Privacy Policy
How ace65 Protects
Your Data

ace65 is an online betting and casino platform operated under the ace65 brand and accessible at ace65.asia. The ace65 platform provides sports betting, live casino, slots, crash games, and a range of other online gaming services to Members primarily based in Bangladesh.

For the purposes of this Privacy Policy, ace65 acts as the data controller — meaning we determine the purposes and means by which your personal data is collected and processed. Where we engage third-party service providers to process data on our behalf (for example, payment processors and identity verification partners), those providers act as data processors and are bound by strict contractual data processing obligations.

If you have any questions about how ace65 handles your personal data, or if you wish to exercise any of your data rights, you may contact us at any time:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the ace65 platform
• Hours: Bangladesh Standard Time (UTC+6)

2.1 Registration Data

When you create an ace65 account, we collect the following information directly from you:

• Full legal name as it appears on your official identity document
• Date of birth (used to verify you meet the 21+ age requirement)
• Mobile phone number registered in Bangladesh
• Preferred username and account password (stored in encrypted form — ace65 never stores plaintext passwords)
• Preferred payment method and associated payment account identifier (e.g., your registered bKash or Nagad mobile number)

2.2 Identity Verification (KYC) Data

As part of the ace65 Know Your Customer (KYC) process, you may be required to provide:

• A copy of a government-issued photo ID (such as a National Identity Card, passport, or driving licence)
• Proof of address (such as a utility bill or bank statement dated within the last three months)
• Proof of ownership of the payment method linked to your account
• A selfie or live facial recognition image for identity matching purposes, where applicable

KYC documents are processed by ace65 and, where applicable, by our trusted third-party identity verification partners under strict data processing agreements.

2.3 Transaction and Activity Data

We automatically record the following data generated by your use of the ace65 platform:

• Deposit and withdrawal amounts, dates, times, and payment method used
• Betting history including all placed bets, selections, stakes, odds, and settlement outcomes
• Casino game session history including game titles played, session duration, and win/loss records
• Bonus and promotion usage history
• Customer support interaction logs (live chat transcripts and email correspondence)

2.4 Technical and Device Data

When you access the ace65 platform, our systems automatically collect certain technical data, including:

• IP address and approximate geographic location derived from IP
• Device type, operating system version, and browser type and version
• Unique device identifiers and mobile advertising IDs (where applicable)
• Session timestamps, page views, and navigation paths within the platform
• Cookie identifiers and similar tracking technologies (see Section 6)

2.5 Responsible Gaming Data

Where you use ace65's responsible gaming tools — including deposit limits, cooling-off requests, or self-exclusion — we record the details and history of those settings as part of our duty of care obligations. This data is used exclusively to enforce your chosen restrictions and to monitor for patterns of potentially harmful gambling behaviour.

2.6 Data You Provide Voluntarily

We may also collect personal data that you choose to provide voluntarily, such as feedback submitted through support channels, responses to promotional surveys, or any personal information included in communications you send to the ace65 support team.

ace65 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes described below without first obtaining your explicit consent.

ace65 does not use your personal data to make fully automated decisions that produce significant legal effects on you as a Member without a human review step being available. Where profiling is used for responsible gaming monitoring, you have the right to request a human review of any automated restriction applied to your account.

ace65 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to create and maintain your ace65 account, process transactions, and deliver the betting and casino services you have registered to use. Without this processing, we cannot provide the core ace65 service.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) laws, financial regulations, age verification requirements, and any lawful requests from competent authorities. This includes our KYC verification obligations and suspicious activity reporting duties.
• Legitimate interests: Processing carried out for the purpose of fraud prevention, platform security, responsible gaming monitoring, and the improvement of our services, where those legitimate interests are not overridden by your fundamental rights and freedoms. We carry out a balancing test before relying on this basis.
• Consent: Processing carried out for optional activities such as sending personalised promotional communications, using non-essential cookies, or sharing anonymised data for research purposes. Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

ace65 does not sell, rent, or trade your personal data to any third party. Your data is shared only in the following tightly controlled circumstances:

5.1 Payment Processing Partners

To facilitate deposits and withdrawals, ace65 shares the minimum necessary financial data with licensed payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These partners are contractually bound to use your data solely for the purpose of processing the specific transaction requested.

