ace66 Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection, use, storage, sharing, and protection of personal information by ace66 (referred to as "we", "us", "our", or "the Platform") in relation to all users and account holders (referred to as "you", "your", or "Player") who access our website at https://ace66.io or use any of our online betting, casino gaming, or related services.

By creating an account on ace66, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must discontinue use of the Platform immediately.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of ace66 services. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the provisions of the Terms & Conditions shall prevail.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account on ace66, we collect the following personal information directly from you:

• Identity Information: Full legal name, date of birth, gender, and nationality as shown on government-issued identification documents.
• Contact Information: Email address, phone number (including mobile number for bKash, Nagad, Rocket transactions), and residential address (street address, city, postal code, district, and country).
• Account Credentials: Username, password (stored in encrypted format), and security questions or answers for account recovery purposes.
• Payment Information: Payment method details such as bKash account number, Nagad wallet number, Rocket account, bank account details (account holder name, bank name, account number, branch), or credit/debit card information (card number, expiry date, CVV — note that full card details are processed and stored by our certified payment processors, not directly by ace66).
• Verification Documents: Government-issued photo identification (National ID Card, Passport, Driving License), proof of address (utility bills, bank statements), and proof of payment method ownership submitted during identity verification processes.

2.2 Information Collected Automatically

When you access and use the ace66 Platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Connection Information: IP address, geographic location derived from IP address (city and country level, not precise GPS coordinates), internet service provider, and connection type.
• Usage Data: Pages visited, features used, games played, bets placed, deposit and withdrawal activity, session duration, time and date of access, referral source, and clickstream data.
• Cookies and Tracking Technologies: Data collected via cookies, web beacons, local storage, and similar technologies (see Section 7 for detailed cookie information).

2.3 Information from Third-Party Sources

In certain circumstances, we may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment status, and fraud alerts from bKash, Nagad, Rocket, Upay, bank partners, Visa, Mastercard, and other payment service providers.
• Identity Verification Providers: Verification results, risk scores, and document authenticity checks from third-party identity verification and anti-fraud services used to comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements.
• Publicly Available Sources: Information from public registers, sanctions lists, politically exposed persons (PEP) databases, and adverse media sources as part of our compliance and fraud prevention obligations.

3. How We Use Your Information

ace66 uses the personal information we collect for the following purposes:

3.1 Account Management and Service Delivery

• Creating, maintaining, and managing your ace66 account.
• Processing deposits, withdrawals, and other financial transactions in Bangladeshi Taka (৳).
• Enabling you to place bets on sports markets, play casino games, and participate in promotions.
• Providing customer support and responding to your enquiries submitted via email, live chat, or other channels.
• Communicating important account-related information such as transaction confirmations, password resets, account verification requests, and service updates.

3.2 Compliance and Legal Obligations

• Verifying your identity and age to ensure compliance with the 21+ age restriction for online gambling in Bangladesh.
• Conducting KYC and AML checks to prevent fraud, money laundering, terrorist financing, and other illegal activities.
• Detecting and preventing duplicate accounts, bonus abuse, collusion, match-fixing involvement, and other prohibited conduct as defined in our Terms & Conditions.
• Complying with applicable laws, regulations, and regulatory reporting requirements.
• Cooperating with law enforcement, regulatory authorities, and legal processes when required by law or court order.

3.3 Platform Improvement and Personalisation

• Analysing usage patterns, player preferences, and platform performance to improve the user experience.
• Developing new features, games, and betting markets based on aggregated player behaviour data.
• Personalising your experience by displaying relevant games, sports markets, and promotional offers based on your betting history and preferences (you can opt out of marketing communications — see Section 9).
• Conducting internal research, analytics, and testing to optimise platform performance, security, and reliability.

3.4 Security and Fraud Prevention

• Monitoring account activity to detect suspicious behaviour, unauthorised access attempts, and fraudulent transactions.
• Implementing technical and organisational security measures to protect your data from unauthorised access, alteration, disclosure, or destruction.
• Investigating suspected Terms & Conditions violations, fraud, or abuse of the Platform.

3.5 Marketing and Promotional Communications (Subject to Your Consent)

• Sending promotional emails, SMS messages, or push notifications about bonuses, special offers, new games, tournaments, and other marketing content related to ace66 services.
• All marketing communications are subject to your consent and can be opted out of at any time by clicking the unsubscribe link in emails, replying STOP to SMS messages, or adjusting your communication preferences in your account settings.

