ace167 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is published by ace167 ("ace167", "we", "us", "our") and applies to all personal data collected from individuals ("you", "Player", "User") who access and use the ace167 online casino and sports betting platform at https://ace167.app, including all associated sub-pages, game pages, and support channels.

ace167 operates as an online gambling platform serving players primarily located in Bangladesh. This Policy is written in English and governs the collection, use, storage, and protection of personal information provided by players during registration, identity verification, gameplay, financial transactions, and all interactions with the ace167 support team.

By creating an account on ace167 or by continuing to use the platform after this Policy has been published or updated, you confirm that you have read and understood the practices described herein. If you do not agree with any part of this Policy, please discontinue use of the platform and contact [email protected] to request account closure and data deletion.

This Policy should be read alongside ace167's Terms & Conditions, which govern your overall use of the platform. In the event of any inconsistency between this Policy and the Terms & Conditions on a privacy-specific matter, this Privacy Policy takes preced ence.

2. Data We Collect

ace167 collects personal data in several ways: directly from you when you register an account or contact support; automatically when you use the platform; and from third parties such as payment providers and identity verification services. The categories of data we collect are described below.

2.1 Registration Data

When you create an ace167 account, we collect the following information:

• Full legal name (as it appears on your National Identity Document or passport)
• Date of birth (used to verify that you meet the 18+ age requirement)
• Residential address in Bangladesh (including division, district, and postal code)
• Mobile telephone number linked to your bKash, Nagad, Rocket, or Upay wallet
• Email address (used for account notifications and correspondence)
• Preferred username and encrypted password

2.2 Identity Verification (KYC) Data

Prior to processing withdrawals, ace167 is required to verify player identity under its Know Your Customer (KYC) obligations. This involves collecting:

• Copy of a valid government-issued photo ID (National Identity Card or passport)
• Proof of address document where applicable (utility bill, bank statement dated within 90 days)
• Source-of-funds documentation for high-value transactions, where required under anti-money laundering procedures

2.3 Financial Transaction Data

Every deposit, withdrawal, and bonus credit transaction on ace167 is recorded. Financial transaction data includes the transaction amount in BDT, transaction timestamp (Bangladesh Standard Time, UTC+6), the payment method used (bKash, Nagad, Rocket, or Upay), the mobile wallet number associated with the transaction, and the transaction reference number provided by the payment provider. ace167 does not store full mobile banking PINs or authentication codes.

2.4 Gameplay and Betting Activity Data

ace167 records all gameplay and sports betting activity associated with your account. This includes games played, bet amounts placed, game outcomes, session duration, sports markets wagered on (including cricket, football, kabaddi, and hockey), and bonus wagering progress. This data is used to administer your account, resolve disputes, detect fraud, and fulfil responsible gaming obligations.

2.5 Technical and Device Data

When you access ace167, our systems automatically collect the following technical information:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session start and end times
• Pages visited and features accessed on the platform
• Referring URL (the page from which you navigated to ace167)

This technical data is used for platform security, fraud prevention, performance optimisation, and responsible gaming monitoring.

2.6 Support and Communications Data

When you contact ace167 support via live chat or email, we retain a record of that communication, including the content of messages exchanged, the date and time of contact, and the resolution outcome. This data is used to maintain service quality, train support staff, and resolve any future disputes relating to the same matter.

3. How We Use Your Data

ace167 processes personal data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected. The primary purposes for which we use player data are as follows:

3.1 Account Administration

Registration data is used to create and maintain your ace167 account, authenticate your identity on each login, process your transactions, administer bonuses and promotions, and communicate account-related notifications to you. Without this data, ace167 cannot provide you with a functional gambling account.

3.2 Identity Verification and Fraud Prevention

KYC data and technical data are used to verify your identity, confirm your eligibility to use the platform (including age verification), and detect fraudulent account activity such as duplicate accounts, bonus abuse, and money laundering. ace167 uses automated and manual fraud detection processes that analyse betting patterns, transaction volumes, device fingerprints, and IP addresses to identify suspicious behaviour.

3.3 Payment Processing

Financial transaction data is shared with payment providers (bKash, Nagad, Rocket, Upay) solely for the purpose of executing your requested deposits and withdrawals in BDT. ace167 does not store mobile banking authentication credentials.

3.4 Responsible Gaming

Gameplay data and session data are used to monitor gambling behaviour and identify signs of problem gambling. Where ace167's responsible gaming systems detect patterns that may indicate a player is gambling beyond their means or showing signs of compulsive behaviour, our team may reach out proactively to offer support tools including deposit limits, session time limits, or self-exclusion.

