365 Ace Privacy Policy

1Information We Collect

When you use 365 Ace, we collect certain personal information to operate your account, process transactions, and keep the platform secure. We only collect what we genuinely need — nothing extra. The types of information we collect fall into three categories.

Information you give us directly:

• Full legal name and date of birth (required for account registration and age verification).
• Email address and mobile phone number (used for account communication and two-factor authentication).
• Payment details including bKash, Nagad, or Rocket account numbers (used solely for processing deposits and withdrawals).
• Identity documents such as a National ID card or passport (requested when verifying your account or processing large withdrawals).
• Any information you provide when contacting our support team via live chat or email.

Information collected automatically:

• IP address and approximate geographic location (used for fraud detection and regulatory compliance).
• Device type, operating system, and browser version (used to optimise platform performance).
• Pages visited, games played, session duration, and betting activity (used to improve the platform and detect unusual behaviour).
• Login timestamps and access logs (used for security monitoring).

Information from third parties:

• Identity verification results from our KYC (Know Your Customer) service providers.
• Payment confirmation data from bKash, Nagad, Rocket, and banking partners.
• Fraud risk scores from our payment security partners.

2How We Use Your Data

Every piece of data 365 Ace collects has a specific, legitimate purpose. We do not use your data for anything beyond what is described below. Here is a clear breakdown of how your information is used on the platform.

3Legal Basis for Processing

365 Ace processes your personal data on the following legal grounds, depending on the purpose of the processing:

• Contract performance: Processing your registration details, payments, and account management is necessary to fulfil our contract with you as a player.
• Legal obligation: Identity verification, anti-money laundering checks, and transaction record-keeping are required by applicable laws and regulations.
• Legitimate interests: Fraud detection, security monitoring, and platform analytics are carried out in the legitimate interests of 365 Ace and its players, provided these interests do not override your rights.
• Consent: Marketing communications are sent only where you have given your consent, which you may withdraw at any time.

4Data Sharing

365 Ace does not sell your personal data. We share your information only in the limited circumstances described below, and only with parties who are contractually required to handle it securely and in accordance with this Privacy Policy.

• Payment processors: bKash, Nagad, Rocket, and banking partners receive only the payment information necessary to process your transactions.
• Identity verification providers: Our KYC partners receive identity documents and verification data solely for the purpose of confirming your identity.
• Fraud prevention services: Anonymised risk signals may be shared with security partners to detect and prevent fraudulent activity.
• Legal authorities: We may disclose your data to law enforcement or regulatory bodies when required to do so by law, court order, or to protect the rights and safety of 365 Ace and its players.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

5Cookies and Tracking

365 Ace uses cookies and similar tracking technologies to keep the platform running smoothly and to understand how players use the site. Here is a breakdown of the types of cookies we use.

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security tokens that protect your account. These cannot be disabled without breaking core functionality.
• Preference cookies: Remember your settings such as language preference, display options, and notification choices so you don't have to set them every time you visit.
• Analytics cookies: Help us understand which pages and games are most popular, how long players spend on the platform, and where technical issues occur. This data is aggregated and anonymised.

365 Ace does not use third-party advertising cookies or cross-site tracking technologies. You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies may affect your ability to use the platform.

6Data Retention

365 Ace retains your personal data only for as long as it is necessary for the purposes described in this Privacy Policy, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your account and for a period of 5 years after account closure, in line with standard financial record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years to comply with anti-money laundering regulations.
• Identity verification documents: Retained for the duration of your account and up to 5 years after closure.
• Support communications: Retained for 2 years after the last interaction, unless the matter relates to an ongoing dispute or legal proceeding.
• Analytics data: Anonymised after 12 months and retained indefinitely in aggregated form only.

When data is no longer required, it is securely deleted using industry-standard data destruction methods. Anonymised or aggregated data that cannot be linked back to you may be retained indefinitely for statistical purposes.

7Your Rights

As a 365 Ace player, you have the following rights over your personal data. To exercise any of these rights, contact our support team via live chat or email and we will respond within a reasonable timeframe.

• Right of access: You can request a copy of all personal data we hold about you at any time.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you can ask us to correct it.
• Right to erasure: You can request that we delete your personal data, subject to our legal retention obligations. Note that we may be required to retain certain records even after account closure.
• Right to restrict processing: You can ask us to limit how we use your data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: You can request your personal data in a structured, machine-readable format so you can transfer it to another service.
• Right to object: You can object to processing based on legitimate interests, including profiling for fraud detection purposes, though this may affect our ability to maintain your account.
• Right to withdraw consent: Where processing is based on your consent (such as marketing emails), you can withdraw that consent at any time without affecting the lawfulness of prior processing.

8Security Measures

365 Ace takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, or misuse.

• All data transmitted between your device and 365 Ace is encrypted using TLS 1.3 or higher.
• Stored data is encrypted at rest using AES-256 encryption.
• Access to personal data within 365 Ace is restricted to authorised personnel on a strict need-to-know basis.
• All staff with access to personal data undergo regular privacy and security training.
• The platform is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous behaviour.
• Regular security audits and penetration testing are conducted by independent third parties.
• Two-factor authentication is available for all player accounts and is strongly recommended.

9Policy Updates

365 Ace may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, the "Last Updated" date at the top of this page will be revised.

For significant changes that materially affect how we use your personal data, we will notify you via your registered email address or through a prominent notice on the platform before the changes take effect. Your continued use of 365 Ace after any update constitutes your acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy or how 365 Ace handles your personal data, please contact our support team via live chat, available 24 hours a day, 7 days a week. You can also review our Terms and Conditions for the full legal framework governing your use of the platform.