ace78 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

Introduction

This Privacy Policy ("Policy") sets out the basis on which ace78 ("ace78", "we", "us", "our") collects, processes, stores, and shares personal data obtained from users ("Player", "User", "you") of the ace78 website at ace78.io and all associated services, including the casino games library, sportsbook, promotional offers, live dealer rooms, and customer support channels.

ace78 is committed to handling your personal data with transparency, care, and respect. We recognise that players in Bangladesh entrust us with sensitive information when they register, deposit, and play on our platform. This Policy explains how that trust is honoured. By accessing or using the ace78 platform, you acknowledge that you have read and understood this Privacy Policy in its entirety.

This Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between you and ace78. In the event of any conflict between this Policy and the Terms & Conditions on privacy-related matters, this Policy shall prevail.

Data Controller

For the purposes of this Privacy Policy, ace78 acts as the data controller in respect of all personal data collected through the ace78.io platform. As data controller, ace78 determines the purposes and means by which personal data is processed. All data processing activities carried out by ace78 are conducted in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

If you have any questions or concerns about how ace78 processes your personal data, you may contact our Data Protection team directly. Contact details are provided in Section 16 of this Policy.

Data We Collect

ace78 collects the following categories of personal data from players registered on the platform:

3.1 Identity and Account Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Username and encrypted password.
• Profile photograph (where submitted as part of KYC verification).
• Government-issued identity document number (National ID, passport, or driving licence).

3.2 Contact Data

• Email address.
• Mobile telephone number.
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other), and country.

3.3 Financial Data

• Payment method details, including bKash account number, Nagad account number, Rocket account number, Upay account number, or masked Visa/Mastercard card number.
• Transaction history, including deposit amounts, withdrawal requests, bonus credits, and wagering activity, all denominated in Bangladeshi Taka (BDT).
• Source of funds documentation (where requested as part of AML compliance).

3.4 Technical and Device Data

• IP address at the time of registration and each subsequent login.
• Device type, operating system, and browser type and version.
• Time zone and locale settings.
• Session duration and navigation patterns within the ace78 platform.

3.5 Behavioural and Gaming Data

• Games played, bet sizes, win and loss records, and session lengths.
• Sports betting selections, odds accepted, and outcomes.
• Responsible gaming tool usage (deposit limits set, cooling-off periods requested, self-exclusion history).

3.6 Communications Data

• Records of correspondence between you and ace78 customer support.
• Feedback, complaints, and dispute submissions.
• Email and SMS marketing preferences and opt-in/opt-out history.

How We Collect Your Data

ace78 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

Data provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or respond to a survey or feedback request.

4.2 Automated Collection

Data collected automatically when you interact with the ace78 platform, including through cookies, web beacons, pixel tags, log files, and similar tracking technologies. This includes IP address, device identifiers, browser fingerprint, pages visited, and time spent on each page. Please refer to Section 8 (Cookies & Tracking) for full details.

4.3 Third-Party Sources

Data received from trusted third parties in the following circumstances:

• Identity verification agencies engaged to confirm the authenticity of KYC documents.
• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming transaction status.
• Fraud detection and anti-money laundering screening services.
• Game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) sharing game session data for dispute resolution purposes.

How We Use Your Data

ace78 processes personal data for the following specific and documented purposes:

ace78 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for doing so.

Legal Basis for Processing

ace78 relies on the following legal bases for processing your personal data:

• Contract performance: Processing is necessary to fulfil the contractual agreement between you and ace78 — including account management, payment processing, and game delivery.
• Legal obligation: Processing is required to comply with applicable laws, including anti-money laundering (AML) regulations, fraud prevention requirements, and age verification obligations.
• Legitimate interests: Processing is necessary for ace78's legitimate business interests, including platform security, fraud detection, responsible gaming monitoring, and service improvement, provided these interests are not overridden by your rights and interests.
• Consent: Where processing is based on your consent — principally for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact ace78 support or update your communication preferences within your account settings.

Data Sharing & Disclosure

ace78 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties strictly where necessary and under appropriate data-sharing agreements:

7.1 Service Providers

Third-party service providers engaged to support platform operations, including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification agencies, fraud screening services, cloud hosting providers, and IT security firms. All service providers are contractually obligated to process your data only on ace78's instructions and to maintain appropriate security standards.

7.2 Game Providers

Licensed game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session data (player ID, bet amounts, game outcome) for the purpose of game integrity auditing, dispute resolution, and regulatory reporting. Game providers do not receive your full identity or financial data.

7.3 Legal and Regulatory Authorities

ace78 may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where required by law, in response to a valid legal order, or where necessary to protect the rights, safety, or property of ace78 or third parties.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ace78's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and your rights under this Policy will be maintained.

