ace6365 Privacy
Policy
Your privacy matters to us. This Privacy Policy explains in plain English exactly what personal data ace6365 collects, how it is used, who it may be shared with, and the rights you hold as a registered player in Bangladesh.
Privacy at a Glance
How ace6365 Protects Your Data
Six core principles that underpin every data decision at ace6365.
Every byte of data exchanged between your device and ace6365 servers travels over a 256-bit SSL/TLS encrypted connection. Sensitive fields such as passwords and payment details are additionally hashed before storage.
ace6365 collects only the personal data strictly necessary for account operation, identity verification, and fraud prevention. We do not collect data that serves no legitimate purpose in delivering our services to Bangladeshi players .
ace6365 does not sell, rent, or trade your personal data to advertisers, data brokers, or any commercial third party. Data is shared only with vetted service partners operating under strict confidentiality obligations.
We use cookies solely for session management, platform analytics, and fraud detection. No third-party advertising cookies or cross-site tracking cookies are loaded without your knowledge. Our cookie use is documented fully in this policy.
Registered players in Bangladesh may request deletion of their personal data at any time, subject to our legal retention obligations. Requests are processed within 30 days of receipt and confirmed in writing to your registered email address.
Personal data is not held indefinitely. ace6365 applies structured retention schedules — transaction records are kept for 7 years for audit purposes, while inactive account data is purged after 3 years of inactivity unless legal obligations require otherwise.
Section 1
Data Controller Information
For the purposes of this Privacy Policy, the data controller responsible for the personal information you provide when using ace6365 is the operator of the ace6365 platform, accessible at ace6365.net. All references to "ace6365", "we", "us", or "our" in this document refer to the platform operator in its capacity as data controller.
As data controller, ace6365 determines the purposes for which your personal data is collected and the manner in which it is processed. ace6365 is committed to handling all personal data in a responsible, transparent, and secure manner consistent with applicable data protection principles.
This Privacy Policy applies to all personal data collected through the ace6365 website, any associated mobile-optimised domains, and all services offered through those channels — including sports betting markets, live casino games, online slots, crash games, card games, and the ace6365 VIP loyalty programme. It applies to all registered players, prospective players who have initiated but not completed registration, and visitors to the ace6365 website who have not registered an account.
By using the ace6365 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this policy, you should discontinue use of the platform and may request account closure as described in the Terms & Conditions.
Section 2
Personal Data We Collect
ace6365 collects personal data through several channels: directly from you when you register, verify your identity, make deposits or withdrawals, contact support, or participate in promotions; automatically when you use the platform; and, in limited circumstances, from third-party identity verification and fraud prevention partners.
Data You Provide Directly:
- Registration data: Full legal name, date of birth, email address, mobile phone number (Bangladesh), and a chosen username and password.
- Identity verification (KYC) data: National Identity Card (NID) number, passport number, photographs of identity documents, selfie photographs, and proof of residential address.
- Payment data: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and others), and transaction reference numbers.
- Communication data: Messages, enquiries, and attachments you send to ace6365 via live chat, email, or any other support channel.
- Promotional participation data: Responses to surveys, competition entries, and bonus opt-in records.
Data Collected Automatically:
- Technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone (displayed as BST, UTC+6).
- Usage data: Pages visited, games played, bets placed, session duration, click paths, and feature interactions within the ace6365 platform.
- Transaction data: Deposit amounts, withdrawal amounts, bet histories, win/loss records, bonus usage, and wagering activity logs.
- Cookie and session data: Session identifiers, authentication tokens, and preference cookies. See Section 5 for full details on cookie use.
- Geolocation data: Approximate location derived from IP address, used to verify access from Bangladesh and to detect jurisdiction-based access restrictions.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, NID number | Registration & KYC forms |
| Contact Data | Email address, mobile number | Registration form |
| Financial Data | bKash/Nagad account number, bank account | Deposit & withdrawal process |
| Technical Data | IP address, device type, browser | Automatically on site visit |
| Behavioural Data | Games played, bets placed, session length | Platform activity tracking |
| Document Data | NID scan, passport photo, selfie | KYC verification upload |
Section 3
How We Use Your Personal Data
ace6365 processes your personal data only for specific, legitimate, and documented purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The following table sets out the primary purposes for which we process your data and the legal basis for that processing.
