Mr ace Privacy Policy – Protection of Your Personal Data

Introduction and Scope of This Policy

Mr ace ("we", "Platform" or "company") is committed to protecting the privacy of every individual who interacts with our services. This Privacy Policy applies to all users of mrace.app, the mr ace mobile app and all related services we offer.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international standards for personal data protection. This means we only collect data that is strictly necessary, store it securely, and will never sell or share your information with third parties for marketing purposes without your consent.

This document is designed to give you a clear and honest picture of how your data is managed. We believe transparency is the foundation of trust, and your trust is our priority.

Information We Collect

Mr ace collects your personal information through several methods depending on how you interact with our platform. The following are the categories of information we collect:

Information You Provide Directly:

• Full name as shown on a valid identification document.
• Date of birth for age verification purposes.
• Active email address and mobile phone number.
• Current residential address information.
• Identity documents (national ID, passport) for the KYC process.
• Payment method information such as bank account numbers or e-wallet details.

Automatically Collected Information:

• Your device's IP address and general location data.
• Browser type and operating system used.
• Pages visited, time of visit and platform usage patterns.
• Technical log data and game activity records.
• Cookie and similar tracking technology information.

How We Use Your Information

Every piece of information we collect has a specific and legitimate purpose. mr ace uses your personal data for the following purposes:

• Account Management: Create, verify and manage your member account on the mr ace platform.
• Transaction Processing: Process deposits, withdrawals and all financial transactions securely and accurately.
• Identity Verification (KYC): Fulfil legal compliance requirements including age verification and anti-money laundering measures.
• Customer Support: Enables our team to provide relevant and personalised assistance whenever you need help.
• Platform Security: Detect and prevent fraud, unauthorised access and suspicious activity.
• Service Improvement: Analyse usage patterns to improve the user experience, platform performance and game offerings.
• Marketing Communications: Send relevant promotions, offers and updates — only to members who have consented to receive them.
• Legal Compliance: Meet regulatory obligations and reporting requirements set by the relevant authorities.

Sharing Information with Third Parties

Mr ace does not sell, rent or trade your personal information to any third party for their own marketing purposes. However, there are limited situations where we may need to share your data:

• Trusted Service Providers: Payment processing companies, technical service providers, and game providers that have signed strict data protection agreements with us.
• Legal Requirements: When required by law, court order, or a competent government authority.
• Fraud Prevention: Sharing necessary data with fraud prevention agencies or law enforcement authorities for investigation purposes.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of those business assets, subject to prior notification to you.

All third parties we work with are required to comply with the same data protection standards we uphold. We do not permit them to use your data for any purpose other than those specified in our agreements.

The Security of Your Personal Data

The security of your personal information is mr ace's top priority. We continuously invest in the latest security infrastructure to ensure your data is always fully protected.

The security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is protected by industry-standard SSL encryption.
• Stored Data Encryption: Sensitive information such as passwords and financial data is stored in encrypted form in our database.
• Two-Factor Authentication (2FA): An additional security layer is available on all member accounts to prevent unauthorised access.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect any suspicious activity or intrusion attempts.
• Regular Security Audits: Independent security assessments are conducted periodically by qualified third-party security experts.
• Internal Access Controls: Only authorised personnel may access member personal data, and every access is logged and monitored.

Cookies and Tracking Technologies

Mr ace uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the mr ace platform.

Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

Data Retention Period

Mr ace only retains your personal data for as long as it is needed for the purposes stated in this policy or as required by applicable law.

• Active Account Data: Retained for the duration that your account remains active on the mr ace platform.
• KYC and Identity Data: Retained for a minimum of 7 years after account closure to meet anti-money laundering compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with accounting and financial legislation requirements.
• Support Communication Logs: Retained for 3 years after the last interaction for reference and service improvement purposes.
• Analytics Cookie Data: Retained according to the validity period of each cookie as specified in our cookie settings.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you as an individual.

Links to Third-Party Websites

The mr ace platform may contain links to third-party websites such as game providers or payment providers. This Privacy Policy applies solely to the mr ace platform.

We are not responsible for the privacy practices of any third-party websites. We encourage you to read the privacy policy of each website you visit separately. Links to external websites on our platform do not imply that we endorse or guarantee the security of those sites.

Amendments to the Privacy Policy

Mr ace reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service improvements.

Any significant changes will be communicated to you via:

• A notice displayed on the platform's home page at least 14 days before taking effect.
• Notification emails to the address registered with your account.
• In-app notifications on the mr ace mobile app.

The "Updated" date at the top of this document reflects the date of the latest amendment. Continued use of the platform after the amendment's effective date constitutes acceptance of the updated terms.

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us:

• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform or the mr ace mobile app.
• Privacy Email: [email protected] — dedicated to privacy and data protection enquiries.
• General Support Email: [email protected]

We are committed to responding to all privacy-related enquiries within 5 working days. For official requests related to data rights under PDPA, the response period is 30 working days.