Privacy Policy

ace367 ("the Platform", "we", "us", "our") operates the online casino and sports betting platform available at ace367.club, providing gaming and betting services primarily to adult players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond.

This Privacy Policy explains in detail how ace367 collects, uses, stores, shares, and protects the personal data of all individuals who interact with the ace367 platform — whether as registered players, prospective players browsing the site, or individuals contacting our support team. It applies to all services offered under the ace367 brand at ace367.club and any associated mobile interfaces.

We are committed to handling personal data with the highest standards of care, transparency, and integrity. This Privacy Policy is intended to be clear, honest, and accessible to every player. We encourage you to read it carefully. If you have any questions about how ace367 handles your personal information, the contact details in Section 12 are available to you at any time.

This Privacy Policy should be read alongside the ace367 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into this document. Together, these three documents form the complete framework governing the relationship between ace367 and its registered players.

ace367 collects personal data from you through several routes: directly (when you register, deposit, contact support, or use platform features), automatically (through cookies and technical logs when you browse the site), and from third parties (such as payment processors and identity verification services). The categories of data we collect include:

ace367 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond what is strictly required for identity verification), or health data, except where a player voluntarily discloses such information in the context of a responsible gaming self-exclusion or support request.

ace367 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is inconsistent with what is described in this section:

• Account registration and management: To create and maintain your ace367 player account, authenticate your identity at login, and manage your account preferences and settings.
• Age and identity verification (KYC): To verify that you meet the minimum age requirement of 18 years and to confirm your identity as required by our responsible gaming and anti-money laundering procedures. KYC may be conducted at registration, at the point of first withdrawal, or at any time we deem it necessary based on account activity.
• Payment processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported Bangladeshi bank transfer services, and to maintain accurate financial records of all transactions on your account.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the ace367 Terms & Conditions.
• Responsible gaming compliance: To monitor player activity for signs of problem gambling behaviour, enforce deposit limits and self-exclusion arrangements, and fulfil our duty of care obligations to players.
• Customer support: To respond to your support enquiries, resolve complaints, and maintain records of communications for quality assurance and dispute resolution purposes.
• Legal and regulatory compliance: To fulfil any obligations imposed on ace367 by applicable law, including cooperation with lawful requests from competent authorities.
• Platform improvement and analytics: To understand how players use the ace367 platform, identify technical issues, improve game performance, and develop new features. Analytics data used for this purpose is aggregated and anonymised wherever possible.
• Promotional communications: To send you relevant bonus offers, promotional updates, and platform news — but only where you have opted in to receive such communications. You may withdraw your consent to marketing communications at any time by contacting support or updating your notification preferences in your account settings.

ace367 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Much of our data processing is necessary to perform the contract between ace367 and you as a registered player — specifically, to operate your account, process your transactions, and deliver the gaming services you have requested.
• Legal obligation: Certain processing activities — particularly KYC identity verification, anti-money laundering record-keeping, and cooperation with competent authorities — are carried out to comply with legal obligations applicable to ace367's operations.
• Legitimate interests: ace367 processes some data on the basis of its legitimate interests as a platform operator, including fraud detection, network security, platform improvement, and responsible gaming monitoring. In every case where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and interests as a data subject.
• Consent: Where processing is not necessary for the above purposes — for example, sending you promotional emails or push notifications about bonuses and new games — we will only process your data with your explicit prior consent. You may withdraw this consent at any time without affecting the lawfulness of processing conducted before your withdrawal.