| Purpose | Description | Legal Basis |
|---|---|---|
| Account Management | Creating, maintaining, and securing your ace6365 player account, including login authentication and session management. | Contract performance |
| Identity Verification (KYC) | Verifying your identity, age, and location to comply with responsible gaming and anti-fraud obligations. | Legal obligation |
| Payment Processing | Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer partners. | Contract performance |
| Fraud & Crime Prevention | Detecting and preventing money laundering, account takeover, multi-accounting, and other fraudulent activity. | Legitimate interest / Legal obligation |
| Customer Support | Responding to your queries, resolving disputes, and maintaining records of support interactions. | Contract performance |
| Responsible Gaming | Monitoring play patterns to identify potential problem gambling behaviour and implementing self-exclusion or cooling-off measures where requested or required. | Legal obligation / Legitimate interest |
| Marketing Communications | Sending promotional emails and SMS messages about bonuses, new games, and VIP offers — only where you have opted in to receive these. | Consent |
| Platform Analytics | Analysing usage patterns to improve platform performance, game selection, and user experience for Bangladeshi players. | Legitimate interest |
Marketing Communications: If you have opted in to receive marketing communications from ace6365, you may receive emails or SMS messages about promotions, bonus offers, new game launches, VIP programme updates, and seasonal events (for example, special offers during Eid, Pohela Boishakh, or during the BPL or T20 World Cup season). You may withdraw your consent and unsubscribe from marketing communications at any time by contacting [email protected] or via the preference settings in your account dashboard. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Section 4
Data Sharing & Third Parties
ace6365 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only with parties who are contractually obligated to protect your information to the same standard as ace6365.
Categories of third parties with whom ace6365 may share your data:
- Payment processing partners: bKash, Nagad, Rocket, Upay, and bank transfer partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive only the minimum payment data necessary to process your transaction. These partners operate under their own privacy policies and are subject to their respective regulatory frameworks.
- Identity verification providers: Third-party KYC service providers who assist in verifying the authenticity of identity documents and cross-referencing against fraud and sanctions databases. These providers process data solely for the verification purpose and are prohibited from using your data for any other purpose.
- Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session and game-play data necessary to deliver their games through the ace6365 platform. They do not receive your full identity or financial data.
- IT and infrastructure providers: Cloud hosting, content delivery network (CDN), and cybersecurity partners who process data on our behalf under strict data processing agreements that prohibit independent use of your data.
- Regulatory and law enforcement bodies: Where required by applicable law or valid legal process, ace6365 may disclose personal data to government authorities, financial regulators, or law enforcement agencies. We will notify you of such disclosure where we are legally permitted to do so.
- Fraud prevention networks: Industry-wide fraud prevention databases in which ace6365 participates to share signals about confirmed fraudulent activity. Only anonymised or minimised data is shared for this purpose.
International Data Transfers: Where personal data is transferred to a third party located outside Bangladesh (for example, to a game provider or cloud infrastructure partner based in another country), ace6365 takes steps to ensure that appropriate safeguards are in place before the transfer occurs. These safeguards may include standard contractual clauses, binding corporate rules, or equivalent contractual protections. If you would like further information about international transfers of your personal data, please contact [email protected].
Section 5
Cookies & Tracking Technologies
ace6365 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session securely, and to gather anonymised analytics data that helps us improve the platform experience for players in Bangladesh. This section explains the types of cookies we use and how you can manage your preferences.
What is a cookie? A cookie is a small text file placed on your device by a website when you visit it. Cookies are widely used across the internet to make websites work efficiently and to provide information to the site operator. They do not contain executable code and cannot carry viruses.
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Maintain your login session, CSRF protection tokens, language/region preferences (en-BD), and load balancing across servers. | Session / Up to 24 hours | No — platform will not function without these |
| Functional | Remember your display preferences, game lobby layout settings, and notification preferences between sessions. | Up to 90 days | Yes — disabling may affect user experience |
| Analytics | Collect anonymised data on page views, session duration, game category interactions, and navigation paths to improve the platform. | Up to 12 months | Yes — no impact on platform functionality |
| Security & Fraud Prevention | Detect suspicious login patterns, bot activity, and multi-accounting attempts. Fingerprint devices associated with confirmed fraud. | Up to 12 months | No — required for platform security |
Third-Party Cookies: ace6365 does not load third-party advertising or retargeting cookies. Game providers (Pragmatic Play, Evolution Gaming, etc.) may set their own session cookies within their embedded game frames for the purpose of delivering the game session. These cookies are limited in scope to the game session and do not track your activity outside of the ace6365 platform.
Managing Cookies: You can manage or delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling strictly necessary cookies will prevent you from logging in to your ace6365 account. Instructions for managing cookies vary by browser — refer to your browser's help documentation for guidance.
