Privacy Policy — ace265

Introduction & Scope

This Privacy Policy (the "Policy") describes how ace265 ("ace265", "we", "us", or "our") collects, processes, stores, and protects personal data about users ("you", "your", or "Player") of the ace265 website at https://ace265.org and all associated services (the "Platform"). This Policy forms part of our overall legal framework, alongside the Terms & Conditions and the Responsible Gaming Policy.

By registering an account on ace265, accessing the Platform, or submitting any personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection and use of your data as described herein. If you do not agree with any aspect of this Policy, you must discontinue use of the Platform immediately.

ace265 is committed to handling your personal data responsibly, transparently, and securely. We do not sell your personal data to third parties for their own marketing purposes. We collect only the data necessary to deliver, secure, and improve our services for Bangladeshi players.

Our Privacy Commitments

1. Data We Collect

ace265 collects personal data in several ways: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from trusted third-party sources where required for identity or payment verification. The categories of data we collect are described below.

1.1 Registration & Account Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Email address and mobile phone number used to contact you and secure your account.
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code.
• Username and encrypted password hash — we never store your password in plain text.
• Preferred language and currency preferences (Bangladeshi Taka / BDT).

1.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued photo identification (National Identity Card, passport, or driving licence).
• Proof of address documents such as a utility bill or bank statement not older than three months.
• Payment method verification data — for example, confirmation that the bKash, Nagad, or Rocket mobile wallet number is registered in your name.
• Selfie or liveness check images where required to match your identity document.

1.3 Financial Transaction Data

• Deposit and withdrawal history, including amounts in BDT, timestamps, and payment method references.
• Mobile wallet transaction IDs from bKash, Nagad, Rocket, and Upay.
• Bank account references for transfers via Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank.
• Partial card numbers and card type (Visa, Mastercard) where card payments are used — full card numbers are never stored by ace265.
• Bonus crediting and wagering activity records linked to your account.

1.4 Technical & Usage Data

• IP address and approximate geographic location derived from it.
• Device type, operating system, browser type, and screen resolution.
• Session start and end times, pages visited, and features accessed within the Platform.
• Game play logs including games launched, bets placed, outcomes, and session durations.
• Click-stream and interaction data used to identify and fix usability issues.
• Cookies and similar tracking technologies as described in Section 6 of this Policy.

1.5 Communications Data

• Records of emails, live chat transcripts, and support tickets exchanged between you and the ace265 support team.
• Promotional opt-in preferences — whether you have consented to receive bonus offers, tournament announcements, or BPL / IPL betting promotions by email or SMS.
• Complaint and dispute records.

2. How We Use Your Data

ace265 uses your personal data only for legitimate, specified purposes. We do not engage in automated decision-making that produces legal or similarly significant effects without human review. The table below summarises the primary purposes for which your data is processed.

Where ace265 relies on your consent as the legal basis for processing (such as for marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

3. Data Sharing

ace265 does not sell your personal data. We may share it with carefully selected third parties only where necessary and only for the purposes described in this Policy. All third-party partners are required to handle your data in accordance with applicable data protection principles and are contractually prohibited from using it for their own independent purposes.

Categories of Third Parties

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum transaction data necessary to process your deposits and withdrawals securely.
• Identity verification providers: Trusted KYC service providers who assist us in verifying your identity and age in line with our compliance obligations.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive anonymised session identifiers to serve game content — they do not receive your full personal profile.
• IT infrastructure providers: Cloud hosting and server management partners who store and process data on our behalf under strict data processing agreements.
• Fraud and security vendors: Specialist providers who help us detect, prevent, and investigate suspicious activity, unauthorised access, and potential money laundering.
• Legal and regulatory authorities: Where required by applicable law, court order, or a legitimate request from a competent authority, ace265 may disclose personal data without prior notice to the player.

4. Data Retention

ace265 retains personal data for as long as your account remains active and for a reasonable period thereafter to comply with legal, regulatory, and audit obligations. Specific retention periods by data category are outlined below.

• Account and identity data: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Financial transaction data: Retained for a minimum of seven (7) years from the date of each transaction, in line with standard financial record-keeping practices.
• KYC documents: Retained for five (5) years after account closure or, where a suspicious activity report has been filed, for longer as required by the applicable authority.
• Technical and usage logs: Retained for up to twelve (12) months in detailed form, then aggregated and anonymised for longer-term analytics.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period to demonstrate compliance.
• Support communications: Retained for three (3) years from the date of the last interaction, unless the matter relates to an ongoing dispute or legal proceeding.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request early deletion of certain data by contacting us at [email protected], subject to our legal obligation to retain specific categories of information.

5. Cookies & Tracking

ace265 uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform, remember your preferences, maintain your login session, and collect anonymised analytics. By continuing to use the Platform after being informed of our cookie use, you consent to the placement of cookies on your device.

• Essential cookies: Required for the Platform to function. These include session authentication tokens, anti-fraud identifiers, and load-balancing cookies. These cannot be disabled without preventing you from using the Platform.
• Functional cookies: Remember your preferences such as language selection, last-visited game category, and notification settings.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most, where users drop off, and how features are used — to help us improve the experience.
• Marketing cookies: Used only with your explicit consent to track the effectiveness of promotional campaigns and, where applicable, serve relevant offers within the ace265 Platform.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent certain features of the Platform from working correctly.

6. Your Data Rights

ace265 respects your rights in relation to your personal data. You may exercise any of the following rights by submitting a written request to [email protected]. We aim to respond to all valid data rights requests within thirty (30) days of receipt.

• Right of access: You may request a copy of the personal data we hold about you and information about how it is being processed.
• Right to rectification: If any data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to our legal retention obligations and may not apply to all categories of data.
• Right to restriction: You may request that we restrict the processing of your data while a dispute or correction request is being resolved.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to other processing activities where ace265 relies on legitimate interests as the legal basis.
• Right to data portability: Where technically feasible, you may request a structured, machine-readable copy of the personal data you provided to us.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7. Data Security

ace265 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive data categories, including identity documents and financial records.
• Access controls that restrict internal access to personal data on a strict need-to-know basis, with all access logged and audited.
• Regular vulnerability assessments and penetration testing of Platform infrastructure.
• Multi-factor authentication for internal administrative systems.
• Staff training on data protection obligations and information security best practices.

No method of electronic transmission or storage is completely secure. While ace265 takes the protection of your data seriously and applies industry-standard safeguards, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ace265 will notify affected players without undue delay and take all reasonable steps to contain the breach and mitigate its effects.

8. Players Under 21

The ace265 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21, we will immediately close that account, forfeit any balance, and securely delete all associated personal data to the extent permitted by law.

If you have reason to believe that a minor has accessed or registered on the ace265 Platform, please notify us immediately at [email protected] so that we can take appropriate action.

9. Policy Updates

ace265 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or an in-Platform notification. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.

Your continued use of the ace265 Platform following the posting of any changes constitutes your acceptance of the revised Policy. If you disagree with any changes, you must cease using the Platform and may request account closure by contacting [email protected].