Cookies & Tracking Technologies

ace78 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit ace78.io. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function, including maintaining your login session, remembering your language preference, and securing your account. These cookies cannot be disabled.
• Performance cookies: Collect anonymised data about how players use the platform (pages visited, errors encountered, load times) to help ace78 improve service quality.
• Functional cookies: Remember your preferences such as game settings, responsible gaming limits you have set, and display choices so that you do not have to re-enter them on each visit.
• Analytics cookies: Used by ace78's internal analytics systems to understand aggregate player behaviour, identify popular games, and measure the effectiveness of promotional campaigns.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the ace78 platform, including the ability to maintain a logged-in session. ace78 does not use third-party advertising cookies or cross-site tracking technologies.

Data Retention

ace78 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active account data: Retained for the duration of your account registration and for a minimum of five years following account closure.
• Financial transaction records: Retained for a minimum of seven years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years following account closure or the date of the last transaction, whichever is later.
• Customer support communications: Retained for three years from the date of the last interaction.
• Marketing consent records: Retained for the duration of the marketing relationship and for two years following any withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where data is retained solely for legal compliance purposes, access will be strictly limited to authorised personnel.

Data Security

ace78 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the ace78 platform.
• Encryption at rest for all personally identifiable information and financial records stored in ace78's databases.
• Role-based access controls ensuring that only authorised personnel can access sensitive player data, and only to the extent required by their job function.
• Regular penetration testing and security audits conducted by independent cybersecurity professionals.
• Two-factor authentication options available to all registered players for account login.
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity for human review.

While ace78 takes every reasonable precaution to protect your data, no system connected to the internet can be guaranteed to be completely secure. In the event of a data breach that poses a risk to your rights and freedoms, ace78 will notify affected players without undue delay and take all reasonable steps to mitigate harm.

Your Rights Over Your Personal Data

Subject to applicable law, you hold the following rights in respect of your personal data held by ace78:

• Right of access: You may request a copy of the personal data ace78 holds about you at any time. We will respond to such requests within 30 days.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. Minor details such as contact information can often be updated directly within your account settings.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that this right is subject to legal retention obligations — ace78 cannot delete financial or identity records that must be retained for regulatory compliance purposes.
• Right to restriction: You may request that processing of your data be restricted in specific circumstances, for example while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or a contract, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to ace78 demonstrating compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting prior processing.

To exercise any of the above rights, please contact the ace78 Data Protection team at the address provided in Section 16. We may need to verify your identity before processing certain requests. Requests will be handled within 30 days; complex requests may take up to 60 days, in which case we will notify you of the extended timeline.

Children's Privacy

The ace78 platform is strictly intended for adults aged 21 years and older. ace78 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted at the point of registration, and accounts found to be held by underage individuals are immediately closed, with all data securely deleted except where retention is required by law.

If you believe that ace78 has inadvertently collected data from a person under the age of 21, please notify us immediately at the contact details provided in Section 16 so that we may take prompt corrective action.

International Data Transfers

ace78 operates on an offshore basis and, as a result, your personal data may be processed and stored on servers located in jurisdictions outside Bangladesh. Where data is transferred internationally, ace78 ensures that appropriate safeguards are in place to maintain a standard of data protection equivalent to that described in this Policy. These safeguards may include standard contractual clauses, data processing agreements, or transfers to jurisdictions that maintain recognised data protection frameworks.

By registering an account with ace78 and submitting your personal data, you acknowledge and consent to the transfer of your data to servers and processors outside your country of residence for the purposes described in this Policy.

Third-Party Links

The ace78 platform may contain references to or brief integrations with third-party game providers whose software operates within the ace78 gaming environment. While ace78 carefully selects its game provider partners, we do not control the privacy practices of external studios or payment processors. This Privacy Policy applies solely to data collected and processed directly by ace78 through the ace78.io platform. We encourage you to review the privacy policies of any third-party service you interact with.

Changes to This Privacy Policy

ace78 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material, we will notify registered players via email or a prominent notice on the ace78 platform prior to the changes taking effect. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

Your continued use of the ace78 platform following publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any amendment, please cease using the platform and contact support to close your account.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ace78 handles your personal data, please contact our Data Protection team. We aim to acknowledge all privacy-related enquiries within 24 hours and resolve them within 30 days.

Data Protection Contact: [email protected]

Please include "Privacy Request" in your subject line and provide your registered account username so that we can locate your records efficiently. ace78 support is available 24 hours a day, 7 days a week, and is staffed by English-language agents familiar with the needs of our Bangladesh player base.