Privacy Policy for ace456

This Privacy Policy ("Policy") describes how ace456 ("we", "us", "our") collects, processes, stores, and protects personal data belonging to individuals who visit, register on, or otherwise interact with the ace456 platform at ace456.club ("the Platform"). This Policy forms part of the overall agreement between ace456 and its players alongside the Terms & Conditions and the Responsible Gaming Policy.

By registering an account or using the ace456 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not register an account or continue using the Services.

Section 1

Information We Collect

ace456 collects personal data from players through three primary channels: data you provide directly, data generated automatically through your use of the platform, and data received from third-party payment and identity verification services. The following table summarises each category.

Data we do not collect: ace456 does not collect biometric data beyond what is required for document verification liveness checks, does not store full payment card numbers on our servers, and does not collect data relating to your religious beliefs, political opinions, health status, or other special categories of sensitive personal data.

Minors: ace456 does not knowingly collect personal data from individuals under the age of 18. If we become aware that data has been collected from an underage individual, that data will be deleted and the associated account closed immediately. See our Terms & Conditions for our age verification policy.

Section 2

How We Use Your Data

ace456 processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use your data, together with the corresponding lawful basis, are set out below.

• Account creation and management: We use your Identity Data and Contact Data to create and maintain your player account, authenticate your logins, and communicate account-related notifications such as password resets and deposit confirmations. Lawful basis: contractual necessity.
• Payment processing: We share your Financial Data with payment processors (bKash, Nagad, Rocket, Upay) solely to facilitate deposits and withdrawals. We retain transaction records to resolve payment disputes and to comply with financial record-keeping obligations. Lawful basis: contractual necessity and legal obligation.
• Identity verification (KYC): We use your Identity Data and KYC Documentation to verify your age, confirm your identity, and ensure compliance with our responsible gaming obligations. Lawful basis: legal obligation and legitimate interests.
• Responsible gaming and fraud prevention: We analyse your Gaming Activity Data and Technical Data to identify patterns consistent with problem gambling behaviour, to enforce deposit and loss limits, and to detect and prevent fraud, money laundering, and other prohibited activities. Lawful basis: legitimate interests and legal obligation.
• Platform improvement: We use aggregated and anonymised Technical Data and Gaming Activity Data to understand how players interact with the platform, to identify technical errors, and to improve game offerings and user experience. Lawful basis: legitimate interests.
• Marketing and promotional communications: Where you have opted in to receive marketing communications, we use your Contact Data to send you information about promotions, bonuses, seasonal offers (including Eid, Pohela Boishakh, BPL season, and T20 World Cup campaigns), and new game launches. You may opt out of marketing communications at any time. Lawful basis: consent.
• Customer support: We use your Communications Data to respond to your enquiries, resolve disputes, and provide technical assistance. Support communications are retained to ensure continuity of service and for quality assurance purposes. Lawful basis: contractual necessity and legitimate interests.
• Legal compliance: We may process and disclose your data where required by applicable law, court order, or the instruction of a competent regulatory or law enforcement authority. Lawful basis: legal obligation.

Section 3

Data Sharing & Disclosure

ace456 does not sell, rent, or otherwise commercially exploit your personal data. We share data with third parties only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

Payment processors: To execute deposits and withdrawals, we share relevant Financial Data and identity confirmation with your chosen payment provider — bKash, Nagad, Rocket, or Upay. These providers are independent data controllers in respect of their own services and operate under their own privacy policies. ace456 shares only the minimum data required to complete the transaction.

Identity verification providers: We may use third-party identity verification services to assist with KYC document checks and liveness detection. These providers process your KYC Documentation solely for the purpose of verification and are contractually prohibited from using your data for any other purpose.

Game studios: Games provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners are delivered via their respective platforms. These studios may process limited Technical Data (such as session tokens and bet data) to deliver the game experience. No personally identifying information beyond what is technically required for game delivery is shared with game studios.

Fraud prevention and security services: We may share Technical Data (such as IP addresses and device fingerprints) with fraud detection services to identify and prevent unauthorised access, bonus abuse, and financial crime. These services act as data processors under contract with ace456.

Legal and regulatory disclosure: ace456 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, by a valid court order, or to protect the legal rights and interests of ace456 or its players. We will notify you of any such disclosure where we are legally permitted to do so.

Business transfers: In the event of a merger, acquisition, or sale of all or part of ace456's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified in advance of any such transfer and of any material changes to how your data will be processed.

Section 4

Cookies & Tracking Technologies

ace456 uses cookies and similar technologies to operate the platform, maintain session security, and analyse overall platform performance. This section explains what cookies we use and how you can manage them.

What is a cookie? A cookie is a small text file that a website stores on your browser or device when you visit. Cookies allow the site to remember information about your session — such as your login state — so that you do not need to re-authenticate on every page load.