4. Legal Basis for Processing (Applicable Data Protection Principles)

ace66 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions) and deliver the betting and casino services you have requested, including account management, payment processing, and game access.
• Legal Obligation: Processing is required to comply with legal obligations imposed on us, including KYC, AML, age verification, regulatory reporting, and cooperation with law enforcement.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, service improvement, analytics, and internal administration, provided such interests do not override your fundamental rights and freedoms.
• Consent: For certain processing activities such as marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing based on consent before withdrawal.

5. How We Share Your Information

ace66 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with the following categories of third parties in the circumstances described below:

5.1 Payment Service Providers

We share necessary payment information with bKash, Nagad, Rocket, Upay, bank partners, Visa, Mastercard, and other payment processors to facilitate deposits and withdrawals. These providers process transactions on our behalf and are contractually obligated to handle your data securely and in accordance with applicable data protection standards.

5.2 Identity Verification and Fraud Prevention Services

We share identity documents and personal information with third-party KYC and AML verification providers to verify your identity, age, address, and payment method ownership, and to screen against sanctions lists, PEP databases, and fraud databases. These services are essential for regulatory compliance and fraud prevention.

5.3 Game and Technology Providers

We share limited technical data (such as session identifiers and bet details, but not full identity information) with casino game developers including Pragmatic Play, Evolution Gaming, NetErt, Microgaming, Ezugi, and others to deliver live casino games, slots, and other gaming content. These providers process data on our behalf under strict data processing agreements.

5.4 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, courts, government authorities, or other third parties when required by law, court order, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, comply with legal obligations, investigate fraud, or protect the safety of any person.

5.5 Professional Advisors

We may share personal information with lawyers, accountants, auditors, and other professional advisors who provide services to ace66, subject to confidentiality obligations.

5.6 Business Transfers

In the event of a merger, acquisition, reorganisation, sale of assets, or bankruptcy involving ace66, your personal information may be transferred to the successor entity or acquiring party. We will notify you via email and/or a prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

6. International Data Transfers

ace66 operates primarily to serve players in Bangladesh. However, some of our service providers, technology partners, and data storage facilities may be located outside Bangladesh. When we transfer your personal data to countries outside Bangladesh, we ensure that appropriate safeguards are in place to protect your data in accordance with international data protection standards.

These safeguards may include:

• Use of service providers located in countries with data protection laws recognised as providing adequate protection.
• Implementation of standard contractual clauses approved by recognised data protection authorities.
• Certification of service providers under internationally recognised data protection frameworks.

7. Cookies and Tracking Technologies

ace66 uses cookies, web beacons, local storage, and similar tracking technologies to enhance the user experience, maintain sessions, analyse platform performance, and prevent fraud. A cookie is a small text file stored on your device by your web browser when you visit our site.

7.1 Types of Cookies We Use

Cookie Category	Purpose	Duration
Strictly Necessary	Essential for basic platform functionality such as account login, session management, security, and load balancing. These cookies cannot be disabled without significantly impairing your ability to use ace66 services.	Session or up to 30 days
Performance & Analytics	Collect aggregated, anonymised data about how visitors use the Platform, including page views, navigation paths, errors encountered, and feature usage. This data helps us improve platform performance and user experience.	Up to 2 years
Functional	Remember your preferences, language selection, display settings, and other customisation choices to provide a more personalised experience on subsequent visits.	Up to 1 year
Fraud Prevention	Used to detect and prevent fraudulent activity, account abuse, bonus exploitation, and automated bot access. These cookies help protect both ace66 and legitimate players from security threats.	Up to 90 days

7.2 Managing Your Cookie Preferences

You can control and manage cookies through your web browser settings. Most browsers allow you to block or delete cookies, or to be notified before a cookie is set. However, disabling strictly necessary or functional cookies may significantly impair your ability to access and use certain features of the ace66 Platform, including account login and payment processing.

Please note that ace66 does not use third-party advertising cookies or behavioural tracking cookies for cross-site advertising purposes. All cookies placed by ace66 are first-party cookies used solely for the purposes described above.