5.2 Identity Verification Partners

Where KYC verification is required, ace65 may share identity documents and biometric data (where applicable) with accredited third-party identity verification service providers. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose beyond the verification task assigned.

5.3 Technology and Infrastructure Providers

ace65 uses trusted cloud hosting, data storage, and cybersecurity service providers to operate the platform. These providers process data on our behalf under contractual obligations that require them to maintain data confidentiality and security standards equivalent to or exceeding those observed by ace65 directly.

5.4 Game Content Providers

Some game titles offered on the ace65 platform are provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios receive only the session-level technical data necessary to deliver the game experience (such as a session token and stake amount); they do not receive your full personal profile.

5.5 Legal and Regulatory Authorities

ace65 will disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, valid legal process, or a binding government order. We will notify you of such a disclosure where legally permitted to do so.

5.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the ace65 business, Member data may be transferred to the acquiring entity as part of that transaction. In such cases, ace65 will provide reasonable advance notice to affected Members and ensure that the receiving entity is bound by data protection obligations at least as protective as those set out in this Privacy Policy.

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit the ace65 platform. They allow the platform to recognise your device on subsequent visits, remember your preferences, maintain your session state, and gather analytical data about how the platform is used. ace65 also uses similar technologies including web beacons, local storage objects, and session tokens.

6.2 Types of Cookies Used by ace65

• Strictly Necessary Cookies: Essential for the operation of the ace65 platform. These include session authentication cookies that keep you logged in during your visit, security tokens that prevent cross-site request forgery attacks, and load-balancing cookies. These cookies cannot be disabled without disrupting core platform functionality.
• Functional Cookies: Used to remember your preferences and settings, such as your preferred language, last-visited game category, and responsible gaming notification settings. Disabling these cookies will not prevent platform access but may result in a reduced experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Members navigate the ace65 platform — which pages are visited most frequently, how long sessions last, and where Members encounter errors. This data is used solely to improve the ace65 experience. No personally identifiable information is included in analytics reports.
• Marketing Cookies (Consent Required): Used only where you have given explicit consent to receive personalised promotional communications. These cookies track your engagement with ace65 promotions to help us deliver offers that are relevant to your gaming preferences. You may withdraw consent for marketing cookies at any time via your account privacy settings.

6.3 Managing Cookies

You can control cookie settings directly within the ace65 platform via your account preferences. You may also configure your browser to block or delete cookies; however, please note that disabling strictly necessary cookies will prevent you from logging in and using the ace65 platform. Detailed instructions for managing cookies in major browsers are available in your browser's help documentation.

ace65 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

When data is no longer required beyond the applicable retention period, ace65 securely deletes or anonymises it in a manner that ensures it cannot be reconstructed or attributed to any individual. In cases where data has been anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes.

As a Member of the ace65 platform, you hold the following rights with respect to your personal data. ace65 is committed to honouring these rights promptly and without unnecessary bureaucracy. Requests can be submitted via live chat or by emailing [email protected].

• Right of Access: You have the right to request a copy of the personal data ace65 holds about you. We will provide this within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Where a correction affects data shared with a third-party processor, we will notify that processor of the correction.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the original purpose, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. This right is subject to overriding legal retention obligations (e.g., AML record-keeping requirements).
• Right to Restriction: You may request that ace65 restrict the processing of your data (i.e., store it but not use it) in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is carried out by automated means on the basis of consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. ace65 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the exercise or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.
• Right to Lodge a Complaint: If you are unsatisfied with ace65's response to a data rights request, or if you believe your data has been processed in breach of applicable law, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

