Privacy Policy — How acee365 Collects, Uses, and Protects Your Personal Data

1 Personal Data We Collect

When you register an account, use the acee365 platform, or contact our support team, we collect personal data about you. The categories of data we collect, and the circumstances in which we collect each category, are set out below.

1.1 Data You Provide Directly

You provide personal data directly to acee365 when you complete the registration form, submit identity verification documents, make a deposit or withdrawal, contact customer support, or participate in any promotion. The data collected in this way includes:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you are 18 years of age or older)
• Residential address in Bangladesh (city, district, postal code)
• Email address and mobile phone number
• Username and account password (stored in encrypted form — acee365 cannot view your password in plain text)
• Copies of identity documents submitted for KYC verification, including your Bangladesh National Identity Card (NID) or passport, and any supplementary proof-of-address documents
• Payment method details, including the mobile banking number associated with your bKash, Nagad, Rocket, or Upay account, or your bank account number if transacting via Dutch-Bangla Bank, BRAC Bank, City Bank, or another supported institution
• Communications you send to acee365 via live chat, email, or any other support channel

1.2 Data Collected Automatically

When you access and use the acee365 platform, certain technical and behavioural data is collected automatically. This data is used to maintain platform security, personalise your experience, detect fraud, and improve our services. Automatically collected data includes:

• IP address and approximate geolocation derived from your IP address
• Device type, operating system, browser type and version
• Pages visited, games played, bets placed, session duration, and navigation patterns within the platform
• Login timestamps and session identifiers
• Referral source (the URL or marketing channel through which you arrived at acee365)
• Cookie and similar tracking technology data (see Section 4 for full details)

1.3 Data from Third Parties

In limited circumstances, acee365 may receive personal data about you from third-party sources. These sources include identity verification partners who assist us in completing KYC checks, payment processors who confirm the status of your transactions, and fraud prevention services that flag unusual account activity. Data received from third parties is subject to the same protections as data you provide directly.

2 How We Use Your Personal Data

acee365 uses the personal data it collects for specific, legitimate purposes. We do not use your data in ways that are inconsistent with the purposes described in this section, and we do not use your data for automated decision-making that produces legal effects without human review.

The table below summarises the primary purposes for which we use your personal data and the lawful basis for each use:

Where we rely on your consent as the lawful basis for processing — for example, to send you marketing emails or promotional SMS messages — you may withdraw that consent at any time by updating your communication preferences within your acee365 account settings, or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

2.1 Marketing Communications

If you have opted in to receive marketing communications from acee365, we may send you information about new games, seasonal promotions tied to events such as BPL, Eid, or Pohela Boishakh, bonus offers, and platform updates. These communications are delivered via the email address and/or mobile number you registered with acee365. You can opt out of marketing communications at any time; opting out does not affect your ability to use the platform or receive transactional messages such as deposit confirmations and withdrawal notifications.

3 Data Sharing and Third-Party Disclosure

acee365 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. We share your data only in the specific, limited circumstances described in this section.

3.1 Service Providers

To operate the acee365 platform effectively, we engage a number of trusted third-party service providers who process personal data on our behalf. These providers are contractually bound to handle your data securely, to use it only for the specific purpose for which it was shared, and to comply with applicable data protection standards. Categories of service providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, and supported bank gateways) who process your deposit and withdrawal transactions
• Identity verification and KYC service providers who assist in verifying government-issued documents
• Fraud detection and cybersecurity partners who monitor for unusual account activity and potential platform abuse
• Game software providers (including studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) who may receive session identifiers to facilitate game play — these providers do not receive your full personal profile
• Cloud hosting and infrastructure providers who store platform data on secure servers
• Customer support platform providers who host our live chat and ticketing systems
• Email and SMS delivery providers who send transactional and marketing messages on our behalf

3.2 Legal and Regulatory Disclosure

acee365 may be required to disclose your personal data to competent authorities, regulatory bodies, or law enforcement agencies where we are legally obliged to do so. This includes disclosures required in connection with anti-money laundering investigations, fraud investigations, court orders, or other legal processes. acee365 will disclose only the minimum data required to satisfy the legal obligation and will, where legally permitted, notify the affected player of any such disclosure.

3.3 Business Transfers

In the event that acee365 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

4 Cookies and Tracking Technologies

acee365 uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies allow the website to recognise your device on subsequent visits, maintain your session, and remember your preferences. The table below describes the categories of cookies used on the acee365 platform.

4.1 Managing Cookies

Strictly necessary cookies cannot be disabled as they are required for the platform to function. You can manage all other cookie categories through your browser settings. Most modern browsers allow you to view, block, and delete cookies via the privacy or settings menu. Please note that disabling functional cookies may affect the platform experience — for example, your session preferences may not be retained between visits.

acee365 does not use any third-party advertising networks or behavioural retargeting cookies. The marketing attribution cookies we use are limited to first-party measurement of our own promotional campaigns and do not track your activity across other websites.

5 Data Retention Periods

acee365 retains personal data for the period necessary to fulfil the purpose for which it was collected, after which the data is securely deleted or anonymised. In some cases, legal and regulatory obligations require us to retain certain categories of data for extended periods regardless of whether the account remains active.

