Privacy Policy — ace76

1 Who We Are

ace76 is an online casino and sports betting platform accessible at ace76.io, serving players primarily located in Bangladesh. References to "ace76", "we", "us", or "our" in this Privacy Policy refer to the operator of the ace76 platform.

ace76 acts as the data controller in respect of the personal data of registered players and website visitors. As data controller, ace76 determines the purposes and means by which personal data is processed on this platform.

2 Scope of This Policy

This Privacy Policy applies to all personal data processed by ace76 in connection with:

• Registration and maintenance of a player account on ace76.io
• Use of any game, betting market, or feature on the platform
• Deposits, withdrawals, and payment transactions via bKash, Nagad, Rocket, Upay, or bank transfer
• Identity verification (KYC) and responsible gaming processes
• Customer support communications via live chat, WhatsApp, or email
• Browsing activity on ace76.io collected through cookies and analytics tools

This Policy does not apply to third-party websites or services that may be linked from the ace76 platform. ace76 is not responsible for the privacy practices of those third parties.

3 Data We Collect

ace76 collects the following categories of personal data:

ace76 does not collect or store full payment card numbers. Card payment processing, where applicable, is handled entirely by PCI-DSS-compliant third-party payment processors who do not share full card details with ace76.

4 How We Use Your Data

ace76 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your ace76 account, including processing login credentials and managing account preferences.
• Identity Verification: To verify your identity and age (21+ requirement) as part of our KYC process, and to prevent fraud, identity theft, and underage gambling.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate financial records.
• Service Delivery: To provide access to casino games, sports betting markets, live casino tables, fishing games, slot games, and all other platform features.
• Customer Support: To respond to enquiries, resolve complaints, and provide assistance via live chat, WhatsApp, and email.
• Responsible Gaming: To monitor gambling behaviour and intervene where patterns suggest a player may be experiencing gambling-related harm, and to administer self-exclusion and deposit limit tools.
• Legal Compliance: To comply with anti-money laundering (AML) obligations, financial reporting requirements, and any other applicable legal or regulatory obligations.
• Security and Fraud Prevention: To detect and prevent unauthorised access, bot activity, collusion, match-fixing, bonus abuse, and other prohibited activities.
• Platform Improvement: To analyse usage patterns and technical performance data in order to improve the platform, fix bugs, and enhance the player experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent to receive such communications. You may opt out at any time.

5 Legal Bases for Processing

ace76 processes your personal data under the following legal bases:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a registered player — including account management, game access, and payment processing.
• Legal Obligation: Processing necessary to comply with anti-money laundering laws, age verification requirements, financial record-keeping obligations, and other applicable legal duties.
• Legitimate Interests: Processing carried out for ace76's legitimate business interests, including fraud prevention, security monitoring, responsible gaming enforcement, and platform improvement — provided those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional analytics features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Data

ace76 does not sell your personal data. We share data only with the categories of third parties listed below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — to process deposits and withdrawals. These providers receive only the data necessary to execute the transaction.
• Identity Verification Providers: Third-party KYC and age-verification services that assist ace76 in fulfilling its legal obligation to verify player identities.
• Game Technology Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who provide the game engines and live dealer technology. These providers may process session-level data for game integrity and fairness monitoring.
• IT and Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity vendors who support the technical operation of the ace76 platform under strict data processing agreements.
• Legal and Regulatory Bodies: Where ace76 is required by law to disclose personal data to a competent authority, court, or law enforcement body, we will do so in compliance with applicable legal requirements.

All third-party data processors engaged by ace76 are contractually required to process personal data only on ace76's documented instructions, to maintain appropriate security standards, and not to sub-process data without ace76's prior written authorisation.

7 International Data Transfers

Some of ace76's third-party service providers operate outside Bangladesh. Where personal data is transferred to processors or sub-processors located in other countries, ace76 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Safeguards used for international transfers include contractual data processing agreements incorporating standard data protection clauses, and selection of processors who maintain internationally recognised security certifications such as ISO 27001 or SOC 2 Type II.

If you would like more information about the specific safeguards applicable to any particular international transfer of your data, please contact ace76 at [email protected].