ace367 does not sell, rent, or exchange your personal data with third parties for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: Your payment details are shared with the relevant mobile financial service providers (bKash, Nagad, Rocket, Upay) and card processing partners (Visa, Mastercard) and Bangladeshi banking partners solely to process your deposit and withdrawal transactions. These providers operate as independent data processors and are contractually required to protect your data in accordance with applicable standards.
• Identity verification providers: To conduct KYC checks, ace367 may share identity documents and personal details with third-party identity verification and anti-money laundering screening services. These providers process your data on ace367's behalf and under ace367's instructions.
• Game providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical and session data necessary to deliver their game content to your device and to ensure fair play integrity. Game providers do not receive your financial or identity data.
• Legal and regulatory authorities: ace367 may be required by law to disclose personal data to competent governmental or regulatory authorities, law enforcement agencies, or courts. Such disclosure will only be made in response to a lawful, documented request and to the extent strictly required. ace367 will notify the affected player of such a request where it is legally permitted to do so.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by ace367 may access personal data on a need-to-know basis where required to provide their professional services. All such advisers are bound by duties of confidentiality.
• Business transfers: In the event that ace367 undergoes a merger, acquisition, or sale of all or substantially all of its assets, registered players will be notified in advance of any transfer of personal data to new ownership, and the acquiring entity will be required to honour the privacy commitments described in this Policy.

The ace367 website uses cookies and similar tracking technologies to deliver, maintain, and improve the platform experience for all users. A cookie is a small text file stored on your device by your web browser at the request of a website. ace367 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the ace367 platform to function correctly. They enable core features such as maintaining your logged-in session, remembering items in your bet slip, and ensuring that the platform responds correctly to your actions. These cookies cannot be disabled without significantly impairing platform functionality.
• Performance and analytics cookies: These cookies collect anonymised or pseudonymised information about how visitors use the ace367 website — for example, which pages are visited most frequently, how long sessions last, and where users encounter errors. This data helps us improve platform performance and user experience. No personally identifiable information is collected through analytics cookies without your consent.
• Functionality cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, or last login method — to provide a more personalised platform experience across visits.
• Security cookies: These cookies help ace367 detect and prevent fraudulent activity, unusual login patterns, and suspicious session behaviour. They form part of our platform security infrastructure and cannot be disabled.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the ace367 platform. For full details of the cookies in use on the ace367 platform, including their names, purposes, and expiry periods, please refer to the cookie management settings available within your browser.

ace367 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our data retention approach is as follows:

• Active account data: Personal data relating to your registered ace367 account — including identity data, contact data, and financial records — is retained for the full duration of your account's active status.
• Post-closure retention: Following the closure of a player account, ace367 retains certain personal data for a minimum period as required by anti-money laundering regulations and financial record-keeping obligations. Transaction records and identity verification documents are typically retained for a period of five years after account closure.
• Support and communications records: Customer support correspondence, including live chat transcripts and email records, is retained for a period of two years from the date of the interaction for quality assurance and dispute resolution purposes.
• Self-exclusion records: Where a player has requested a self-exclusion from the ace367 platform, records relating to that self-exclusion are retained indefinitely to prevent the player from being inadvertently re-admitted to the platform in contravention of their exclusion request.
• Marketing consent records: Records of marketing consents and opt-outs are retained for the lifetime of the associated account and for a minimum of two years following account closure.

When personal data is no longer required and no legal retention obligation applies, ace367 will securely delete or anonymise it in accordance with our internal data lifecycle management procedures. Anonymised data — which can no longer be attributed to any specific individual — may be retained indefinitely for statistical and analytical purposes.

As an ace367 player, you have the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting our privacy team using the details in Section 12:

• Right of access: You have the right to request a copy of the personal data ace367 holds about you. We will provide this information within 30 days of receiving a valid request. Where the volume of data is significant, we may provide data in structured batches.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Minor corrections to contact details can be made directly within your account settings. Corrections to identity data require submission of updated verification documents.
• Right to erasure: Subject to applicable legal retention obligations, you have the right to request deletion of your personal data. Please note that ace367 may be legally required to retain certain categories of data — particularly financial transaction records and KYC documents — for defined periods after account closure, and these cannot be deleted before the applicable retention period has expired.
• Right to restrict processing: You have the right to request that ace367 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of data we hold, pending verification of your correction request.
• Right to data portability: Where processing is carried out by automated means on the basis of your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request its direct transfer to another data controller where technically feasible.
• Right to withdraw consent: Where ace367 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
• Right to object: You have the right to object to processing of your personal data where ace367 relies on legitimate interests as its legal basis, on grounds relating to your particular situation. You also have an unconditional right to object to direct marketing at any time.

