ace356 Privacy Policy

Introduction

Last updated: 1 January 2026

ace356 is committed to maintaining the highest standards of data protection for all players in Bangladesh and across the jurisdictions we serve. We collect only the information we need, use it only for the purposes described in this policy, and never sell your personal data to third-party marketers.

This Privacy Policy should be read in conjunction with our Terms & Conditions. If you have any questions about how we handle your personal data, please contact us at [email protected]. We treat all privacy queries with the utmost seriousness and will respond promptly.

1. Information We Collect

1.1 Information You Provide Directly

When you register an account with ace356 or interact with our platform, you provide us with information that we collect and process. This includes:

• Identity Information: Full legal name, date of birth, gender, nationality, and a copy of your government-issued photo identification (e.g., National ID card, passport, driving licence).
• Contact Information: Mobile phone number, email address, and residential address (including city, district, and postcode).
• Financial Information: Payment method details necessary to process deposits and withdrawals, such as your bKash, Nagad, Rocket, or Upay mobile number, or your Visa/Mastercard card details (card number, expiry date, billing name). Full card numbers are tokenised and never stored on ace356 servers.
• Account Credentials: Username and encrypted password. We store only a hashed representation of your password — ace356 staff cannot view your password in plain text.
• Support Communications: Any messages, emails, or chat transcripts you send to our support team at [email protected].

1.2 Information Collected Automatically

When you access and use the ace356 platform, we automatically collect certain technical information to operate, secure, and improve the service:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Network Information: IP address, internet service provider, and approximate geographic location (derived from IP, not GPS).
• Usage Data: Betting and gaming activity including games played, bets placed, session duration, pages visited, and features used within the platform.
• Cookie Data: Session tokens, preference cookies, and anonymised analytics data collected via first-party cookies. See Section 7 for full details on our cookie practices.

1.3 Information from Third Parties

In certain circumstances, ace356 may receive information about you from trusted third-party sources, including:

• Payment Processors: Transaction confirmation and status updates from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks.
• Identity Verification Services: Results from KYC (Know Your Customer) checks conducted via certified identity verification partners, where we are required to verify your identity before processing significant withdrawals.
• Fraud Prevention Services: Risk signals and flagged account patterns from fraud intelligence providers used to protect the integrity of the ace356 platform.

2. How We Use Your Information

2.1 Platform Operations

The primary purpose for which ace356 processes your personal data is to operate the platform and deliver the services you have requested. This includes creating and managing your account, processing deposits and withdrawals, settling sports bets (including BPL, IPL, T20 World Cup, and other cricket markets), operating casino and slots games, and providing customer support.

2.2 Identity Verification and Fraud Prevention

ace356 is obligated to verify the identity of its players as part of its responsible gaming and anti-money-laundering commitments. We use the personal data you provide, along with automated fraud detection tools, to confirm that you are who you say you are, that you meet the minimum age requirement of 21 years, and that your account activity does not present indicators of fraudulent, abusive, or criminal conduct.

2.3 Responsible Gaming Monitoring

ace356 uses your account and gaming activity data to monitor for signs of problem gambling behaviour, such as rapidly escalating deposit volumes, extended unbroken play sessions, or sudden changes in betting patterns. Where such signals are detected, our responsible gaming team may reach out to check on your wellbeing and, where appropriate, apply protective account limits. This data processing is carried out in your genuine interest and in fulfilment of our responsible gaming obligations.

2.4 Legal and Regulatory Compliance

ace356 may be required to process and retain your personal data to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, reporting obligations to competent authorities, and responses to lawful requests from law enforcement or regulatory bodies. In all such cases, we will only disclose the minimum information required by law.

2.5 Platform Improvement and Analytics

We use anonymised and aggregated usage data to understand how players interact with the ace356 platform, identify technical issues, and make improvements to the user experience. This analytics data does not identify you personally and is used solely to make ace356 a better platform for all users.

2.6 Service Communications

ace356 will contact you via email or SMS with communications that are directly relevant to your account, including deposit confirmations, withdrawal updates, account security alerts, and responses to your support queries. We do not send unsolicited marketing messages without your explicit consent, and you may opt out of any non-essential communications at any time by contacting [email protected].

3. How We Share Your Information

3.1 Payment Service Providers

To process your deposits and withdrawals, ace356 must share relevant financial information with your chosen payment provider. For bKash, Nagad, Rocket, and Upay transactions, this means sharing your mobile number and transaction amount with the respective payment network. For Visa and Mastercard transactions, card details are processed directly through a PCI-DSS compliant payment gateway. ace356 does not retain full card numbers on its own servers.