Section 6
Data Retention & Storage
ace6365 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention periods apply to the principal categories of personal data held by ace6365:
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Fraud prevention, legal obligation, dispute resolution |
| KYC Documents | Duration of account + 5 years post-closure | Regulatory compliance and anti-money laundering obligations |
| Transaction Records | 7 years from transaction date | Financial audit trail and legal obligation |
| Betting & Gaming History | 5 years from date of activity | Dispute resolution and responsible gaming monitoring |
| Support Communications | 3 years from last interaction | Quality assurance and dispute resolution |
| Marketing Preferences | Until consent is withdrawn + 1 year | Proof of consent and suppression list maintenance |
| Analytics Data | 12 months (anonymised thereafter) | Platform improvement; anonymisation removes personal identifiers |
Secure Storage: All personal data held by ace6365 is stored on servers located in secure data centres with physical access controls, environmental monitoring, and redundant power and connectivity. Data at rest is encrypted using AES-256 encryption. Access to personal data within the ace6365 organisation is restricted on a strict need-to-know basis, with role-based access controls and audit logging of all data access events.
Data Deletion: At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual. Deletion is carried out in accordance with our internal data lifecycle management procedures. Where you have submitted a right-to-erasure request (see Section 7), we will complete deletion within 30 days subject to any overriding legal retention obligations.
Section 7
Your Privacy Rights
As a registered player on ace6365, you hold the following rights in relation to your personal data. ace6365 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers.
- Right of Access: You may request a copy of all personal data that ace6365 holds about you. This is commonly known as a Subject Access Request (SAR). We will provide the requested data within 30 days of receiving a valid request, free of charge for the first request in any 12-month period.
- Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data fields (such as email address and contact number) directly within your account settings, or by contacting support for fields that require verification.
- Right to Erasure: You may request that ace6365 delete your personal data. We will honour this request subject to any overriding legal obligations that require us to retain certain data (for example, transaction records and KYC documents that must be retained for audit purposes). Where we cannot delete all data due to legal obligations, we will explain which categories are subject to mandatory retention.
- Right to Restrict Processing: You may request that ace6365 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where you have objected to processing and are awaiting the outcome of that objection.
- Right to Data Portability: Where processing is based on your consent or contract performance, and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format (such as CSV or JSON), or that we transmit it directly to another service provider where technically feasible.
- Right to Object: You may object to the processing of your personal data where that processing is based on legitimate interest, including profiling for responsible gaming monitoring or platform analytics. ace6365 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent (for example, receipt of marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
ace6365 reserves the right to request proof of identity before processing any privacy rights request, in order to ensure that data is not disclosed or deleted in response to a request made by an unauthorised third party. We will not charge a fee for processing rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
Section 8
Data Security Measures
ace6365 implements a multi-layered security framework designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security posture is reviewed and tested regularly by our internal security team and third-party security auditors.
Technical measures in place include:
- 256-bit TLS/SSL encryption for all data in transit between your device and ace6365 servers.
- AES-256 encryption for sensitive data at rest, including KYC document files and financial records.
- Bcrypt password hashing — your account password is never stored in plain text and cannot be retrieved by ace6365 staff.
- Multi-factor authentication (MFA) available for player accounts and enforced for all internal administrative access.
- Web Application Firewall (WAF) and DDoS mitigation systems to protect platform availability and detect malicious traffic patterns.
- Intrusion detection and prevention systems (IDS/IPS) monitoring network traffic 24/7.
- Regular penetration testing conducted by independent security firms to identify and remediate vulnerabilities.
- Role-based access control (RBAC) ensuring that ace6365 staff can only access personal data relevant to their specific job function.
Organisational measures include:
- All staff who handle personal data receive data protection training as part of onboarding and annually thereafter.
- A dedicated internal Data Protection contact point oversees compliance with this Privacy Policy and handles escalated privacy requests.
- All third-party vendors with access to personal data are subject to contractual data protection obligations and periodic security reviews.
- A documented incident response plan is in place to enable rapid response to any data security incident, including notification to affected players where required.
Section 9
Changes to This Privacy Policy
ace6365 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The effective date at the top of this page will be updated whenever a new version is published. The current version of this policy always supersedes all previous versions.
Where a material change is made to this Privacy Policy — meaning a change that substantively affects how we collect, use, or share your personal data — ace6365 will endeavour to notify registered players via email at least 7 days before the change takes effect. For non-material clarifications or formatting updates, the revised policy will be published without prior notice.
We encourage all registered players to review this Privacy Policy periodically, particularly before submitting new personal data or initiating a withdrawal. Your continued use of the ace6365 platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.
If you do not agree with any changes made to this Privacy Policy, you may close your ace6365 account and request deletion of your personal data in accordance with the procedure described in Section 7. Account closure requests should be submitted to [email protected] or via the live chat support channel.
Continue Exploring ace6365
Ready to Experience Bangladesh's Premier VIP Casino?
Now that you know how ace6365 protects your privacy, explore our games, review our FAQs, or log in to your account and start playing today. For adults aged 18 and above only.
18+ Only Please gamble responsibly. ace6365 is an entertainment platform for adults only.