ace368 Privacy Policy

1. Who We Are

ace368 is an online casino and sports betting platform operating at ace368.app, serving players based in Bangladesh. In the context of this Privacy Policy, ace368 acts as the data controller — meaning we determine the purposes and means by which your personal data is collected and processed. Our primary contact for all data-related matters is [email protected].

2. What Personal Data We Collect

We collect personal data in several ways during your use of the ace368 platform. The categories of data we collect include:

• Registration Data: Your chosen username, mobile phone number (used as your primary identifier on ace368), date of birth, and any other information you provide at the point of account creation.
• Identity Verification (KYC) Data: Copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. These are collected when we are required to verify your identity, age, or address.
• Financial Transaction Data: Records of deposits and withdrawals processed through MFS providers (bKash, Nagad, Rocket, Upay), including transaction reference numbers, amounts in BDT, timestamps, and the mobile number associated with the sending MFS account.
• Gameplay and Betting Data: Records of bets placed, games played, outcomes, session durations, and D&T Ranking activity. This data is used to calculate winnings, manage bonus eligibility, and detect unusual betting patterns.
• Device and Technical Data: Your IP address, device type, operating system, browser type and version, screen resolution, and session timestamps. This data is collected automatically when you access the ace368 platform.
• Communications Data: Records of any messages, emails, or support requests you send to ace368, including the content of those communications and the date and time they were received.
• Responsible Gaming Data: If you request a deposit limit, cooling-off period, or self-exclusion, we record the details of that request and the restrictions applied to your account. This data is retained even after account closure to prevent re-registration during an active self-exclusion period.

3. How We Collect Your Data

ace368 collects personal data through the following channels:

• Directly from you — when you register an account, complete the KYC process, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automatically — when you visit ace368.app, our servers and analytics tools record technical data about your device and session as described in Section 2 above.
• From payment partners — when you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, those MFS providers share transaction confirmation data with ace368 to allow us to credit or debit your wallet correctly.
• From identity verification processes — during KYC checks, you may be asked to upload documents directly to our secure platform. We do not use third-party identity verification agencies without your knowledge.

4. How We Use Your Personal Data

ace368 processes your personal data for the following purposes:

• Account management: To create, operate, and maintain your ace368 account, process login requests, and keep your account details accurate and up to date.
• Transaction processing: To credit deposits, process withdrawal requests, and maintain an accurate record of your wallet balance and transaction history in BDT.
• Identity and age verification: To confirm that you are aged 21 or above and that your account details correspond to a real, uniquely registered individual — a requirement we take seriously across all player accounts in Bangladesh.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, multiple-account abuse, and other unlawful activity on the platform.
• Responsible gaming: To implement and enforce the deposit limits, time-out periods, and self-exclusion requests you have made, and to monitor gameplay data for signs of problem gambling behaviour.
• Customer support: To respond to your queries, complaints, and requests submitted via [email protected] or any other support channel.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the games, features, and overall experience available on ace368.
• Legal compliance: To maintain records required by applicable law and to respond to lawful requests from regulatory or law enforcement authorities.
• Promotional communications: To send you information about bonuses, promotions, and D&T Ranking events — but only where you have not opted out of receiving such communications. You can opt out at any time by contacting [email protected].

5. Legal Basis for Processing

ace368 processes your personal data on the following legal bases: (a) Contractual necessity — processing that is required to fulfil the Terms & Conditions you accepted when registering your account, including processing transactions and managing your wallet; (b) Legitimate interests — processing carried out for fraud prevention, security monitoring, and platform improvement, where those interests do not override your rights; (c) Legal obligation — processing required to comply with applicable laws, including anti-money-laundering obligations and KYC requirements; and (d) Consent — where we rely on your consent (for example, for optional promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

6. Sharing Your Personal Data

ace368 does not sell your personal data. We may share your data with the following categories of third parties in limited, defined circumstances:

• Payment partners: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for how they handle data within their systems.
• Game content providers: Live casino game providers (such as Evolution Gaming, Ezugi, and Pragmatic Play) and slot providers (such as NetEnt, Microgaming, and Spribe) may receive a session token and anonymised player identifier to facilitate gameplay. They do not receive your name, phone number, NID details, or financial transaction data.
• IT and infrastructure providers: Third-party hosting, server, and cybersecurity providers who support the operation of ace368.app. These providers are bound by contractual obligations to protect your data and to use it only for the purpose of providing services to ace368.
• Legal and regulatory authorities: Where ace368 is required by law, court order, or a legitimate regulatory request to disclose personal data, we will do so. We will notify affected players where we are legally permitted to do so.

