically Collected Data:

  • Technical Data: IP address, browser type and version, operating system, device type (Android/iOS/desktop), screen resolution, and time zone.
  • Usage Data: Pages visited, time spent in each section, games played, bets placed, and navigation flow within the platform.
  • Game Record Data: All bets placed, wins and losses, deposit and withdrawal transaction history, and records of activated bonuses.

3. How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. ace365 uses members' personal data for the following:

  • Service Provision: To manage your account, process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX, and process your withdrawal of winnings.
  • Identity Verification: To meet KYC requirements and ensure that the ace365 platform is used only by eligible individuals (aged 18 and above).
  • Security & Fraud Prevention: To detect and prevent fraud, money laundering, and platform abuse — including multi-account usage and bonus manipulation.
  • Personalise Your Experience: To display games, promotions, and content relevant to your preferences and history — for example, recommending Malaysia Super League matches or MPL esports events based on the categories you bet on most.
  • Service Communications: To send important information regarding your account, platform changes, and security updates that cannot be unsubscribed from, as these are critical communications.
  • Marketing Communications: To send information about bonuses, promotions, and new offers — subject to your consent, which may be withdrawn at any time.
  • Responsible Gambling: To monitor gameplay patterns and identify signs of problem gambling so we can provide appropriate support to members who need it.
  • Legal Compliance: To fulfil legal obligations under the PDPA 2010, anti-money laundering laws, and applicable financial audit requirements.

4. Sharing Data with Third Parties

Ace365 does not sell, rent, or disclose members' personal data to third parties for marketing or commercial gain. Your data may be shared with a limited number of third parties only in the following circumstances:

  • Licensed Payment Processors: Transaction data that must be shared with licensed payment processors in Malaysia to facilitate deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX. All payment processors are bound by strict data confidentiality agreements.
  • Game Software Providers: Minimum data required for gaming licence verification and RNG audits with independently audited, licensed gaming software providers.
  • Statutory Authority: When required by Malaysian law, court order, or a legitimate enforcement authority in connection with a financial crime or money laundering investigation.
  • Business Transfer: In the event of a merger, acquisition, or sale of company assets, your data may be transferred to the new entity — with advance notice given to all members, and the same protections continuing to apply.

ace365's Commitment: All third parties we work with are bound by data processing agreements that require them to protect your data to the same standard as the ace365 Privacy Policy. ace365 takes full responsibility for the actions of any third-party data processors appointed by us.

5. Data Security

Protecting your personal data is a top priority at ace365. We apply multiple layers of technical and organisational security controls to keep your data safe from unauthorised access, loss, destruction, or disclosure:

  • Encryption in Transit: All data transmitted between your device and ace365's servers is encrypted with TLS 1.3 and verified 256-bit SSL certificates.
  • Data-at-Rest Encryption: Sensitive data stored in ace365's databases — including passwords and payment information — is encrypted using AES-256 standards.
  • Access Controls: Only specifically authorised ace365 staff may access members' personal data, and every access is logged for audit purposes.
  • 24/7 Monitoring: ace365's threat detection system continuously monitors for suspicious activity and will take immediate action upon detecting any threat.
  • Regular Security Audits: ace365 conducts regular penetration testing and security audits by independent security experts to identify and address vulnerabilities before they can be exploited.
  • Two-Factor Authentication: Available as an additional security layer for all ace365 member accounts — strongly recommended for maximum protection.

While ace365 implements comprehensive security measures, no system can be entirely infallible. In the event of a data breach involving your personal data, ace365 will notify you within 72 hours of the breach being detected, in line with international data protection best practices.

6. Cookies & Tracking Technologies

Ace365 uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use and their purposes:

  • Essential Cookies: Required for core platform operations — including login session verification, form security, and language preferences. Cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects information on how you use the ace365 platform — pages visited, time spent, and errors encountered. This data is used to improve the platform and does not personally identify you.
  • Functional Cookies: Remembering your preferences such as language, betting limits, and favourite games to provide a more personalised experience during your sessions.
  • Marketing Cookies: Used to display relevant ads and promotions based on your interests. These cookies require your explicit consent and can be disabled at any time.