What we do NOT use: ace456 does not deploy advertising cookies, behavioural tracking pixels, cross-site tracking scripts, or social media tracking widgets on any page of the platform.

Managing cookies: You can configure your browser to block or delete cookies at any time. Note that disabling strictly necessary cookies will prevent you from logging in and using the platform. Instructions for managing cookies in common browsers (Chrome, Firefox, Samsung Internet, Opera Mini) are available in each browser's help documentation.

Local storage: In addition to cookies, ace456 may use browser local storage to retain lightweight session data (such as your active game state) between page reloads. Local storage data is not transmitted to our servers in the same way as cookies but is subject to the same access controls and retention limits.

Section 5

Data Retention

ace456 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected. Once a retention period expires, data is securely deleted or anonymised so that it can no longer be linked back to an individual. The following retention periods apply.

Where a player requests deletion of their account and there is no outstanding legal obligation requiring retention, ace456 will delete or anonymise the player's personal data within thirty days of the closure request being confirmed.

In cases where an account is under active investigation for fraud, bonus abuse, money laundering, or any other suspected violation of our Terms, data relevant to the investigation will be retained until the investigation is concluded, regardless of the standard retention period.

Section 6

Data Security

The security of your personal data is a core operational priority for ace456. We implement a layered set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

Encryption in transit: All data transmitted between your browser and ace456 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This ensures that your login credentials, payment information, and personal details cannot be intercepted during transmission.

Encryption at rest: Sensitive data stored in ace456 databases — including KYC documentation, identity records, and financial transaction data — is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel with role-based access controls.

Access controls: Access to systems holding personal data is granted on a strict need-to-know basis. All staff with access to player data undergo background screening and are contractually bound by confidentiality obligations. Multi-factor authentication is enforced for all internal system access.

Fraud monitoring: ace456 operates real-time automated monitoring systems that detect unusual account activity — including logins from unrecognised locations, abnormal transaction patterns, and signs of account takeover. Suspicious activity triggers an immediate review and, where necessary, temporary account restriction to protect the player.

Incident response: In the event of a data breach that poses a risk to the rights and freedoms of players, ace456 will notify affected individuals promptly with details of the nature of the breach, the data involved, and the steps taken to contain it.

Your responsibilities: While ace456 takes every reasonable measure to protect your data, the security of your account is also your responsibility. You must keep your password confidential, use a strong unique password, and contact support immediately if you believe your account credentials have been compromised.

Section 7

Your Privacy Rights

ace456 respects your rights over your personal data. Regardless of your location within Bangladesh, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, contact our support team using the email address in the footer.

• Right of access: You have the right to request a copy of all personal data ace456 holds about you. We will provide this in a structured, readable format within a reasonable timeframe (typically within 30 days of receiving your request). A request for access is free of charge for the first request in any 12-month period.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain details (such as your contact number or address) directly via your account settings or by contacting support.
• Right to erasure: You may request that ace456 delete your personal data. We will honour such requests where there is no overriding legal or contractual obligation to retain the data. Where deletion is not possible in full (e.g., we are legally required to retain transaction records), we will inform you of the specific reason and delete all other data not subject to the legal hold.
• Right to restrict processing: You may request that ace456 pause the processing of your personal data in certain circumstances — for example, while a correction request is being verified, or where you dispute the lawfulness of processing.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a portable machine-readable format (e.g., CSV or JSON) for transfer to another service provider.
• Right to object to marketing: You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Once you object, we will cease all marketing processing immediately and update our preference records accordingly.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

ace456 will respond to all valid privacy rights requests within 30 days of receipt. In complex cases, we may require an additional 30-day extension, in which case we will notify you and explain the reason for the delay.

If you are not satisfied with how ace456 has handled your personal data or responded to a privacy rights request, you have the right to raise a complaint with us directly before escalating to any applicable regulatory authority.

Section 8

Contact & Data Officer

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a data protection concern, please contact the ace456 data team using the details below.

Email: [email protected] (plain text — not a clickable link)

Subject line guidance: To ensure your request is routed to the correct team promptly, please use one of the following subject lines in your email:

• "Privacy Rights Request — [Your Username]" — for access, rectification, erasure, portability, or restriction requests.
• "Marketing Opt-Out — [Your Username]" — to withdraw consent for marketing communications.
• "Data Concern — [Your Username]" — for general data protection questions or complaints.
• "Security Incident — [Your Username]" — to report a suspected account compromise or phishing attempt.

Our team operates during Bangladesh Standard Time (BST, UTC+6) business hours, Monday to Saturday. We aim to send an initial acknowledgement within one business day and to resolve all requests within 30 days.

Policy updates: ace456 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material updates will be communicated to registered players via the contact details on their account. The effective date at the top of this page will be updated to reflect the date of the most recent revision. Continued use of the platform following notification of a policy update constitutes acceptance of the revised Policy.