ace365 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") describes how ace365 ("ace365", "we", "us", "our") collects, uses, stores, discloses, and protects personal data relating to users ("you", "your") of the ace365 online gaming Platform at https://ace365.vu (the "Platform").

1.2 ace365 is committed to protecting the privacy and security of all personal data we process. This Policy is intended to provide clear, transparent information about our data practices so that you can make informed decisions about your use of the Platform.

1.3 By registering an account on or using the ace365 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

1.4 This Policy is to be read alongside the ace365 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions with respect to data-related matters, this Policy shall prevail.

2. Data Controller

2.1 For the purposes of applicable data protection law, ace365 is the data controller in respect of all personal data collected through the Platform. As data controller, ace365 determines the purposes and means by which your personal data is processed.

2.2 If you have any questions about this Policy, wish to exercise any of your data rights, or need to contact our data team for any reason, please do so via the contact details set out in Section 15 of this Policy.

3. Categories of Personal Data We Collect

3.1 ace365 may collect and process the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full name, date of birth, national ID number, passport number	Account registration, age and identity verification
Contact Data	Email address, mobile phone number, residential address	Account communications, support, address verification
Financial Data	bKash/Nagad/Rocket/Upay wallet numbers, bank account details, transaction history	Processing deposits and withdrawals in BDT, fraud prevention
Gaming Activity Data	Bet history, game sessions, win/loss records, bonus usage	Account management, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser type, operating system, session logs	Platform security, fraud detection, performance optimisation
Verification Documents	Copies of national ID, passport, utility bills, bank statements	KYC compliance, age verification, address confirmation
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support, service improvement, dispute records

3.2 ace365 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming request (for example, a self-exclusion application referencing a gambling-related health concern). Any such data is handled with the highest level of care and processed solely for the purpose for which it was provided.

4. How We Collect Your Data

4.1 Directly from you. The majority of personal data ace365 holds is provided directly by you during account registration, identity verification, payment transactions, customer support interactions, and any communications you initiate with us.

4.2 Automatically via the Platform. When you access and use the ace365 Platform, certain technical data is collected automatically. This includes your IP address, device identifiers, browser type, operating system, referring URLs, pages visited, and session duration. This data is collected through server logs and first-party cookies.

4.3 From third-party service providers. ace365 may receive data about you from third-party identity verification services, payment processors (including mobile financial service providers such as bKash, Nagad, Rocket, and Upay), and fraud-detection partners. Such data is received only where necessary and is processed in accordance with this Policy.

4.4 From publicly available sources. In limited circumstances, ace365 may verify information you have provided against publicly available sources, such as public records databases, for the purpose of identity verification and fraud prevention.

5. Legal Basis for Processing

5.1 ace365 processes your personal data on the following legal bases:

• Contractual necessity: Processing is required to perform the contract between you and ace365 — specifically to create and manage your account, process your BDT deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and record-keeping duties.
• Legitimate interests: Processing is necessary for ace365's legitimate business interests, including fraud detection and prevention, Platform security, service improvement, and responsible gaming monitoring — provided that these interests are not overridden by your privacy rights.
• Consent: Where ace365 relies on your consent as the legal basis for processing — for example, for certain marketing communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

6. How We Use Your Personal Data

6.1 ace365 uses the personal data it collects for the following purposes:

• To create, verify, and manage your ace365 account;
• To process BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved payment channels;
• To verify your identity and age in accordance with our KYC obligations;
• To detect, investigate, and prevent fraud, money laundering, and other unlawful activity;
• To monitor gaming activity for the purpose of responsible gaming intervention where necessary;
• To respond to your customer support queries and resolve disputes;
• To send you transactional communications relating to your account (for example, deposit confirmations, withdrawal notifications, and security alerts);
• To send promotional communications where you have opted in to receive them, subject to your right to opt out at any time;
• To personalise your Platform experience and improve our services based on aggregate usage patterns;
• To comply with applicable legal obligations and respond to lawful requests from regulatory authorities.

6.2 ace365 will not use your personal data for any purpose that is materially different from those stated in this Policy without first providing you with notice and, where required by law, obtaining your consent.

7. Data Sharing and Disclosure

7.1 ace365 does not sell, rent, or trade your personal data to third parties. We may share your personal data with third parties only in the following circumstances:

• Payment processors: Personal and financial data is shared with our approved payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) solely to the extent necessary to process your transactions.
• Identity verification providers: We may share identity documents and related data with third-party KYC and AML compliance service providers for the purpose of verifying your identity and complying with legal obligations.
• Game technology providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens) necessary to deliver their games on the Platform. These providers do not receive your identity or financial data.
• IT and infrastructure providers: Trusted technology partners who provide hosting, security, and infrastructure services may have limited access to personal data as part of delivering those services. All such partners are contractually bound to process data only on ace365's instructions and in accordance with applicable data protection standards.
• Legal and regulatory authorities: ace365 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law or in response to a valid legal process.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ace365's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7.2 Where personal data is shared with third-party processors, ace365 ensures that appropriate data processing agreements are in place to govern the processing and protect your rights.