You can manage cookies through your browser settings — however, disabling essential cookies may affect the functionality of the ace365 platform. Third-party cookies (such as analytics cookies) are only used when you provide consent via the cookie banner on your first visit to the platform.

7. Cross-Border Data Transfers

As an online platform, ace365's technical infrastructure may involve servers located in multiple countries. When your personal data is transferred outside Malaysia, ace365 ensures equivalent protection is maintained through the following measures:

  • Transfers are only made to countries or entities with recognised data protection standards equivalent to or higher than those of Malaysia.
  • All transfers are protected by standard data processing agreements that require recipients to safeguard your data under terms equivalent to this Privacy Policy.
  • Sensitive payment data is never stored outside systems controlled by licensed payment processors bound by PCI-DSS standards.

If you would like to know more about the protection mechanisms used for cross-border data transfers, please contact the ace365 Privacy Officer at the email address provided in Section 11.

8. Data Retention & Deletion

Ace365 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or to comply with legal obligations. The following are the key data retention guidelines:

  • Identity & KYC Data: Retained for 7 years after account closure, in line with Malaysia's anti-money laundering legal requirements.
  • Financial Transaction Records: Retained for 7 years for tax audit and financial compliance purposes.
  • Gaming & Betting Records: Retained for 5 years after each transaction for dispute resolution and audit purposes.
  • Security Log Data: Retained on a rolling 90-day basis for active threat detection.
  • Preferences & Optional Data: Retained for the duration of the active account period and deleted within 30 days of account closure.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. If you request deletion before the legally required retention period ends, we will inform you which portions of your data can be deleted immediately and which must be retained for legal compliance.

9. How to Exercise Your Rights

To exercise any of the privacy rights outlined in this Policy, you may contact ace365 through the following channels:

  • Submit a written request to the email support@ace365-jit.com with the subject line "Data Privacy Request" and specify the right you wish to exercise.
  • Contact ace365 customer support via live chat (available 24/7) and request to be connected with our Data Protection Officer.
  • For data access, correction, or deletion requests — please provide your account number and proof of identity for verification.

Ace365 will process all privacy requests within 30 working days. Where a request is complex or involves a large volume of data, this period may be extended to 60 days, with notice provided to you. No fees are charged for legitimate privacy requests, except where requests are manifestly unreasonable or excessively repetitive.

Identity Verification Required: To protect your privacy, ace365 will require identity verification before processing any data access, correction, or deletion request. This ensures that only you — and no one else — can access or modify your personal data.

10. Children's Data

The ace365 platform is intended for users aged 18 and above only. ace365 does not knowingly collect, store, or process personal data of individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. If you believe your child or an underage individual has registered on ace365, please contact us immediately at support@ace365-jit.com for prompt action.

11. Contact ace365's Privacy Officer

Ace365 has appointed a Data Protection Officer responsible for ensuring compliance with this Privacy Policy and Malaysia's Personal Data Protection Act 2010. You may contact our Data Protection Officer for any privacy-related queries, concerns, or requests:

  • Email: support@ace365-jit.com (subject: Privacy Officer / DPO)
  • Live Chat: Available 24/7 within the ace365 platform — request to be connected with the Privacy Officer
  • Response Time: Within 3 working days for privacy enquiries

If you are not satisfied with ace365's response to your privacy request or complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Ministry of Communications and Digital.

12. Amendments to the Privacy Policy

Ace365 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. When significant amendments are made:

  • Notice will be sent to all registered members via email at least 14 days before the amendment takes effect.
  • The latest version of the Privacy Policy, along with its effective date, will always be available on this page.
  • For material amendments that affect how we use your data, we will seek your renewed consent before the changes take effect.
  • Continued use of the ace365 platform after the effective date constitutes acceptance of the amended Privacy Policy.