8. Data Security Measures

ace66 implements comprehensive technical and organisational security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption: All data transmitted between your device and ace66 servers is encrypted using SSL/TLS protocols. Sensitive data stored in our databases is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised ace66 personnel only, on a need-to-know basis, and subject to strict internal access control policies and audit logging.
• Secure Infrastructure: Our servers and databases are hosted in secure, professionally managed data centres with physical security controls, environmental controls, redundancy systems, and 24/7 monitoring.
• Regular Security Audits: We conduct regular internal security reviews, vulnerability assessments, and penetration testing to identify and address potential security weaknesses.
• Employee Training: All ace66 employees and contractors with access to personal data receive training on data protection principles, security best practices, and confidentiality obligations.
• Incident Response: We maintain an incident response plan to detect, respond to, and mitigate the impact of any data breach or security incident. In the event of a breach affecting your personal data, we will notify you and relevant authorities in accordance with applicable legal requirements.

9. Your Privacy Rights

As an ace66 account holder, you have the following rights regarding your personal data:

9.1 Right to Access

You have the right to request a copy of the personal information ace66 holds about you. To request access, send an email to [email protected] with the subject line "Data Access Request". We will provide the requested information in a structured, commonly used, machine-readable format within 30 days of receiving your request, subject to identity verification.

9.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most of your account information directly through your account settings. For information that cannot be updated via your account (such as date of birth or name changes requiring document verification), contact [email protected].

9.3 Right to Deletion (Right to be Forgotten)

You have the right to request deletion of your personal data, subject to certain exceptions. We may be required to retain certain data for legal, regulatory, or compliance purposes (including AML record-keeping requirements, which mandate retention of transaction records for up to 5 years). To request deletion, close your account via your account settings or contact [email protected]. Upon account closure, we will delete or anonymise your personal data in accordance with our data retention schedule, except where retention is legally required.

9.4 Right to Restrict Processing

In certain circumstances, you have the right to request that we restrict the processing of your personal data while a dispute is resolved. Contact [email protected] to request restriction of processing.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider. To request data portability, contact [email protected].

9.6 Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims.

9.7 Right to Withdraw Consent

Where we process your data based on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal. To withdraw consent for marketing communications, click the unsubscribe link in any promotional email, reply STOP to SMS messages, or adjust your communication preferences in your account settings.

9.8 Right to Lodge a Complaint

If you believe ace66 has violated your privacy rights or applicable data protection laws, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. You may also contact us directly at [email protected] to raise any privacy concerns, and we will investigate and respond to your complaint.

10. Data Retention

ace66 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, subject to legal, regulatory, and compliance requirements. Specific retention periods include:

• Active Accounts: Personal data is retained for the duration of your active account and for a reasonable period thereafter to facilitate account reactivation if requested.
• Closed Accounts: Upon account closure, most personal data is deleted or anonymised within 5 years, unless a longer retention period is required by applicable law, ongoing legal proceedings, or regulatory obligations.
• Transaction Records: Financial transaction records, including deposits, withdrawals, bets, and winnings, are retained for a minimum of 5 years from the date of the transaction to comply with AML record-keeping requirements and for accounting, tax, and audit purposes.
• Identity Verification Documents: KYC documents such as government-issued ID, proof of address, and proof of payment method are retained for 5 years after account closure or the last verification event to comply with regulatory obligations.
• Marketing Data: If you opt out of marketing communications, your contact information is retained on a suppression list to ensure we do not inadvertently send you marketing messages in the future.

11. Children's Privacy

ace66 services are strictly intended for individuals aged 21 years and above. We do not knowingly collect, use, or store personal information from anyone under the age of 21. If we become aware that an individual under 21 has created an account or provided personal information to ace66, we will immediately close the account, delete all associated data, and forfeit any funds or winnings in accordance with our Terms & Conditions.

Parents or guardians who become aware that a minor has created an ace66 account should contact us immediately at [email protected] so we can take appropriate action.

12. Changes to This Privacy Policy

ace66 reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will update the "Last Updated" date at the top of this document and, where appropriate, notify active users via email or an on-Platform notification.

Your continued use of ace66 services following the posting of any changes to this Privacy Policy constitutes your acceptance of those changes. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information.

13. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact the ace66 Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Enquiry" or "Data Rights Request" as the subject line to ensure your message is directed to the appropriate team.
• Response Time: We aim to respond to all privacy-related enquiries within 7 business days and to fulfil data rights requests within 30 days, subject to identity verification and the complexity of the request.