To exercise any of the above rights, please contact us using the details in Section 12. We will acknowledge receipt of your request within five business days and provide a substantive response within 30 calendar days. In complex cases, we may extend this period by a further 30 days and will notify you accordingly. We will not charge a fee for processing data rights requests in ordinary circumstances.

ace367 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, and destruction. Our security programme includes:

• Transport Layer Security (TLS): All data in transit between your device and ace367 servers is encrypted using industry-standard TLS 1.2 or higher (256-bit SSL encryption). The ace367 platform is accessible exclusively via HTTPS.
• Data at rest encryption: Sensitive personal data stored on ace367 servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption or equivalent industry-standard algorithms.
• Access controls: Access to personal data within ace367's systems is restricted on a strict need-to-know basis. Personnel who require access to player data to perform their role are granted only the minimum permissions necessary. All access is logged and auditable.
• Two-factor authentication: ace367 supports and encourages the use of two-factor authentication (2FA) for player accounts. Players are strongly encouraged to enable 2FA via their account security settings to add an additional layer of protection beyond their password.
• Penetration testing and vulnerability management: The ace367 platform undergoes regular security assessments including penetration testing conducted by qualified security professionals. Identified vulnerabilities are prioritised and remediated in accordance with their severity rating.
• Incident response: ace367 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected players, we will notify those players without undue delay and take immediate remedial action. Serious breaches will be reported to appropriate authorities as required by applicable law.

The ace367 platform is strictly intended for adults aged 18 years and above. ace367 does not knowingly collect personal data from any individual under the age of 18. The collection of data from minors is strictly prohibited and contrary to ace367's core responsible gaming commitments.

To enforce this requirement, ace367 conducts age verification checks at the point of account registration and at the time of first withdrawal, and may request documentary proof of age at any time during the account lifecycle. Where a player is found to have misrepresented their age at registration, their account will be immediately suspended, all winnings derived from their activity will be voided, and any deposits made will be returned to the payment method used, subject to identity verification of the rightful account holder.

If you have reason to believe that a person under 18 years of age has registered an ace367 account or has accessed the platform using another person's credentials — including your own — please contact our support team immediately. We will investigate and take appropriate action without delay. We also strongly encourage parents and guardians to use parental control software on shared household devices to prevent underage access to online gaming platforms.

ace367 reserves the right to update, modify, or replace this Privacy Policy at any time. Changes may be made in response to evolving legal or regulatory requirements, changes to the services we offer, feedback from our players, or improvements to our data handling practices.

When material changes are made to this Privacy Policy, ace367 will:

• Update the "Last updated" date displayed in the Table of Contents and in the Policy header;
• Notify registered players of material changes via the email address associated with their account, where practicable, with reasonable advance notice before the changes take effect;
• Display a notice on the ace367 platform for a reasonable period following any significant amendment to draw players' attention to the updated Policy.

Your continued use of the ace367 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and consent to the revised terms. If you do not agree to the revised Privacy Policy, you must cease using the Platform and may request account closure by contacting our support team. We encourage you to review this Privacy Policy periodically to stay informed about how ace367 is protecting your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that ace367 holds about you, please contact our privacy team using the details below. All requests relating to your data rights (Section 8) should be submitted in writing — either by email or via the live chat support function — and should include your registered account username and a clear description of your request.

When submitting a data access, rectification, or erasure request, please include: your registered ace367 username, the email address associated with your account, a description of the specific data or processing activity your request concerns, and any relevant dates or transaction references that may help us locate the relevant records quickly.

ace367 will process all data rights requests free of charge in ordinary circumstances. Where a request is manifestly unfounded or excessive — particularly if it is repetitive in nature — ace367 reserves the right to charge a reasonable administrative fee or decline to act on the request, and will notify you of this decision with an explanation within 30 days of receipt.