Current Effective Date: 1 January 2026. Version 2.1. Any amendments will be communicated to all registered ace365 members via email at least 14 days before taking effect.

Touch 'n Go eWallet
GrabPay
DuitNow
FPX / Maybank2u
CIMB Clicks
Boost & ShopeePay

Why the ace365 Privacy Policy Matters to You as a Malaysian Player

When you register on any online platform — a casino, an e-commerce site, or social media — you are entrusting some of your personal information to that party. At ace365, we understand that trust is not something to be taken lightly. A player who deposits RM200 to play slots or bet on a Malaysia Super League match is trusting the platform not just with their money, but also with their name, phone number, and payment details. The ace365 Privacy Policy exists to ensure that trust is never taken for granted.

One thing that sets ace365 apart is our commitment to minimal data collection. We do not collect information we do not need. There are no irrelevant questions on our registration form, no tracking beyond what is operationally necessary, and no use of your data for purposes you have not consented to. Every data field we request has a clear justification — whether to verify your identity, process payments via DuitNow or Touch 'n Go eWallet, or ensure the platform is used safely by eligible individuals.

On the technical security front, ace365 invests seriously in the infrastructure that protects your data. 256-bit SSL encryption is not simply a feature listed in the terms — it is an active layer of defence operating at all times across every transaction you make. Whether you are depositing RM100 via GrabPay or withdrawing your EPL Sports Betting winnings to your Maybank2u account, all data in transit is protected by the same encryption standard used by Malaysia's banking system.

Account security is an area that many Malaysian players tend to overlook. ace365 offers two-factor authentication as an additional security layer — strongly recommended for all accounts, especially for VIP members with larger balances. On top of that, ace365's security monitoring system operates around the clock to detect suspicious login patterns, access attempts from new locations, or any unusual activity on your account. If anything out of the ordinary is detected, you will be notified immediately.

In the context of responsible gambling, ace365 uses gameplay pattern data not to maximise your time on the platform — but to identify early signs of problem gambling. If ace365's system detects patterns that suggest a potential gambling issue, our responsible gambling team may proactively reach out to offer support or remind you of the limit-setting tools available. This is a use of data we genuinely believe benefits players.

Your right to access and control your personal data is something ace365 takes seriously. If at any point you want to know what data we hold on you, you can request it and we will provide a full report within 30 days. If anything is inaccurate, you can request a correction. If you wish to close your account and request deletion of your data, we will honour that request in compliance with applicable legal retention requirements. These are your rights under Malaysia's Personal Data Protection Act 2010, and ace365 is committed to making it easy for you to exercise them without unnecessary barriers or delays.

Finally, the simplest but most important thing to remember: ace365 will never sell your data to advertisers, marketing companies, or any third party for commercial gain. Whether you are spinning the jackpot slots, betting on a BWF badminton match, or sitting at an ace365 live casino baccarat table — your personal data remains yours. We are its custodian, not its owner. That is the most fundamental commitment at the heart of the ace365 Privacy Policy.

Responsible Gambling: ace365 is committed to the wellbeing of all Malaysian members. Only bet what you can afford to lose, set your limits before you play, and remember that entertainment should always remain enjoyable. If you need support, please contact Talian Kasih 15999. Learn more about Responsible Gaming.

ace365 Terms & Conditions: This Privacy Policy should be read alongside the ace365 Terms & Conditions, which govern the overall use of the platform. Read our full Terms & Conditions.

Ready to Play with ace365?

Your data is safe with us. Join over 250,000 Malaysian players who trust ace365 as their online entertainment platform of choice. Register today and claim a welcome bonus of up to RM1,000.

18+ | Terms & conditions apply. Gamble responsibly.

Bahasa Melayu