3.2 Identity Verification Partners

Where required for KYC verification, ace356 may share your submitted identity documents and personal details with certified third-party identity verification service providers. These providers are contractually bound to process your data only for the purposes of verification on behalf of ace356 and are prohibited from using your data for any other purpose.

3.3 Technology and Infrastructure Providers

ace356 uses third-party technology providers to operate its infrastructure, including cloud hosting, database management, and cybersecurity services. These providers act as data processors on our behalf and are required under contract to maintain appropriate security standards and to process your data only on our documented instructions.

3.4 Game Providers

When you play games supplied by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited technical data (including a session token and your anonymised player identifier) is shared with the relevant provider to facilitate your game session. These providers do not receive your full name, contact details, or payment information.

3.5 Law Enforcement and Regulatory Authorities

ace356 will disclose personal data to law enforcement agencies, regulators, or government bodies only where we are legally compelled to do so. We will, wherever permitted by law, notify you of such a disclosure request before complying.

3.6 No Sale of Data

Under no circumstances does ace356 sell, rent, or commercially transfer your personal data to any third party for their own marketing, advertising, or commercial purposes. This prohibition applies absolutely and without exception.

5. Cookies & Tracking Technologies

5.1 What Are Cookies

Cookies are small text files stored on your device by your browser when you visit the ace356 platform. They allow the platform to recognise your device across sessions, retain your preferences, and maintain the security of your active login session.

5.2 Cookies We Use

• Essential Session Cookies: Required for the platform to function. These maintain your logged-in session and carry your security tokens. Without these cookies, the platform cannot operate.
• Preference Cookies: Remember your platform settings such as language preferences and notification choices so you do not need to re-enter them on each visit.
• Analytics Cookies: Collect anonymised data about how pages are used, which features are accessed most frequently, and where technical errors occur. This data is used solely to improve the ace356 platform and does not identify you personally.

5.3 Third-Party Cookies

ace356 does not permit third-party advertising networks to place cookies on the ace356 platform. Any analytics processing is conducted using first-party data only. Game provider iframes may set their own session cookies which are governed by the respective provider's privacy policy.

5.4 Managing Cookies

You may control or disable cookies through your browser settings at any time. Please note that disabling essential session cookies will prevent you from logging in and using the ace356 platform. Disabling preference or analytics cookies will not affect core functionality.

6. Data Security

ace356 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Our security framework includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the ace356 platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including identity documents and payment information, is encrypted at rest using AES-256 encryption on our servers.
• Password Hashing: Player passwords are stored exclusively as cryptographic hashes. ace356 staff cannot retrieve or view your password in plain text under any circumstances.
• Access Controls: Access to personal data within ace356 is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary for their specific operational role.
• Security Monitoring: Our systems are monitored around the clock for suspicious activity, intrusion attempts, and anomalous access patterns.

7. Data Retention

ace356 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. Our general retention guidelines are as follows:

• Active Account Data: Retained for the lifetime of your active ace356 account and for a period of five (5) years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years to satisfy regulatory and audit obligations.
• KYC Documents: Identity verification documents are retained for the duration of your active account plus five (5) years, in line with AML compliance obligations.
• Support Communications: Customer support correspondence is retained for two (2) years from the date of the last communication in a support thread.
• Analytics Data: Anonymised usage data is retained indefinitely as it cannot be linked back to any individual player.

When personal data reaches the end of its applicable retention period, it is securely deleted from all ace356 systems or irreversibly anonymised so that it can no longer be associated with you.

8. Minors & Age Protection

The ace356 platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If you are under 21, you must not register for or use any ace356 service. If ace356 discovers that it has inadvertently collected data from a minor, that account will be immediately closed, all collected data will be deleted, and any funds deposited will be returned to the originating payment source where possible.

If you are a parent or guardian and have reason to believe that your child has registered an account with ace356, please contact us immediately at [email protected] and we will take prompt action.

9. Changes to This Privacy Policy

ace356 reserves the right to update this Privacy Policy at any time. When we make material changes to this policy, we will publish the revised version on the ace356 website and update the "Last updated" date shown at the top of this page. Where changes are significant, we may also notify you by email or in-platform notification.

Your continued use of the ace356 platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your personal data.

10. Contact & Privacy Queries