ace355 Privacy Policy

1 Who We Are and How to Contact Us

ace355 operates the online casino and sports betting platform accessible at ace355.ws, serving registered players across Bangladesh. For all privacy-related enquiries, requests, or complaints, please contact our dedicated data team using the details below. All contact information is provided as plain text — please copy the address manually.

• Contact Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)
• Response Time: Privacy requests are acknowledged within 24 hours and resolved within 30 calendar days

When contacting us about a privacy matter, please include your registered username and a brief description of your request so we can locate your account records promptly.

2 What Personal Data We Collect

ace355 collects personal data in several categories depending on how you interact with the platform. The categories below represent the full scope of data we may hold about you:

Registration Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify the 21+ age requirement)
• Registered mobile number (used for account communications and mobile wallet linking)
• Email address (used for account notifications and formal correspondence)
• Preferred username and hashed password (passwords are never stored in plain text)
• City and district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)

Identity Verification (KYC) Data

• Scanned copy or photograph of your Bangladesh National Identity Card (NID), both sides
• Selfie photograph taken for liveness verification at the time of KYC submission
• Proof of payment method — screenshot or confirmation linking your bKash, Nagad, or Rocket wallet, or bank account, to your registered name
• Source of funds declaration, where requested for enhanced due diligence

Financial Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• Transaction IDs provided by bKash, Nagad, Rocket, Upay, or participating banks including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank
• Running account balance and transaction history

Gaming Activity Data

• Games played, bet amounts, win/loss records, and session durations
• Sports betting selections, odds accepted, and settlement outcomes
• Bonus usage history, including which promotions were claimed and their wagering progress

Technical and Device Data

• IP address at the time of registration and each subsequent login
• Device type, operating system version, and browser type
• Session timestamps and duration of platform use
• Cookie and local storage identifiers (see Section 9 — Cookies)

Communications Data

• Records of all support interactions, including chat transcripts and emails
• Complaint and dispute records
• Voluntary survey or feedback responses

3 How We Use Your Personal Data

ace355 processes your personal data only for the specific, declared purposes listed below. We do not use your data for any purpose incompatible with those stated at the time of collection.

• Account Management: To create, maintain, and secure your player account, including processing deposits and withdrawals in Bangladeshi Taka (BDT) and communicating account-related information to you.
• Identity Verification: To verify your age (21+), identity, and the ownership of payment methods under our KYC obligations and anti-money laundering (AML) procedures.
• Service Delivery: To provide access to casino games, sports betting markets, crash games, live dealer tables, and all other platform features.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct on the platform.
• Legal and Regulatory Compliance: To meet our obligations under applicable laws, including responding to lawful requests from competent authorities and retaining records for the required statutory periods.
• Responsible Gaming: To monitor gaming patterns and intervene proactively where activity indicators suggest problem gambling behaviour, including applying self-exclusion or cooling-off restrictions as requested by the player.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve platform performance, fix technical issues, and optimise the player experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about new games or features — but only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time via your account settings or by contacting support.
• Dispute Resolution: To maintain records sufficient to investigate and resolve player disputes, chargebacks, or complaints in a fair and evidence-based manner.

4 Legal Basis for Processing

ace355 processes your personal data on the following legal bases, each of which applies to the corresponding purpose described in Section 3:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered player — including account operation, game access, and payment processing.
• Legal Obligation: Processing is required to comply with applicable laws, including KYC verification, AML reporting, and the retention of financial records.
• Legitimate Interests: Processing is necessary for our legitimate interests in preventing fraud, maintaining platform security, and improving our services — provided those interests are not overridden by your rights and freedoms.
• Consent: Where processing is based on consent (primarily for direct marketing communications), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

5 How We Share Your Data

ace355 does not sell, rent, or trade your personal data. We share data with third parties only in the following limited and controlled circumstances:

• Game Providers: Providers such as Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, and Spribe receive session tokens and player identifiers necessary to deliver game content. They do not receive your full identity documents or payment details.
• Payment Processors: bKash, Nagad, Rocket, Upay, and participating bank partners receive transaction data necessary to process deposits and withdrawals. ace355 does not store full payment credentials — these are handled directly by the payment provider.
• KYC and Verification Partners: Accredited third-party identity verification services may receive your KYC documents for automated or manual review. These partners are contractually bound to handle your data in accordance with this Policy and applicable data protection standards.
• Legal Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of ace355, its players, or the public.
• Corporate Transactions: In the event of a merger, acquisition, or transfer of all or substantially all of the assets of ace355, your personal data may be transferred to the relevant successor entity, subject to the same protections as described in this Policy.