The following retention periods apply to the main categories of personal data held by acee365:

• Account registration data (name, email, mobile, username): Retained for the duration of the active account plus 5 years following permanent account closure, to satisfy financial record-keeping requirements.
• KYC documents (NID, passport, proof of address): Retained for a minimum of 5 years from the date of submission, in accordance with anti-money laundering compliance obligations.
• Transaction records (deposits, withdrawals, game stakes, winnings): Retained for a minimum of 5 years from the date of each transaction.
• Support communications (chat logs, email threads, complaint records): Retained for 3 years from the date of the last communication in each thread.
• Marketing consent records: Retained for the duration of consent plus 3 years to demonstrate compliance with consent obligations.
• Technical and analytics data (IP logs, session data, cookie data): Retained for up to 12 months from collection, after which data is aggregated and anonymised.

When the applicable retention period expires, acee365 will securely delete the data or, where deletion is not technically feasible within a reasonable timeframe, will ensure the data is anonymised so that it can no longer be associated with any individual player.

6 Your Data Rights

As a player on the acee365 platform, you hold a set of rights over the personal data that acee365 holds about you. acee365 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, contact our data team at [email protected] with the subject line "Data Rights Request" and your registered username. We will respond within 30 days of receiving a valid request.

6.1 Right of Access

You have the right to request a copy of the personal data that acee365 holds about you. Upon receiving a valid access request, we will provide you with a summary of the data categories held, the purposes for which your data is processed, the retention period applicable to each category, and details of any third parties with whom your data has been shared.

6.2 Right to Rectification

If you believe that any personal data acee365 holds about you is inaccurate or incomplete, you have the right to request correction. For certain data fields such as your registered email address and mobile number, you may be able to update the information directly within your account settings. For data that requires verification — such as your legal name or date of birth — submit a rectification request to our support team along with supporting documentation.

6.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been processed unlawfully. This right is subject to overriding legal obligations — for example, acee365 cannot delete transaction records that it is required to retain under applicable financial regulations. Where full deletion is not possible, we will inform you of the extent to which your request can be fulfilled and the reasons for any limitations.

6.4 Right to Data Portability

Where acee365 processes your personal data on the basis of your consent or for the performance of a contract, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format. You may request a data export file by contacting our support team. Exported data will typically be provided in CSV or JSON format within 30 days of the request.

6.5 Right to Restrict Processing

In certain circumstances — for example, while a rectification request is under review — you may request that acee365 temporarily restrict processing of your personal data. During any restriction period, acee365 will continue to store the data but will not actively process it except where legally required.

6.6 Right to Withdraw Consent

Where acee365 processes your data on the basis of consent — including consent to receive marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw marketing consent, update your preferences in your account settings or contact our support team.

7 Data Security Measures

acee365 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated regularly to reflect evolving best practices in cybersecurity.

7.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and acee365 servers is encrypted in transit using SSL/TLS protocols with a minimum of 128-bit encryption.
• Password Security: User passwords are stored using one-way cryptographic hashing with salting. acee365 cannot retrieve or view your password in plain text.
• Access Controls: Access to personal data within the acee365 organisation is restricted on a strict need-to-know basis. Staff members can access only the data required to perform their specific role.
• Intrusion Detection: acee365 operates continuous monitoring of its systems for signs of unauthorised access, unusual traffic patterns, and potential security incidents.
• Data Backups: Regular encrypted backups are maintained to ensure data can be recovered in the event of accidental loss or system failure.

7.2 Organisational Safeguards

• All acee365 staff members who handle personal data are subject to confidentiality obligations and receive regular data protection training.
• Third-party service providers who process personal data on acee365's behalf are assessed for security standards before engagement and are bound by data processing agreements that include security requirements.
• acee365 maintains an incident response plan to ensure that any data breach is identified, contained, and reported to affected players and relevant authorities promptly.

7.3 Your Role in Account Security

While acee365 takes extensive steps to protect your data, the security of your account also depends on actions you take. You are responsible for keeping your login credentials confidential, using a strong and unique password, logging out of your account on shared devices, and notifying acee365 immediately if you suspect that your account has been compromised. acee365 will never ask for your password via email, live chat, or any other channel — any message requesting your password is fraudulent.

8 Policy Updates and How to Contact Us

acee365 reviews this Privacy Policy at least annually and whenever a material change to our data practices occurs. When we make a significant update — such as adding a new category of data collection, changing the purposes for which data is used, or engaging a new category of third-party processor — we will notify registered players via email and display a prominent notice on the platform for at least 30 days following the update.

Minor updates, such as clarifications to existing language, corrections of typographical errors, or administrative changes that do not affect your rights, may be made without individual notification. The effective date at the top of this policy will always reflect when the most recent version was published. The current version of this Privacy Policy is always available at acee365.net/privacy-policy.

By continuing to use the acee365 platform after a Privacy Policy update has been published, you acknowledge the revised policy. If you do not agree with any material changes, you should cease using the platform and contact our support team to request account closure and a data export if desired.

8.1 Contact Our Data Team

For all privacy-related enquiries, data rights requests, or concerns about how acee365 handles your personal data, our dedicated data support team is available 24 hours a day, 7 days a week (BST, UTC+6). You may reach us by the following means:

• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available on the acee365 platform at all times — our agents provide support in both English and Bengali
• Response Time: We aim to acknowledge all privacy enquiries within 24 hours and to provide a full response within 30 days

acee365 takes all privacy concerns seriously. If you are not satisfied with the outcome of your enquiry or data rights request, you may escalate the matter by re-contacting our support team and requesting that your case be reviewed by a senior member of the data team. Our goal is to resolve all privacy concerns fairly and transparently, without the need for external escalation.