No personal data is transferred to parties outside the above categories without your explicit prior consent, except where required by law.

7. Data Retention

ace368 retains your personal data for as long as your account remains open and for a defined period after account closure. Specifically:

• Account registration data is retained for a minimum of 5 years after account closure to satisfy anti-money-laundering record-keeping obligations.
• Financial transaction records (deposits and withdrawals) are retained for a minimum of 5 years from the date of each transaction.
• KYC documents are retained for a minimum of 5 years after account closure, or longer if required by a specific legal or regulatory obligation.
• Responsible gaming records (self-exclusion requests, deposit limit changes) are retained indefinitely to prevent circumvention of self-exclusion by re-registration.
• Customer support communications are retained for 2 years from the date of the last communication in each support thread.
• Device and technical data (logs) are retained for 12 months, after which they are automatically deleted or anonymised.

When personal data is no longer required for any of the above purposes and no legal obligation requires its retention, ace368 will securely delete or anonymise it.

8. Cookies and Tracking Technologies

ace368 uses cookies and similar tracking technologies on ace368.app to support platform functionality, maintain your login session, and collect the technical data described in Section 2. The categories of cookies we use are:

• Strictly necessary cookies: Required for the platform to function. These cannot be disabled without breaking core functionality such as maintaining your login session and remembering your wallet balance.
• Analytics cookies: Used to collect anonymised data about how players navigate ace368.app, which pages are visited most frequently, and where players encounter errors. This data helps us improve the platform.
• Preference cookies: Used to remember your platform settings, such as your preferred game category or notification preferences.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use core platform features. ace368 does not use third-party advertising cookies or cross-site tracking technologies.

9. Your Rights

As a registered player on ace368, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting [email protected]:

10. Data Security

ace368 takes the security of your personal data seriously. Technical and organisational measures in place to protect your data include: SSL/TLS encryption for all data transmitted between your device and our servers; encrypted storage for KYC documents and sensitive account data; role-based access controls ensuring that only authorised personnel can access personal data; regular security reviews and vulnerability assessments of the ace368 platform infrastructure; and automated monitoring for unusual login attempts, suspicious transaction patterns, and potential data breach indicators.

In the event of a personal data breach that is likely to result in risk to your rights and interests, ace368 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

11. Children and Minors

The ace368 platform is strictly for individuals aged 21 and above. ace368 does not knowingly collect or process personal data from anyone under the age of 21. If we become aware that an account has been registered by a person under 21 years of age, that account will be immediately suspended, all associated balances will be frozen pending review, and the personal data associated with the underage account will be deleted in accordance with applicable legal requirements.

If you believe that a person under the age of 21 has registered an account on ace368, please notify us immediately at [email protected].

12. Changes to This Privacy Policy

ace368 reserves the right to update this Privacy Policy at any time. The revised Policy will be published on this page with an updated effective date. Where changes are material — for example, changes to the categories of data collected, the purposes for which it is processed, or the third parties with whom it is shared — ace368 will endeavour to notify registered players via account notification or email at least 7 days before the changes take effect. Continued use of the ace368 platform following any revision constitutes acceptance of the updated Policy.

13. Contact

For all privacy-related queries, data subject requests, or concerns about how ace368 handles your personal data, please contact us at [email protected]. We aim to respond to all privacy-related enquiries within 14 days. For urgent matters relating to a suspected data breach or unauthorised account access, please mark your message as urgent and we will prioritise your request accordingly.