3.5 Legal and Regulatory Compliance

ace167 retains and processes data as required to comply with applicable anti-money laundering obligations and to respond to lawful requests from government authorities or law enforcement agencies. In such cases, data may be disclosed without prior notice to you, to the extent required by law.

3.6 Platform Improvement and Analytics

Aggregated, anonymised technical and gameplay data is used to analyse platform performance, identify popular game categories, improve user interface design, and inform the development of new features. This analytics processing does not involve data that identifies you personally.

3.7 Marketing Communications

If you have opted in to receive promotional communications during registration, ace167 may send you notifications about new games, seasonal promotions (such as Eid or Pohela Boishakh bonus offers), and platform updates via email or in-platform notification. You may opt out of marketing communications at any time by updating your account notification preferences or by contacting [email protected].

4. Data Sharing & Third Parties

ace167 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your data with the following categories of third parties only to the extent necessary for the provision of platform services, legal compliance, or player protection:

4.1 Payment Service Providers

To execute deposits and withdrawals, ace167 shares necessary transaction data with mobile financial services including bKash, Nagad, Rocket, and Upay. This sharing is limited to the information required to initiate and confirm the specific transaction and is governed by the privacy policies of those respective providers.

4.2 Game Content Providers

Third-party game studios — including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — may receive technical session identifiers necessary for the delivery of their game content within the ace167 platform. These providers do not receive your full registration or financial data. Game providers are contractually obligated to handle any data they receive in compliance with applicable data protection standards.

4.3 Identity Verification Services

Where automated KYC verification tools are used, document images submitted by players may be processed by a third-party verification provider. These providers act solely as data processors under ace167's instruction and are not permitted to use or retain your identification documents for any purpose beyond the specific verification task.

4.4 Law Enforcement and Regulatory Authorities

ace167 will disclose personal data to government authorities, law enforcement agencies, or financial intelligence units where required to do so by applicable law or by a valid legal order. Such disclosures are made in good faith and are limited to the minimum data necessary to satisfy the legal obligation.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the assets of ace167, player data may be transferred to the acquiring entity. In such circumstances, ace167 will notify affected players via registered email address prior to the transfer taking effect, and will ensure that the recipient entity is bound by privacy obligations no less protective than those set out in this Policy.

5. Cookies & Tracking Technologies

ace167 uses cookies and similar technologies to ensure the platform functions correctly and to maintain a secure, personalised experience for each player. A cookie is a small text file placed on your device by the ace167 server when you visit the platform. Cookies do not contain executable code and cannot carry viruses.

5.1 Essential Cookies

Essential cookies are strictly necessary for the platform to operate. They maintain your login session across pages, store your account preferences, and protect against cross-site request forgery. Essential cookies cannot be disabled without breaking core platform functionality. Examples include session authentication tokens and CSRF protection cookies.

5.2 Analytics Cookies

ace167 uses first-party analytics cookies to understand how players navigate the platform — which game categories are most visited, which pages generate the most engagement, and where players encounter friction in the registration or payment process. This data is aggregated and anonymised. ace167 does not use Google Analytics or other third-party analytics services that share data outside the platform.

5.3 Fraud Prevention Cookies

Fraud prevention cookies store a device fingerprint identifier that helps ace167 detect anomalous login patterns, identify duplicate accounts, and flag suspicious transaction activity. These cookies are essential to platform security and cannot be disabled.

5.4 Managing Cookies

You may manage or delete cookies through your browser settings at any time. Please note that disabling essential or fraud-prevention cookies may impair your ability to log in to your ace167 account or complete financial transactions securely. ace167 does not use cookies to track your browsing activity across other websites.

6. Data Retention

ace167 retains personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with applicable legal obligations. The specific retention periods that apply to different categories of data are as follows:

• Account Registration Data: Retained for the duration of your active account plus five (5) years after account closure. This retention is necessary to satisfy anti-money laundering record-keeping obligations.
• KYC Verification Documents: Retained for five (5) years from the date of verification or from the date of account closure, whichever is later. Documents are stored in an encrypted archive accessible only to the ace167 compliance team.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping standards applicable to the platform.
• Gameplay and Betting Activity Logs: Retained for three (3) years from the date of the recorded activity. Older gameplay data is anonymised and aggregated for statistical purposes.
• Technical and Device Data: Retained for twelve (12) months, after which it is deleted or anonymised.
• Support Communications: Retained for two (2) years from the date of the final communication in a support thread.
• Marketing Consent Records: Retained for the duration of your account, or until consent is withdrawn, plus one (1) year following withdrawal as an audit record.

