Privacy Policy — How ace165 Protects Your Data

1. Data We Collect

ace165 collects personal data from players through a number of channels: the account registration form, the KYC verification process, payment transactions, gameplay activity, customer support interactions, and automatic technical data collection via your browser or mobile device. The categories of data we collect are set out below.

Registration & Identity Data

When you create an account on ace165, we collect your full legal name, date of birth, email address, mobile phone number, and residential address in Bangladesh. This information is required to create and manage your account, verify your identity in accordance with Know Your Customer (KYC) obligations, and ensure that you meet the minimum age requirement of 18 years.

KYC Verification Documents

To process withdrawals and to meet regulatory compliance standards, ace165 requires players to submit government-issued identity documents. Accepted documents include a Bangladesh National Identity Card (NID), a valid passport, or a driving licence. We may also request proof of address in the form of a recent utility bill, bank statement, or official correspondence dated within the past three months. In cases requiring enhanced due diligence — typically for high-value accounts — we may additionally request proof of source of funds.

Financial & Transaction Data

ace165 records all deposit and withdrawal transactions associated with your account, including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction amounts in BDT, timestamps, and transaction reference numbers. We do not store full mobile banking credentials or bank account passwords — payment authentication is handled directly by your chosen payment provider.

Gameplay & Behavioural Data

We collect data about your gameplay activity, including the games you play, wager amounts, session durations, win/loss history, and responsible gaming tool usage . This data is used to deliver a personalised gaming experience, monitor for signs of problem gambling behaviour, and ensure compliance with responsible gaming obligations. Gameplay data is also used in aggregate, anonymised form for platform performance analysis and game portfolio development.

Technical & Device Data

When you access ace165, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (desktop, tablet, or mobile), screen resolution, referring URL, and pages visited within the platform. This data is collected via server logs and, where applicable, cookies and similar tracking technologies. It is used for platform security, fraud detection, and performance optimisation.

Summary of Data Categories

2. How We Use Your Data

ace165 processes your personal data only for the specific, declared purposes listed below. We rely on one or more of the following lawful bases for each processing activity: contractual necessity (to deliver the services you have signed up for), legal obligation (to comply with applicable law), legitimate interest (to operate a secure and commercially viable platform), or consent (for optional processing such as marketing communications).

Account Management

Your identity and contact data are used to create and maintain your ace165 account, authenticate your login sessions, reset credentials securely, and communicate important account notices — including security alerts, withdrawal confirmations, KYC requests, and policy updates. These communications are transactional in nature and cannot be opted out of while your account remains active.

Payment Processing

Financial data is processed to execute deposit and withdrawal transactions via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer). ace165 transmits only the minimum data required to your payment provider to complete the transaction. We retain transaction records for a minimum of five years to satisfy financial record-keeping obligations under applicable anti-money laundering legislation.

Identity Verification & KYC Compliance

KYC documents and identity data are processed to verify that you meet the age and eligibility criteria required to hold an ace165 account. This processing is a legal obligation. Where KYC verification is required before processing a withdrawal, access to KYC documentation is restricted to the ace165 compliance team and is not used for any other purpose.

Fraud Prevention & Platform Security

Technical data, financial data, and gameplay data are analysed by automated systems and, where necessary, by human compliance analysts to detect and prevent fraudulent activity, money laundering, account takeover attempts, and bonus abuse. Where suspicious activity is confirmed, we are required by law to retain relevant records and, in certain circumstances, to report the activity to competent authorities without notifying the account holder.

Responsible Gaming Monitoring

Gameplay and behavioural data are monitored to identify players who may be exhibiting signs of problem gambling — including extended session durations, rapid deposit patterns, or interactions with our responsible gaming tools. Where such indicators are identified, ace165 may proactively contact the player to offer support resources or apply protective account restrictions. Full details of these tools are available on the Responsible Gaming page.

Marketing Communications

With your explicit opt-in consent, ace165 may use your contact data to send promotional emails and SMS messages about bonuses, new game releases, seasonal promotions (including BPL cricket season offers, Eid promotions, and Pohela Boishakh special events), and platform news. Your marketing preferences can be updated at any time through your account dashboard or by contacting our support team.

3. Data Sharing & Third Parties

ace165 does not sell or rent your personal data to any third party. We share your data only in the specific, limited circumstances described below, and only to the extent necessary for the stated purpose. All third-party service providers with whom we share data are bound by contractual data processing agreements that restrict their use of your information to the specific services they provide to ace165.

Payment Service Providers

To process your deposits and withdrawals, ace165 shares the minimum necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, or your bank. The data shared is limited to the information required to authenticate and complete the specific transaction and does not include your full gameplay history or KYC documents. Each payment provider operates under their own privacy policy and data handling standards.

Identity Verification Partners

ace165 may engage third-party KYC verification platforms to assist with the identity verification process. These partners are provided with the document images and identity data submitted by the player solely for the purpose of completing the verification check. KYC verification partners are prohibited by contract from using your data for any purpose other than the specific verification service they provide to ace165.

Game Software Providers

The casino games available on ace165 are provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers may collect certain technical and gameplay data through their game software for the purpose of delivering the game, ensuring fairness, and supporting responsible gaming features. The data processed by game providers is governed by their respective privacy policies.

Regulatory & Law Enforcement Authorities

ace165 is required by applicable law to disclose player data to relevant authorities in specific circumstances — including in response to a valid court order, subpoena, regulatory investigation, or anti-money laundering reporting obligation. In such cases, ace165 will disclose only the data specifically required and will not notify the account holder where doing so is legally prohibited.

