Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "ace200", "we", "us", or "our" refers to the operator of the ace200 platform accessible at https://ace200.cam and all associated services.
• "Platform" means the ace200 website, mobile-optimized interface, and all related services, features, content, and functionality.
• "Player", "User", "you", or "your" refers to any individual who visits, registers on, or uses the ace200 Platform.
• "Personal Data" means any information that identifies or can reasonably be used to identify an individual, directly or indirectly, including name, date of birth, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Third Party" means any individual or entity other than you or ace200, including our service providers, game studios, payment processors, and analytics partners.
• "Cookies" means small text files placed on your device by a website to store browsing preferences, session information, and other identifiers.
• "KYC" means Know Your Customer — the identity and document verification process required under our anti-money laundering (AML) compliance obligations.

2. Data We Collect

ace200 collects different categories of Personal Data depending on how you interact with our Platform. The categories of data we may collect are described below.

2.1 Registration Data

When you create an ace200 account, we collect:

• Full legal name (as it appears on your official identification document)
• Date of birth (to verify that you are 21 years of age or older)
• Email address
• Mobile phone number
• City and province of residence (e.g., Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta)
• Preferred username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to verify Player eligibility, we collect:

• A copy of your Indonesian National Identity Card (KTP — Kartu Tanda Penduduk)
• A selfie photograph holding your KTP
• Proof of address documents (utility bills, bank statements, or official government correspondence)
• Bank account details, including account holder name and account number

2.3 Financial Transaction Data

When you deposit or withdraw funds, we record:

• Transaction amounts in Indonesian Rupiah (IDR / Rp)
• Payment method used (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon)
• Bank account number and registered account holder name
• Transaction timestamps and reference numbers
• Deposit and withdrawal history

2.4 Gaming Activity Data

We collect information about your gaming behavior on the Platform, including:

• Games played, bets placed, and results recorded
• Wager amounts, win/loss history, and account balance changes
• Bonus claims, wagering progress, and promotion participation
• Session duration, session start and end times, and login frequency

2.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical information:

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser version
• Referring URL and pages visited within the Platform
• Session identifiers and cookie data
• Connection timestamps and error logs

2.6 Communications Data

When you contact our customer support team or interact with us via live chat, email, or messaging services, we retain records of those communications, including message content, timestamps, and the nature of your inquiry or complaint.

3. How We Collect Data

ace200 collects Personal Data through the following means:

• Directly from you — when you register, complete KYC, deposit funds, place bets, contact support, or update your profile.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you visit or interact with the Platform.
• From third parties — including payment processors, identity verification services, fraud detection providers, and analytics platforms, who share data with us in connection with the services they provide on our behalf.
• From public sources — where permitted by applicable law, we may supplement your data with information from publicly available sources for the purposes of fraud prevention and AML compliance.

4. Legal Basis for Processing

ace200 processes Personal Data on the following legal grounds:

5. How We Use Your Data

ace200 uses the Personal Data we collect for the following purposes:

5.1 Account and Service Delivery

• Creating, verifying, and managing your ace200 account
• Processing deposits and withdrawals in Indonesian Rupiah via your nominated bank account
• Crediting and debiting your game balance in connection with bets, wins, bonuses, and promotions
• Delivering customer support and resolving account-related inquiries and disputes

5.2 Compliance and Security

• Verifying your identity and age (21+) in accordance with our KYC obligations
• Detecting, investigating, and preventing fraud, money laundering, and other financial crimes
• Monitoring gaming activity for signs of problem gambling and applying responsible gaming interventions where appropriate
• Fulfilling reporting obligations to relevant regulatory and law enforcement authorities

5.3 Platform Improvement

• Analyzing aggregated usage data to improve Platform performance, navigation, and game selection
• Conducting internal research and analytics to better understand Player preferences and behavior
• Testing new features, promotions, and Platform updates before public release

5.4 Marketing and Communications

• Sending you promotional offers, bonus notifications, and news about ace200 — only where you have opted in to receive such communications
• Personalizing promotional content based on your gaming preferences and activity history
• Sending transactional communications such as deposit confirmations, withdrawal receipts, and account security alerts

6. Data Sharing and Disclosure

ace200 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your data with third parties only in the circumstances described below.

6.1 Service Providers

We engage carefully selected third-party service providers who process Personal Data on our behalf and under our instruction. These include:

• Payment processors and banking partners — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon — who facilitate deposit and withdrawal transactions
• Identity verification providers who assist with KYC document review and fraud screening
• Game software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, whose platforms are integrated into ace200 and who may receive session and game result data
• Analytics and performance monitoring providers who help us understand Platform usage and optimize the user experience
• Customer support platform providers who host our live chat and ticket management systems

All service providers are contractually required to process data only for the purposes for which it was shared and to maintain appropriate security standards.