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised. Requests for early deletion (subject to overriding legal retention obligations) may be submitted to [email protected].

7. Data Security

ace167 implements a comprehensive range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following controls:

7.1 Encryption

All data transmitted between your device and the ace167 platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption. Player passwords are stored using a one-way cryptographic hashing algorithm — ace167 staff cannot read or recover your password. KYC document archives are encrypted at rest using AES-256 encryption.

7.2 Access Controls

Access to personal data held by ace167 is strictly limited to staff members whose job functions require that access. All staff with access to player data are subject to confidentiality obligations and receive data protection training on an annual basis. Access logs are maintained and reviewed regularly.

7.3 Infrastructure Security

The ace167 platform is hosted on hardened server infrastructure with network-level firewalls, intrusion detection systems, and regular security patching. Platform code undergoes periodic security review and vulnerability assessment. All third-party integrations (payment providers, game providers) are assessed for security compliance before being connected to the ace167 platform.

7.4 Data Breach Response

In the event of a confirmed personal data breach that poses a risk to player rights, ace167 will notify affected players via their registered email address without undue delay — and in any case within 72 hours of becoming aware of the breach — describing the nature of the incident, the categories of data affected, the likely consequences, and the remediation measures taken.

8. Your Privacy Rights

As a player on ace167, you have the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Request", including your registered account username and a description of the right you wish to exercise. ace167 will respond within five (5) business days and resolve the request within thirty (30) calendar days.

8.1 Right of Access

You have the right to request a copy of all personal data that ace167 holds about you. ace167 will provide this information in a structured, commonly used, machine-readable format (such as CSV or PDF) within 30 days of receiving a valid access request. The first copy is provided free of charge; subsequent requests within a 12-month period may be subject to a reasonable administrative fee.

8.2 Right to Rectification

If any personal data held by ace167 is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections such as changes to your contact email address or residential address may be made directly through your account settings. Changes to core identity information (name, date of birth) require supporting documentation and are processed by the ace167 compliance team.

8.3 Right to Erasure

You may request that ace167 delete your personal data in certain circumstances — for example, if you close your account and no overriding legal retention obligation applies. Please note that ace167 is required by anti-money laundering regulations to retain certain financial and identity records for a minimum of five years following account closure, regardless of an erasure request. Where deletion is not legally possible, ace167 will inform you of the applicable retention obligation.

8.4 Right to Restrict Processing

In certain circumstances — such as where you contest the accuracy of data or have objected to processing pending verification of overriding grounds — you may request that ace167 restrict the processing of your data to storage only, pending resolution of the relevant issue.

8.5 Right to Object to Marketing

You may withdraw your consent to receive marketing communications from ace167 at any time, with immediate effect. To opt out, update your notification preferences in your account settings or contact [email protected]. Withdrawal of marketing consent does not affect the legality of any promotional communications sent prior to the withdrawal.

8.6 Right to Data Portability

Where processing is based on your consent or on a contract with you, and processing is carried out by automated means, you have the right to receive a copy of your data in a portable format and to transmit that data to another service provider where technically feasible.

9. Children's Privacy

ace167 is strictly an adult platform intended for individuals aged 18 and above. We do not knowingly collect personal data from any person under the age of 18. If ace167 becomes aware that personal data has been submitted by or on behalf of a minor, that data will be deleted immediately, the associated account will be closed, and any deposits will be returned to the original funding source following identity verification.

If you are a parent or guardian and believe that a minor in your care has created an ace167 account or provided personal information to the platform, please contact [email protected] immediately. ace167 treats all underage gambling concerns as urgent and will act within 24 hours of notification.

10. Policy Updates & Contact

ace167 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — meaning they affect your rights in a significant way or alter how we use your data in a new manner — ace167 will notify registered players via their account email address at least seven (7) days before the changes take effect. Non-material clarifications may be published immediately. The effective date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the ace167 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any revision, you must stop using the platform and request account closure before the revision takes effect.

10.1 Privacy Contact Details

All privacy-related correspondence, including data access requests, correction requests, erasure requests, and objections to processing, should be directed to the ace167 privacy team using the following contact details:

• Email: [email protected] (subject line: "Privacy Request")
• Response Time: Acknowledgement within 24 hours; full response within 5 business days
• Support Hours: Bangladesh Standard Time (UTC+6), every day of the year
• Language: English

ace167 is committed to resolving all privacy queries fairly and transparently. If you are not satisfied with the outcome of a privacy request, you may seek independent advice or escalate the matter through appropriate legal channels available to you in Bangladesh.