4. Cookies & Tracking Technologies

ace165 uses cookies and similar tracking technologies on its platform to ensure core functionality, improve the user experience, and — with your consent — deliver personalised content and measure the effectiveness of promotional campaigns. This section explains the types of cookies we use and how you can manage your preferences.

Strictly Necessary Cookies

These cookies are essential for the ace165 platform to function correctly and cannot be disabled. They include session authentication cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery (CSRF) attacks, load-balancing cookies that ensure your requests are directed to a stable server, and cookies that remember your responsible gaming preferences such as session time limits. No consent is required for strictly necessary cookies.

Functional Cookies

Functional cookies remember your preferences to provide an enhanced and personalised experience. Examples include your preferred language, your display settings within the casino lobby, and the games you have added to your favourites list. These cookies do not track your activity on other websites. Disabling functional cookies may result in some platform features not working as expected.

Analytics Cookies

With your consent, ace165 uses analytics cookies to collect anonymised, aggregated data about how players navigate the platform — including which pages are visited most frequently, how long sessions last, and where users exit the site. This data helps us identify areas where the platform can be improved. Analytics cookies do not collect personally identifiable information and cannot be used to identify individual players.

Managing Cookie Preferences

You can manage your cookie preferences at any time through your web browser settings. Most modern browsers allow you to block or delete cookies, and you may set your browser to alert you before a cookie is stored. Please note that blocking strictly necessary cookies will impair the functionality of the ace165 platform. Clearing all cookies will log you out of your current session and reset your saved preferences.

5. Data Retention & Security

ace165 retains your personal data for the period necessary to fulfil the purposes described in this Privacy Policy, subject to any longer retention periods required by applicable law. The following retention guidelines apply to the main categories of data we hold:

• Account and identity data: Retained for the duration of your account's active status, plus a minimum of five years following account closure, to satisfy financial record-keeping and AML compliance obligations.
• KYC verification documents: Retained for a minimum of five years from the date of submission, or longer if required by applicable regulatory guidance or an ongoing investigation.
• Transaction records: Retained for a minimum of five years from the date of the transaction to comply with financial reporting and anti-money laundering obligations.
• Gameplay data: Retained for the duration of your account's active status, plus two years following account closure, for responsible gaming analysis and dispute resolution purposes.
• Support correspondence: Retained for three years from the date of the interaction, to support dispute resolution and quality assurance.
• Marketing preferences and consent records: Retained for as long as your account is active and for three years following account closure, as evidence of consent.

Security Measures

ace165 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data fields stored at rest, role-based access controls ensuring that only authorised personnel can access personal data, regular penetration testing and vulnerability assessments of platform infrastructure, and multi-factor authentication requirements for all internal administrative access. In the event of a data breach that poses a risk to your rights, ace165 will notify affected players within a reasonable timeframe in accordance with applicable law.

6. Your Privacy Rights

As a player on the ace165 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the ace165 support team — requests will be acknowledged within five business days and fulfilled within 30 calendar days, except in cases where the request is particularly complex or where a legal exemption applies.

Right of Access

You have the right to request a copy of all personal data that ace165 holds about you. Upon verification of your identity, we will provide a structured summary of your data, the purposes for which it is processed, the categories of third parties with whom it has been shared, and the retention period applicable to each data category.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Identity corrections that affect KYC-verified fields (such as your legal name or date of birth) may require you to resubmit supporting documentation before the change is applied.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where the data has been processed unlawfully. This right is subject to exceptions — in particular, ace165 is required by law to retain certain financial and identity records for a minimum of five years, and erasure requests cannot override these obligations.

Right to Restrict Processing

In certain circumstances — for example, while you are contesting the accuracy of data we hold, or where you object to processing based on legitimate interests — you may request that we restrict the processing of your personal data to storage only, pending resolution of the issue.

Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes. Upon receipt of such a request, ace165 will cease all marketing communications to you immediately. This right applies regardless of whether you originally provided consent for marketing or whether marketing was conducted under a legitimate interests basis.

How to Exercise Your Rights

Submit a data rights request by contacting the ace165 support team via email at [email protected] (plain text — not a clickable link). Please include your registered email address and a brief description of the right you wish to exercise. For account security purposes, we will verify your identity before processing any data access or deletion request.

7. Children's Privacy

The ace165 platform is strictly restricted to individuals aged 18 years and above. ace165 does not knowingly collect personal data from children under the age of 18. If we become aware that an account has been created by or on behalf of a person under 18, we will immediately suspend that account, delete all associated personal data to the extent not required to be retained for legal purposes, and return any deposited funds to the original funding source.

Parents or guardians who believe their child may have accessed or registered on ace165 without their knowledge should contact the support team immediately at [email protected] (plain text — not a clickable link). ace165 takes underage access seriously and will investigate and resolve all such reports as a matter of priority. We also recommend the use of parental control software to restrict minors' access to online gambling platforms at the device level.

8. Policy Updates & Contact

ace165 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or our data processing practices. When material changes are made, we will notify registered players via email to their registered address and display a prominent notice on the platform for a minimum of 14 days prior to the updated policy taking effect. The effective date displayed at the top of this document will be updated with each revision.

We encourage all ace165 players to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of the ace165 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms, to the extent permitted by applicable law.

Contact the Data Team

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how ace165 has handled your personal information, please contact us using the details below. Our English-speaking support team handles all privacy enquiries and is available 24 hours a day, 7 days a week (BST, UTC+6).

Email: [email protected] (plain text — not a clickable link)
Response time: within 1 hour for general queries; within 5 business days for formal data rights requests (BST, UTC+6)