8. Cookies and Tracking Technologies

8.1 The ace365 Platform uses cookies and similar tracking technologies to operate effectively and to provide a consistent user experience. A cookie is a small text file placed on your device when you visit the Platform.

8.2 ace365 uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as maintaining your logged-in session, storing your language and currency preferences, and securing your connection. These cookies cannot be disabled.
• Performance and analytics cookies: These cookies collect anonymised information about how users interact with the Platform, such as which pages are visited most frequently and whether error messages are encountered. This data helps us improve the Platform experience. No personally identifiable information is collected by these cookies.
• Functionality cookies: These cookies remember choices you make (such as your preferred game category or display settings) to provide a more personalised experience on your return visits.

8.3 ace365 does not use third-party advertising or behavioural tracking cookies. You can manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of the Platform.

9. Data Security

9.1 ace365 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive personal data at rest using industry-standard encryption protocols;
• Strict access controls ensuring that personal data is accessible only to authorised ace365 personnel who require it to perform their job functions;
• Regular security audits and vulnerability assessments of the Platform infrastructure;
• Multi-factor authentication options for player accounts to prevent unauthorised access;
• Continuous monitoring of Platform systems for suspicious activity and potential security incidents.

9.2 While ace365 takes all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and you access the Platform at your own risk in this respect. You are responsible for maintaining the confidentiality of your own ace365 login credentials.

9.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ace365 will notify affected individuals in accordance with applicable legal requirements.

10. Data Retention

10.1 ace365 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable financial regulations.
• Gaming activity data: Retained for the duration of your account plus three (3) years following account closure, or longer where required for dispute resolution or regulatory compliance.
• Customer support communications: Retained for three (3) years from the date of the last communication, or longer where the communication is relevant to an ongoing dispute or legal matter.
• Technical and log data: Retained for a period of twelve (12) months from collection, unless a security incident investigation requires longer retention.

10.2 Where personal data is no longer required for any lawful purpose, ace365 will securely delete or anonymise it in accordance with our internal data disposal procedures.

11. Your Data Rights

11.1 Subject to applicable law, you have the following rights in relation to the personal data ace365 holds about you:

• Right of access: You have the right to request a copy of the personal data ace365 holds about you, together with information about how it is processed.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent is the legal basis), or where you object to processing based on legitimate interests and there are no overriding grounds to continue processing.
• Right to restriction: You have the right to request that ace365 restrict the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have contested.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where ace365 relies on legitimate interests as the legal basis, including profiling for responsible gaming monitoring purposes.
• Right to withdraw consent: Where ace365 processes your data based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12. Children's Privacy

12.1 The ace365 Platform is strictly intended for adults aged 18 and over. ace365 does not knowingly collect personal data from any person under the age of 18. If you are under 18, you must not use the Platform or provide any personal data to us.

12.2 If ace365 becomes aware that it has inadvertently collected personal data from a person under the age of 18, we will take immediate steps to delete that data and close the associated account. If you believe a person under 18 has registered on the Platform, please notify us immediately at [email protected].

13. Third-Party Links

13.1 The ace365 Platform does not contain links to third-party websites. However, our game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — operate independently and maintain their own privacy practices. ace365 is not responsible for the privacy practices of any third-party game studio or technology provider.

13.2 This Policy applies solely to data collected and processed by ace365 through the Platform at https://ace365.vu. ace365 is not responsible for the content, privacy practices, or data handling of any third-party services that may be referenced on the Platform.

14. Updates to This Privacy Policy

14.1 ace365 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.

14.2 Where changes to this Policy are material, ace365 will endeavour to notify registered players via email or an on-Platform notification prior to the revised Policy taking effect. Your continued use of the Platform following the publication of any amendment constitutes your acceptance of the updated Policy.

14.3 We encourage you to review this Policy periodically to stay informed about how ace365 protects your personal data.

15. Contact Us

15.1 If you have any questions, concerns, or complaints about this Privacy Policy, about how ace365 processes your personal data, or about exercising your data rights, please contact us:

15.2 For responsible gaming matters, including requests to set account limits or initiate self-exclusion, please contact [email protected] with the subject line "Responsible Gaming Request". For full details on the responsible gaming tools available to you, please visit our Responsible Gaming page.

15.3 For the full terms governing your use of the ace365 Platform, please review our Terms & Conditions.