Privacy Policy PlayAce —
Member Personal Data Protection

1. Introduction

PlayAce ("we", "our platform") is committed to protecting the privacy of every individual who uses our platform. This Privacy Policy explains in detail how we handle your personal data — from how it is collected and the purposes it is used for, to the protective measures we implement.

This document is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international privacy standards. By registering and using the PlayAce platform, you consent to the processing of your personal data as described in this policy.

If you have any questions about this policy or how we handle your data, our customer support team is available at any time via live chat within the platform.

2. Types of Personal Data We Collect

PlayAce collects your personal data only for legitimate purposes that are necessary for platform operations. Below are the categories of data we collect and their respective purposes:

We do not collect sensitive data such as health information, criminal records or biometric data unless specifically required for legal compliance and with your explicit consent.

3. Purpose of Data Use

Every piece of data we collect has a clear and legitimate purpose. playace uses your personal data for the following purposes:

• Account management: Create, verify and maintain your member account, including the KYC process required for legal compliance.
• Transaction processing: Process deposits, withdrawals and all financial activity on the platform securely and accurately.
• Platform security: Detect and prevent fraud, money laundering, unauthorised access and other suspicious activity that could harm the platform or other members.
• Customer support: Respond to enquiries, resolve complaints and provide technical assistance whenever you need it.
• Service improvement: Analyse usage patterns to improve the interface, game features and overall platform experience.
• Marketing communications: Send promotional information, bonus offers and platform updates — only if you have given consent to receive such communications.
• Legal compliance: Fulfil obligations under PDPA, anti-money laundering (AML) laws and other regulatory requirements.

4. Data Sharing and Disclosure

PlayAce does not sell, rent or trade your personal data to third parties for their own marketing purposes. Your data is only shared in the following limited situations:

• Service providers: Technical partners who help us operate the platform, including payment processors, cloud service providers and identity verification companies, all bound by strict confidentiality agreements.
• Regulatory authorities: Government agencies, law enforcement bodies, or courts when we are required to do so by Malaysian law or a valid court order.
• Fraud investigation: Fraud prevention agencies and industry bodies that assist in detecting and preventing illegal activities that may affect platform members.
• Remarketing: If PlayAce is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction — with prior notice given to you.

All third parties that receive your data are required to comply with data protection standards equivalent to or stricter than our own. We will not transfer your data outside Malaysia unless adequate protections have been established in accordance with PDPA requirements.

5. Data Security and Protection

PlayAce implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse or accidental disclosure.

• 256-bit SSL encryption: All data transmitted between your device and playace servers is protected with industry-grade 256-bit SSL encryption, ensuring your sensitive information cannot be intercepted by third parties.
• Secure data storage: Personal data is stored on servers protected by layered access controls, enterprise-grade firewalls, and real-time intrusion detection systems.
• Two-factor authentication (2FA): 2FA is available for all member accounts, adding an extra layer of security that protects your account even if your password is compromised.
• Regular security audits: We conduct regular penetration testing and security audits by independent experts to identify and address any system vulnerabilities.
• Staff training: All playace staff with access to user data undergo comprehensive data protection training and are bound by strict confidentiality agreements.

6. Cookies and Tracking Technologies

PlayAce uses cookies and similar tracking technologies to enhance your user experience and understand how our platform is used. Cookies are small text files stored on your device when you visit our website.

We use three main categories of cookies:

• Essential Cookies: Required for core platform functions such as login session management, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helps us understand how members interact with the platform, which pages are visited most frequently and where technical issues may occur. This data is collected anonymously for platform improvements.
• Functional Cookies: Store your personal preferences such as display settings, language choices and recent activity records to deliver a more personalised experience.

You can manage your cookie preferences through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the PlayAce platform.

7. Your Rights Regarding Personal Data

Under Malaysia's PDPA and PlayAce's privacy policy, you have the following rights regarding your personal data. We respect and facilitate the exercise of each of these rights:

To exercise any of the above rights, please contact the playace customer support team. We will process your request within 21 business days and may require identity verification before the request is processed.

8. Data Retention Period

PlayAce retains your personal data for as long as necessary to fulfil the purposes stated in this policy or as required by Malaysian law.

• Active account data: Retained for the duration your account is active, plus the period required by legal obligations.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date in line with Malaysian financial and anti-money laundering legal requirements.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• KYC Data: Retained for a minimum of 5 years after account closure in accordance with legal compliance requirements.
• Technical log data: Retained for 12 months for security and system debugging purposes.

When data is no longer needed and there is no legal obligation to retain it, PlayAce will securely delete or anonymise that data using industry-recognised methods.

9. Changes to the Privacy Policy

PlayAce reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements or new platform features. Any material changes will be communicated to you via:

• Clear notifications on the platform's home page and within the mobile app
• Email to the address registered in your account
• In-platform notice at least 14 days before changes take effect

The "Last Updated" date at the top of this document indicates when this Privacy Policy was last reviewed. It is your responsibility to check this policy periodically. Continued use of the platform after any amendments take effect constitutes your acceptance of those changes.

10. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our privacy and data protection team:

• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform
• Email: [email protected] (plain text only)
• Response time: We are committed to responding to all privacy-related enquiries within 3 business days