ace65 implements a comprehensive, layered data security framework designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. The following technical and organisational measures are in place across the ace65 platform:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ace65 platform is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols. The ace65 platform enforces HTTPS across all pages and will not serve content over unencrypted HTTP connections.
• Encrypted Data Storage: Sensitive data at rest — including passwords (stored as salted hashes), identity documents, and payment method identifiers — is encrypted using AES-256 encryption on secure, access-controlled server infrastructure.
• Access Controls: Access to Member personal data is restricted to ace65 personnel and authorised processors who have a genuine operational need to access it. All staff with data access receive regular training on data protection obligations and are bound by confidentiality agreements.
• Multi-Factor Authentication: ace65's internal systems require multi-factor authentication for all staff accessing Member data. We also strongly encourage Members to enable any additional login verification options made available on their accounts.
• Penetration Testing and Security Audits: The ace65 platform undergoes regular third-party security penetration testing and independent audits to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: ace65 maintains a documented security incident response plan. In the event of a data breach that poses a risk to Member rights or freedoms, ace65 will notify affected Members and the relevant supervisory authority within the timeframes required by applicable law.

While ace65 employs best-in-class security measures, no online system can guarantee absolute security. You are responsible for maintaining the security of your account credentials — including your password and any one-time passwords (OTPs) received on your registered mobile number. Never share your login credentials with any third party.

The ace65 platform is strictly intended for adults aged 21 years and older. ace65 does not knowingly collect, store, or process personal data belonging to any individual under the age of 21. Age verification is a mandatory step in the ace65 registration process, and we conduct ongoing KYC checks to enforce this requirement.

If ace65 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation during registration or any other means — we will take the following immediate steps:

• Suspend the account pending investigation
• Delete all personal data associated with the account to the fullest extent permitted by anti-money laundering record-keeping obligations
• Return any deposited funds to the original payment source after verification
• Forfeit any winnings generated through the account in accordance with the ace65 Terms & Conditions

If you have reason to believe that an individual under 21 has registered or is actively using an ace65 account, please report this to [email protected] immediately so that appropriate action can be taken without delay.

The ace65 platform may contain references to third-party services, including game studios (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi), payment providers (such as bKash and Nagad), and other service partners. Where the ace65 platform interfaces with the services of these third parties, those third parties operate under their own independent privacy policies and data practices.

ace65 is not responsible for the privacy practices, content, or security of any third-party service. We recommend reviewing the privacy policies of any third-party service you interact with in connection with your use of the ace65 platform. The inclusion of a third-party service within the ace65 platform does not constitute an endorsement of that party's data practices by ace65.

Where a third-party provider processes your personal data as a data processor on behalf of ace65 (for example, our KYC verification partner or payment gateway), they are bound by a data processing agreement that prohibits them from using your data for any purpose beyond the specific task assigned by ace65.

ace65 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or our internal data handling practices. When a material change is made to this Privacy Policy, ace65 will take the following steps to ensure you are informed:

• Display a prominent notice on the ace65 platform homepage and login page for a minimum of 14 days following the update
• Send a notification to your registered email address or mobile number summarising the key changes
• Update the "Last Updated" date and version number displayed at the top of this Privacy Policy and in the Table of Contents

Your continued use of the ace65 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any updated terms, you must discontinue use of the platform and contact [email protected] to request account closure before the effective date of the changes.

For minor, non-material updates — such as typographical corrections, clarifications that do not alter the substance of any provision, or formatting improvements — ace65 may update this Privacy Policy without issuing individual notifications, though the "Last Updated" date will always reflect the date of the most recent change of any kind.

ace65 takes all privacy-related enquiries and complaints seriously. If you have a question about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how your personal data has been handled, please contact the ace65 Data Support team using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 via the ace65 platform
• Response Time: We aim to acknowledge all privacy-related contacts within 24 hours and to provide a full response within 30 calendar days of receiving a verified request. For complex requests involving multiple data categories, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

If you are dissatisfied with ace65's response to your complaint, or if you believe that ace65 has processed your personal data in a manner that is inconsistent with applicable data protection law, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. ace65 will cooperate fully with any investigation conducted by a competent supervisory authority.

ace65 is committed to resolving privacy concerns at the first point of contact wherever possible. We encourage Members to contact our support team directly before escalating to a supervisory authority so that we have a fair opportunity to address your concern promptly and to your satisfaction.