At SuperAce88, protecting your personal data is not an afterthought — it is a core operational commitment. This Privacy Policy explains precisely what information we collect, why we collect it, how we use and protect it, and what rights you hold over your own data. We encourage all players to read this document carefully before using our Platform.
SuperAce88 ("the Platform", "we", "us", or "our") is committed to safeguarding the privacy and personal data of all individuals ("you", "your", "User", or "Player") who access or use the services available athttps://superace88.cam. This Privacy Policy issued in accordance with applicable international data protection principles and the data handling obligations arising from our online gaming licence.
This document sets out, in plain and formal terms, the categories of personal data we collect, the purposes for which that data is processed, the legal bases upon which processing is conducted, the periods for which data is retained, and the rights you hold as a data subject. It applies to all current and future Services offered through the Platform.
By registering an account, making a deposit, or otherwise using the SuperAce88 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this policy, you should immediately cease use of the Platform. Questions or concerns may be directed to our support team at any time.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy, both of which form part of the overall agreement governing your use of SuperAce88.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, contact details, financial information, and behavioural data collected in connection with Platform use. |
| Data Controller | SuperAce88, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| Data Processor | Any third party engaged by SuperAce88 to process personal data on its behalf, such as payment service providers, KYC verification vendors, and cloud infrastructure providers. |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, erasure, or any combination of those operations. |
| Consent | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
| Cookies | Small text files placed on your device by the Platform to enable functionality, session management, analytics, and personalisation. |
| KYC | Know Your Customer — the mandatory identity and age verification process required to activate a fully functional SuperAce88 account. |
SuperAce88 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third parties as required for compliance and fraud prevention purposes.
3.1 Information You Provide DirectlySuperAce88 applies the principle of data minimisation: we collect only the personal data that is strictly necessary for the stated purposes. We do not collect sensitive data categories (such as health information or political opinions) unless this is directly relevant to a responsible gambling referal you have initiated yourself.
SuperAce88 processes your personal data for the following defined purposes:
| Purpose | Details |
|---|---|
| Account Management | Creating, maintaining, and administering your registered account, including processing deposits, withdrawals, and account-related communications. |
| Identity Verification | Conducting KYC checks to verify your identity, age (21+ requirement), address, and payment method ownership in compliance with licensing obligations. |
| Transaction Processing | Facilitating deposits and withdrawals through Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow/FPX, Maybank, CIMB, Public Bank, Hong Leong, and USDT TRC20. |
| Regulatory Compliance | Meeting anti-money-laundering (AML), counter-terrorism financing (CTF), and responsible gambling obligations under our licensing framework. |
| Fraud Prevention | Detecting and preventing fraudulent activity, bonus abuse, account compromise, and prohibited conduct as defined in our Terms and Conditions. |
| Customer Support | Responding to enquiries, resolving disputes, and providing technical assistance in English, Bahasa Melayu, and Mandarin Chinese. |
| Personalisation | Improving your experience on the Platform through personalised game recommendations, promotional offers, and relevant communications — subject to your marketing preferences. |
| Analytics & Improvement | Analysing aggregate usage patterns to improve Platform performance, game selection, payment method coverage, and user experience. |
SuperAce88 processes your personal data one or more of the following legal bases, depending on the specific processing activity:
Where processing is based on consent, withdrawal of that consent does not affect the lawfulness of any processing conducted prior to withdrawal. It also does not affect processing conducted on other legal bases (such as legal obligation or contractual necessity).
SuperAce88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your personal data with trusted third parties in the following limited circumstances:
All third-party data processors engaged by SuperAce88 are required to handle your personal data in accordance with applicable data protection standards and are contractually bound to use your data only for the specific purposes for which it was shared.
SuperAce88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. The following retention principles apply:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Duration of active account, plus a minimum of 5 years following account closure, as required under anti-money-laundering regulations. |
| KYC / Identity Documents | Minimum 5 years from the date of verification, or longer if required by licensing authority or ongoing compliance investigation. |
| Financial Transaction Records | Minimum 5 years from the date of each transaction, in compliance with financial record-keeping obligations. |
| Customer Support Correspondence | 3 years from the date of each interaction, unless the matter is subject to an ongoing dispute or legal proceeding. |
| Marketing Preferences & Consent Records | Duration of marketing relationship, plus 3 years following opt-out, to demonstrate compliance with consent requirements. |
| Technical / Log Data | Up to 24 months, used for fraud detection, security analysis, and platform performance monitoring. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for analytical purposes.
SuperAce88 uses cookies and similar tracking technologies to operate the Platform, maintain session integrity, analyse usage patterns, and deliver relevant content. The following categories of cookies are used:
You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. SuperAce88 does not use third-party advertising cookies or cross-site tracking technologies for behavioural advertising purposes.
Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, manage, and delete cookies stored on your device. Consult your browser's help documentation for specific instructions. On mobile browsers used by players in Kuala Lumpur, Penang, Johor Bahru, and across Malaysia, cookie management settings are typically found in the browser's Privacy or Security menu.
SuperAce88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:
Despite our security measures, no data transmission over the internet can be guaranteed as completely secure. You are responsible for maintaining the confidentiality of your own account credentials. SuperAce88 will never contact you to request your password.
Subject to applicable data protection law and our legitimate interests and legal obligations, you hold the following rights with respect to your personal data held by SuperAce88:
Request a copy of the personal data we hold about you, along with information on how it is processed.
Request correction of inaccurate or incomplete personal data held your account record.
Request deletion of your personal data where retention is no longer necessary, subject to overiding legal obligations.
Request that processing of your personal data be limited in specific circumstances, such as during a dispute about data accuracy.
Receive a structured, commonly used, machine-readable copy of data you have provided to us, where technically feasible.
Object to processing based on legitimate interests, including profiling for personalised recommendations or direct marketing.
Withdraw consent for optional processing activities (such as marketing communications) at any time, without affecting prior lawful processing.
Lodge a complaint with a relevant data protection supervisory authority if you believe your data rights have been infringed.
To exercise any of the above rights, please contact SuperAce88 support via live chat or email. We will acknowledge your request within five (5) business days and aim to provide a substantive response within thirty (30) calendar days. Some requests may take longer where they involve complex or voluminous data; we will inform you of any extension.
SuperAce88 operates a strict 21 years of age minimum policy. Our Platform and Services are not directed at, and must not be accessed by, individuals under the age of 21. We do not knowingly collect personal data from persons under the age of 21.
All accounts are subject to KYC age verification. Where SuperAce88 discovers or reasonably suspects that an account has been registered by a person under 21 years of age, the account will be immediately suspended, all associated data will be isolated pending investigation, any winings will be voided, and deposited funds will be returned following verification of the applicable payment method.
Parents and Guardians: If you believe a minor under your care has accessed or registered on the SuperAce88 Platform, please contact our support team immediately via live chat or email. We will take prompt action to close the account and ensure no minor's data is retained on our systems beyond what is legally required for the resolution of the matter.
As an internationally operated platform, SuperAce88 may transfer personal data to servers and service providers located outside of Malaysia. Such transfers are necessary to provide the Services and may involve data being processed in jurisdictions with different data protection standards than those applicable in Malaysia.
SuperAce88 ensures that all international data transfers are conducted with appropriate safeguards in place, including:
By using the SuperAce88 Platform and providing your personal data, you acknowledge that your data may be transferred to, stored in, and processed in jurisdictions outside Malaysia. SuperAce88 takes all reasonable steps to ensure that such transfers comply with the spirit of applicable data protection principles.
SuperAce88 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the structure of our Platform services. The "Last Updated" date at the top of this page will be revised whenever material changes are made.
Where a change is material — meaning it significantly affects your rights or our obligations — SuperAce88 will endeavour to provide advance notice through the Platform or by direct communication (such as email notification to your registered address). For minor or technical amendments, the revised policy will simply be published on this page.
Your continued use of the Platform following publication of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you should cease use of the Platform and may request account closure and data deletion by contacting our support team.
For any enquiries, requests, or concerns relating to this Privacy Policy — including requests to exercise any of your data subject rights set out in Section 10 — please contact the SuperAce88 Data Protection team through the channels below:
We aim to acknowledge all privacy-related requests within five (5) business days and to provide a full substantive response within thirty (30) calendar days. For complex requests involving large volumes of data, this period may be extended by a further thirty (30) days, and you will be notified accordingly.
These are the tangible privacy protections that every SuperAce88 player benefits from — not policy language, but operational practice.
Every data exchange between your device and SuperAce88's servers is protected by enterprise-grade 256-bit SSL/TLS encryption. Your personal and financial data cannot be read in transit by any third party.
SuperAce88 has never sold, and will never sell, your personal data to third parties for marketing purposes. Your information is used solely to operate your account and comply with our legal obligations.
We apply strict data minimisation principles — collecting only what is genuinely necessary. If a processing purpose does not require a specific data point, we do not collect it.
Your data is not kept indefinitely. Clear retention schedules govern every data category we hold — with secure deletion or anonymisation applied when retention periods expire.
SuperAce88 offers 2FA for all registered accounts. We strongly recommend enabling this additional security layer, particularly for accounts holding significant balances or linked to Malaysian banking credentials.
Access, rectification, erasure, portability, objection — all eight data subject rights described in Section 10 are honoured by our team within the timeframes stated, without bureaucratic friction.
Now that you've reviewed how SuperAce88 handles your personal data, you're ready to enjoy Malaysia's most trusted online casino and sportsbook — with full transparency, certified fairness, and 24/7 multilingual support.