ace367 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ace367 ("ace367", "we", "us", or "our") collects, uses, stores, shares, and protects personal information provided by or collected about users ("Player", "User", or "you") of the ace367 online casino and sports betting platform located at ace367.bio ("Platform").

ace367 is committed to protecting the privacy and security of every player who uses our Platform. We handle your personal data with care, collect only what is necessary, and process it only for the legitimate purposes described in this Policy. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions, which govern your use of the ace367 Platform. If you do not agree with the terms of this Privacy Policy, you should stop using the Platform and close your account.

2. Data Controller

ace367 acts as the data controller for all personal information collected through the Platform. As data controller, we determine the purposes and means by which your personal data is processed. If you have any questions about how your data is handled, or wish to exercise any of your data rights, you may contact us at [email protected].

3. Information We Collect

3.1 Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, contact support, or otherwise interact with the ace367 Platform, you may provide us with the following categories of personal information:

• Identity Data: Full legal name, date of birth, gender, and nationality.
• Contact Data: Email address, mobile phone number, and residential address (including city, district, and postcode within Bangladesh).
• Account Credentials: Username and encrypted password.
• Financial Data: bKash account number, Nagad account number, Rocket account number, bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or other), and Visa/Mastercard details where applicable.
• Identity Verification Documents: Copies of government-issued photo identification (National ID, passport, or driving licence) and proof of address documents submitted for KYC (Know Your Customer) verification.
• Responsible Gaming Data: Self-declared information about gambling habits, deposit limits set, cooling-off requests, and self-exclusion applications.
• Support Communications: Records of correspondence with our support team, including live chat transcripts and email exchanges.

3.2 Information Collected Automatically

When you access the ace367 Platform, certain technical data is collected automatically through cookies, log files, and similar technologies:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network information.
• Usage Data: Pages visited, games played, bet amounts and outcomes, session duration, click patterns, and referral URLs.
• Location Data: General geographic location inferred from your IP address (typically city or region level — we do not collect precise GPS coordinates).
• Cookie Data: Session identifiers, preference tokens, and analytics tags. See Section 9 for full details on our use of cookies.
• Transaction Logs: Timestamps, amounts, payment method identifiers, and outcomes of all financial transactions processed through your account.

4. How We Use Your Information

ace367 processes your personal data only for specific, legitimate purposes. The table below summarises the primary uses of your data and the legal basis on which each processing activity rests.

5. Sharing Your Information

ace367 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. We may share your information with the following categories of recipients only where strictly necessary:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your financial transactions.
• Identity Verification Services: Third-party KYC and age-verification providers engaged to confirm your identity and eligibility to use the Platform.
• Game Content Providers: Platform providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver game content and settle outcomes. These providers do not receive your full personal profile.
• IT and Infrastructure Partners: Hosting providers, content delivery networks, and cybersecurity vendors that support the technical operation of the Platform under strict data processing agreements.
• Legal and Regulatory Authorities: Where required by law, court order, or at the direction of a competent regulatory or law enforcement authority, ace367 will disclose the minimum necessary personal data.
• Professional Advisers: Lawyers, auditors, and accountants engaged by ace367 where necessary for the conduct of our business, subject to professional confidentiality obligations.

All third-party recipients of your personal data are required to handle it in accordance with applicable data protection standards. ace367 does not permit third parties to use your data for their own marketing or commercial purposes.

6. Data Retention

ace367 retains your personal data for as long as your account remains active. Following account closure, we retain certain categories of data for the periods set out below in order to comply with our legal, regulatory, and contractual obligations:

• Identity and KYC Documents: Retained for a minimum of 5 years from the date of account closure, in line with anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Account Activity Logs: Retained for up to 3 years following account closure for fraud prevention and dispute resolution purposes.
• Support Communications: Retained for up to 2 years following the resolution of the relevant support interaction.
• Marketing Consent Records: Retained for as long as necessary to demonstrate the lawfulness of any marketing communications sent to you.

After the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

7. Data Security

ace367 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard TLS/SSL protocols.
• Firewalls and Intrusion Detection: Server infrastructure is protected by enterprise-grade firewalls and 24/7 intrusion detection and monitoring systems.
• Access Controls: Personal data is accessible only to ace367 staff and authorised partners who have a legitimate need to access it for the purposes described in this Policy. Access is controlled by role-based permissions and audit logging.
• Password Hashing: Account passwords are stored in hashed form using strong cryptographic algorithms. ace367 never stores passwords in plain text.
• Regular Security Audits: The Platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no system is completely immune to security risks. In the event of a data breach that poses a material risk to your rights, ace367 will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

8. Your Data Rights

As an ace367 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected]. We aim to respond to all data rights requests within 30 days of receipt.

1. Right of Access: You have the right to request a copy of the personal data ace367 holds about you, along with information about how it is being processed.
2. Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
3. Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is subject to our legal obligations to retain certain records for the minimum periods specified in Section 6.
4. Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is under dispute.
5. Right to Data Portability: Where processing is based on your consent and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
6. Right to Withdraw Consent: Where ace367 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
7. Right to Object to Marketing: You may opt out of receiving marketing communications from ace367 at any time by contacting support or using the unsubscribe mechanism included in any marketing email.

9. Cookies and Tracking Technologies

The ace367 Platform uses cookies and similar tracking technologies to enhance your experience, maintain your login session, and collect analytical data. A cookie is a small text file placed on your device by a website you visit. The following categories of cookies are used on the Platform:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as your preferred language, display settings, and last-visited game category. Disabling these cookies may reduce Platform functionality.
• Analytics Cookies: Used to collect anonymised data about how players navigate the Platform, which pages they visit most, and how long they spend on each section. This data helps us improve Platform performance and content.
• Marketing Cookies: Where you have consented, these cookies track your interactions with promotional content so that we can tailor future offers to your interests. You may withdraw consent for marketing cookies at any time through your browser settings.

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies. However, please be aware that blocking strictly necessary cookies will prevent you from logging in to your ace367 account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

10. Children's Privacy

The ace367 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a user under the age of 21 has created an account or provided personal data through the Platform, we will immediately suspend the account, delete the associated data, and return any deposited funds in accordance with our underage gambling policy.

If you believe a minor has registered an account on the ace367 Platform, please notify us immediately at [email protected] so that we can take appropriate action without delay.

11. Third-Party Links

The ace367 Platform does not include links to third-party websites other than those necessary for the delivery of our services. This Privacy Policy applies solely to the ace367 Platform at ace367.bio. If you navigate away from our Platform through any link, you do so at your own risk and we recommend reviewing the privacy policy of any third-party site you visit, as we have no control over or responsibility for their data practices.

12. Changes to This Privacy Policy

ace367 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will update the "Last updated" date at the top of this document. Where the changes are significant, we may also notify registered players by email or through an in-Platform notification.

Your continued use of the ace367 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your data.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ace367 handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, and aim to respond to all data-related enquiries within 5 business days.