6 Data Retention

ace355 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following standard retention periods apply:

• Active Account Data: Retained for the full duration of your account registration plus a minimum of 5 years after account closure, to meet financial record-keeping and AML obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Support Communications: Retained for 3 years from the date of the last interaction, or longer where a dispute remains unresolved.
• Marketing Consent Records: Retained for the period during which consent is active, plus 1 year after withdrawal of consent as evidence of the lawful basis for any communications sent during the active period.
• Technical Logs: Retained for up to 12 months for security and fraud detection purposes, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

7 Your Data Rights

As a player on ace355, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 calendar days of receiving a valid request.

• 📄

  Right of Access

  You may request a copy of all personal data ace355 holds about you, along with information about how it is being processed.

• ✏️

  Right to Rectification

  If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.

• 🗑️

  Right to Erasure

  You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.

• ⏸️

  Right to Restriction

  You may ask us to restrict processing of your data in certain circumstances, such as while a dispute regarding its accuracy is being resolved.

• 📦

  Right to Portability

  Where processing is based on your consent or on contract performance, you may request a copy of your data in a structured, machine-readable format.

• 🙅

  Right to Object

  You may object to processing based on legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

8 Data Security Measures

ace355 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and ace355 servers is encrypted using industry-standard SSL/TLS protocols.
• AES-256 Storage Encryption: Sensitive data stored at rest, including KYC documents and financial records, is encrypted using AES-256.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to player data undergo background checks and regular data protection training.
• Intrusion Detection: Our infrastructure is monitored continuously for anomalous activity, attempted intrusions, and suspicious access patterns.
• Regular Security Audits: ace355 conducts periodic internal security reviews and engages independent specialists to perform external penetration tests on critical systems.
• Data Breach Response: In the unlikely event of a data breach affecting your personal data, ace355 will notify you and any relevant authorities within 72 hours of becoming aware of the incident, where legally required.

9 Cookies and Tracking Technologies

ace355 uses cookies and similar tracking technologies to operate the platform, improve your experience, and maintain session security. The types of cookies used are as follows:

• Essential Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection identifiers, and load-balancing cookies. These cannot be disabled without breaking platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language setting or game lobby filter, so you do not need to reconfigure them on each visit.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the platform — for example, which pages are most visited or where players exit the registration flow. This data is used exclusively to improve platform design and performance.
• Security Cookies: Used to detect and prevent fraudulent activity, including identifying multiple accounts originating from the same device or IP address.

ace355 does not use third-party advertising cookies or tracking pixels. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impair your ability to log in or use the platform normally.

10 Children and Minors

ace355 is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 21. All registration attempts require a declaration of age, and KYC verification is used to confirm this. If ace355 discovers that an account has been registered by a person under 21 years of age, the account will be closed immediately, all data held in relation to that account will be deleted as soon as the retention period permits, and any deposited funds will be returned to the originating payment method.

If you are a parent or guardian and believe that a minor has registered on ace355 without your knowledge, please contact us immediately at [email protected]. We will treat such reports as a priority and act within 24 hours.

11 International Data Transfers

ace355 serves players in Bangladesh and processes the majority of data within infrastructure located in or proximate to the Asia-Pacific region. Where data is transferred to or processed by third-party partners (such as game providers or KYC verification services) whose infrastructure may be located outside Bangladesh, ace355 ensures that appropriate contractual safeguards are in place — including data processing agreements that require the recipient to maintain data protection standards equivalent to those described in this Policy.

ace355 does not transfer player data to jurisdictions without adequate data protection frameworks unless specific contractual protections are in place and documented.

12 Changes to This Privacy Policy

ace355 may update this Privacy Policy periodically to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will:

• Update the "Effective Date" at the top of this page
• Display a prominent notice to logged-in players at their next session following the update
• Where required by law, seek fresh consent for any new processing activities introduced by the update

Your continued use of the ace355 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically so that you remain informed of how we protect your data.