6.2 Legal and Regulatory Disclosure

ace200 may disclose Personal Data to governmental authorities, law enforcement agencies, regulators, or courts where we are legally required to do so, or where we have a good-faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, or regulatory directive
• Protect and defend the rights or property of ace200
• Prevent or investigate possible wrongdoing in connection with the Platform
• Protect the personal safety of Players, ace200 staff, or the public

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ace200's business assets, Personal Data held by ace200 may be transferred to the acquiring entity as part of that transaction. Players will be notified by email or via a prominent notice on the Platform prior to any such transfer taking effect, and the new operator will be required to honor the commitments made in this Privacy Policy.

6.4 Aggregated and Anonymized Data

ace200 may share aggregated, anonymized, or de-identified data — which cannot reasonably be used to identify any individual — with third parties for research, industry analysis, or marketing purposes. This is not considered a disclosure of Personal Data and does not require your consent.

7. Cookies and Tracking Technologies

ace200 uses cookies and similar tracking technologies to operate and improve the Platform, maintain your session, and deliver a personalized experience. The types of cookies we use are described below.

You may configure your browser to refuse all cookies or to alert you when cookies are being sent. Please note that disabling strictly necessary cookies will prevent you from logging in to your ace200 account and will significantly impair Platform functionality. Disabling analytics or functional cookies will not prevent you from using the Platform but may affect your experience.

8. Data Retention

ace200 retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, and to comply with our legal, regulatory, and contractual obligations. Our general retention periods are as follows:

• Account registration data: Retained for the duration of the active account relationship, and for a minimum of 5 years following account closure, in accordance with AML record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of the last transaction or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Gaming activity logs: Retained for up to 2 years from the date of the activity, unless retention is required for longer by ongoing dispute resolution or regulatory investigation.
• Customer support communications: Retained for up to 3 years from the date of the last interaction.
• Technical and device data (logs): Retained for up to 12 months from the date of collection.
• Marketing preference records: Retained for as long as your account is active and for up to 1 year following account closure or opt-out, to evidence your consent history.

Following the expiry of the applicable retention period, Personal Data will be securely deleted or anonymized in a manner that prevents reconstruction of the original data.

9. Data Security

ace200 takes the security of your Personal Data seriously and implements a range of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, and destruction.

9.1 Technical Measures

• SSL/TLS Encryption: All data transmitted between your device and ace200 servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Data Encryption at Rest: Sensitive Personal Data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. All staff with access to Personal Data are subject to confidentiality obligations.
• Firewall and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and monitored 24/7 for unauthorized access attempts and anomalous activity.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security.

9.2 Organizational Measures

• Regular security training for all staff who handle Personal Data
• Periodic security audits and vulnerability assessments of our Platform and infrastructure
• A documented incident response procedure for detecting, containing, and reporting data breaches

10. Your Data Rights

As a Player on the ace200 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a clear description of your request.

We will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by up to an additional 60 days, and we will inform you of any such extension within the initial 30-day period. We reserve the right to verify your identity before processing any data rights request.

11. Children's Privacy

The ace200 Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect, process, or store Personal Data from individuals under the age of 21. If we discover that a registered account belongs to a person under 21, we will immediately suspend that account, delete or anonymize the associated Personal Data (except where retention is required by law), and forfeit any funds in the account pending appropriate review.

If you are a parent or guardian and believe that a minor in your care has provided Personal Data to ace200, please contact us immediately at [email protected] and we will take prompt action to address the matter.

12. Third-Party Services

The ace200 Platform integrates third-party game engines, payment gateways, and analytics tools provided by external vendors. When you interact with these integrated services — for example, by playing a game powered by Pragmatic Play or Evolution Gaming, or by initiating a bank transfer via BCA or Mandiri — data relevant to that interaction may be processed by the respective third-party provider under their own privacy policies.

ace200 is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party services you interact with in connection with the ace200 Platform. We select our third-party partners carefully and require them to maintain adequate data protection standards consistent with this Privacy Policy, but we cannot guarantee the practices of independent third parties.

13. International Data Transfers

ace200's servers are maintained in secure data center facilities. In the course of providing our services, your Personal Data may be transferred to and processed in countries other than Indonesia. Where such transfers occur, ace200 ensures that appropriate safeguards are in place to protect your data, including contractual obligations on receiving parties that require them to maintain standards of data protection equivalent to those described in this Privacy Policy.

By using the ace200 Platform, you acknowledge and consent to the transfer of your Personal Data to locations outside Indonesia where necessary for the delivery of our services, subject always to the safeguards described in this section.

14. Changes to This Policy

ace200 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The date of the most recent revision is displayed at the top of this page. We will notify you of material changes by sending an email to your registered address or by displaying a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the ace200 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which ace200 handles your Personal Data, please contact our Data Protection team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through the chat widget on the Platform
• Subject Line: Please use "Privacy Request — [Your Registered Email]" when emailing us about data rights matters to help us route your request promptly

ace200 is committed to addressing all privacy-related inquiries fairly and transparently. We aim to acknowledge all privacy requests within 24 hours and to provide a substantive response within 30 days.