8 Cookies and Tracking Technologies

ace76 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and analyse how the platform is used. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. They maintain your login session, remember your language preference, and enable secure payment pages. These cookies cannot be disabled.
• Performance and Analytics Cookies: Collect anonymised data about how visitors use ace76.io — including pages visited, time spent, and error messages — to help us improve the platform. These are only placed with your consent.
• Functionality Cookies: Remember choices you make (such as game display preferences or notification settings) to provide a more personalised experience.
• Fraud Prevention Cookies: Help ace76 identify and prevent unauthorised access, bot activity, and duplicate account creation by associating your browser session with security tokens.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of some platform features. ace76 does not use third-party advertising or retargeting cookies.

9 Data Retention

ace76 retains personal data for the following periods:

• Active Account Data: Retained for the duration of the account relationship and for five (5) years following account closure, to meet financial record-keeping and anti-money laundering obligations.
• KYC and Identity Documents: Retained for five (5) years from the date of submission or account closure, whichever is later, in line with standard financial compliance requirements.
• Transaction Records: Retained for five (5) years from the date of each transaction.
• Customer Support Communications: Retained for two (2) years from the date of the communication, unless the communication forms part of an ongoing dispute or legal matter.
• Marketing Consent Records: Retained for the duration of the consent and for one (1) year thereafter as evidence of consent.
• Technical and Usage Data: Retained in aggregated, anonymised form indefinitely for platform improvement purposes. Raw session logs are retained for ninety (90) days.

Where data is no longer required for any of the above purposes, it is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and research purposes.

10 Your Rights

As described in the "Your Data Rights" section above, you have the right to access, correct, delete, restrict, and port your personal data, and to object to certain types of processing. To exercise any of these rights, please contact ace76 at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise.

ace76 will respond to all valid data rights requests within five (5) business days of receipt. In complex cases, a response may take up to thirty (30) days; you will be notified of any extension within the initial five-day period.

ace76 will not charge a fee for handling data rights requests unless a request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may be applied.

If you are not satisfied with ace76's response to your data rights request or privacy complaint, you may seek independent advice or raise a complaint with a relevant data protection authority.

11 Security Measures

ace76 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ace76 servers
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment account references
• Role-based access controls that restrict internal access to personal data to staff who require it for their job function
• Multi-factor authentication (MFA) for all internal systems that handle personal data
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists
• 24/7 automated monitoring for anomalous access patterns, brute-force attempts, and data exfiltration indicators
• Incident response procedures with defined escalation paths and player notification protocols in the event of a confirmed data breach

Despite these measures, no internet-based service can guarantee absolute security. ace76 encourages all players to use strong, unique passwords, to enable two-factor authentication on their accounts, and to report any suspected unauthorised access to [email protected] immediately.

12 Children and Minors

The ace76 platform is strictly intended for adults aged 21 years and above. ace76 does not knowingly collect personal data from individuals under the age of 21. If ace76 discovers that a registered player is under 21 years of age, the account will be closed immediately, any balance will be reviewed in accordance with the Terms and Conditions, and all personal data associated with that account will be deleted promptly.

If you believe that a minor has registered an account on ace76, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

13 Changes to This Policy

ace76 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, ace76 will notify registered players via email and/or a prominent notice on the platform at least seven (7) days before the updated Policy takes effect.

The "Last updated" date at the top of this page reflects the date on which the current version of the Policy became effective. We encourage you to review this Policy periodically to stay informed about how ace76 protects your personal data.

Your continued use of the ace76 platform following the effective date of any change constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you should close your account before the changes take effect.

14 Contact Us

For any questions, requests, or concerns relating to this Privacy Policy or the way ace76 handles your personal data, please contact us using the details below. All privacy enquiries are handled in English and Bengali.

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the platform
• Subject Line for Data Requests: "Privacy Policy Enquiry" or "Data Rights Request"
• Response Time: Within 5 business days for standard enquiries; within 30 days for formal data rights requests

When submitting a data rights request by email, please include your registered username or email address and a clear description of the right you wish to exercise. ace76 may need to verify your identity before actioning the request to ensure we do not disclose personal data to an unauthorised party.