ace64 Privacy Policy — How We Protect & Handle Your Personal Data
Your privacy matters to ace64. This policy explains precisely what personal data we collect from Bangladesh players, how we use it, who we share it with, and the rights you hold over your own information at every stage of your account lifecycle.
SSL-Encrypted Data Storage
All personal data stored on the ace64 platform is protected using industry-standard SSL/TLS encryption at rest and in transit. Your account details, payment information, and identity documents are held on secured servers accessible only to authorised personnel.
Minimal Data Collection
ace64 applies a data minimisation principle — we collect only the personal data that is strictly necessary to operate your account, process payments, verify your identity for KYC compliance, and deliver a safe gaming environment. We do not collect data we do not need.
Your Rights, Your Control
You have the right to access, correct, export, and request deletion of your personal data at any time. ace64 provides a clear process for exercising these rights via our support team. We respond to all verified data requests within 30 calendar days.
No Unauthorised Data Sales
ace64 does not sell, rent, or trade your personal data to third-party marketing companies. Data shared with third parties is limited to what is operationally necessary — specifically payment processors, identity verification providers, and licensed game suppliers.
Bangladesh-Focused Compliance
ace64 operates with the personal data rights of Bangladeshi players in mind. Our data handling practices are aligned with internationally recognised privacy principles, ensuring that players across Dhaka, Chittagong, Sylhet, Khulna, and all regions of Bangladesh receive the same high standard of data protection.
Transparent Retention Policy
We hold your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our data retention schedule is clearly defined and we provide players with the ability to request account closure and data deletion at any time.
Data Controller & Scope
This Privacy Policy ("Policy") is issued by ace64 ("ace64", "we", "us", "our"), the operator of the online gaming platform accessible at ace64.org. For the purposes of this Policy, ace64 acts as the data controller in respect of all personal data collected from registered players and visitors to the ace64 platform. This means that ace64 determines the purposes and means by which your personal data is processed.
This Policy applies to:
- All registered player accounts on the ace64 platform, regardless of the device or method used to access the platform;
- Visitors to ace64.org who have not yet registered an account but whose browsing activity may be collected via cookies and analytics tools (see the Cookies section below);
- Individuals who contact ace64 via our support channels, including email, live chat, or any future customer service tools;
- Any individual whose personal data is provided to ace64 in connection with a payment transaction, identity verification request, or account dispute.
This Policy does not apply to third-party websites or services that may be linked to from ace64.org. ace64 has no control over the data practices of third-party websites and encourages users to review the privacy policies of any external service they visit.
By registering an account with ace64, completing the KYC verification process, or making a deposit or withdrawal via the ace64 cashier, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the ace64 platform.
ace64 reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they substantially alter how your data is collected, used, or shared — we will notify active players via on-platform notification. The effective date at the top of this Policy reflects the date of the most recent revision. Continued use of the platform following notification of a policy change constitutes acceptance of the revised Policy.
Policy at a Glance
- ace64 is the data controller for all player data
- Applies to registered players and site visitors
- Third-party sites have their own policies
- Policy may be updated with advance notice
- Contact: [email protected] for privacy queries
Our Privacy Commitment
ace64 is committed to handling your personal data with respect, transparency, and in accordance with internationally recognised privacy principles. Your trust is the foundation of our platform — we will never use your data in ways you have not been informed about.
Information We Collect
ace64 collects personal data from players through several channels: directly during the registration and KYC process, automatically through the operation of the platform, and occasionally from third-party sources such as payment processors and identity verification services. The categories of personal data we collect are set out below.
2.1 Registration Data
When you create an ace64 account, we collect: your full legal name, date of birth, email address, Bangladeshi mobile phone number, and a chosen username and password. This data is collected for the purpose of creating and managing your player account and is mandatory for registration.
2.2 Identity Verification (KYC) Data
To comply with our Know Your Customer obligations and to prevent underage gambling, ace64 collects: a copy of your Bangladeshi National Identity Card (NID) — both front and back — a selfie photograph of you holding the NID, and proof of ownership of the payment method used for deposits (e.g., a screenshot of your bKash or Nagad account showing your name). This data is used solely for identity and age verification purposes.
2.3 Financial and Transaction Data
When you make a deposit or withdrawal, ace64 receives transaction metadata including the payment method used (e.g., bKash, Nagad, Rocket, Upay, BRAC Bank), the transaction amount in Bangladeshi Taka (৳), the timestamp of the transaction, and a transaction reference number. ace64 does not store full payment account credentials (such as full mobile banking PINs or bank account passwords) — these are handled exclusively by the relevant payment service provider.
2.4 Gameplay and Betting Data
ace64 automatically records data relating to your gaming and betting activity, including: games played, bets placed, wager amounts, outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.
2.5 Technical and Device Data
When you access the ace64 platform, we automatically collect: your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), referring URL, and pages visited within the platform. This data is collected to ensure platform security, detect fraud, and improve user experience.
2.6 Communications Data
If you contact ace64 support via email or any other channel, we retain a record of that communication including your contact details and the content of the exchange. This data is used for customer service purposes and for maintaining records of any account-related disputes or requests.
| Data Category | Examples | Collection Method | Purpose |
|---|---|---|---|
| Registration Data | Name, DOB, email, phone | Direct — registration form | Account creation & management |
| KYC / Identity Data | NID copy, selfie, payment proof | Direct — KYC upload | Age & identity verification |
| Financial Data | Transaction amounts, payment method, timestamps | Automated — cashier system | Payment processing, AML compliance |
| Gameplay Data | Bets, outcomes, session length | Automated — game servers | Account records, dispute resolution |
| Technical Data | IP address, device type, browser | Automated — server logs | Security, fraud prevention |
| Communications Data | Support emails, chat transcripts | Direct — support channels | Customer service, dispute records |
How We Use Your Data
ace64 processes your personal data only for clearly defined, lawful purposes. The following describes the specific purposes for which each category of data is used and the legal basis on which each processing activity relies.
3.1 Account Management
We use your registration data to create, maintain, and administer your player account. This includes processing login sessions, managing account preferences, enforcing account security measures (such as detecting unusual login activity), and communicating essential account-related information to you. The legal basis for this processing is the performance of a contract between you and ace64.
3.2 Identity Verification and Age Confirmation
KYC data is processed for the purpose of verifying that you are who you claim to be and that you are at least 18 years of age. This is a mandatory process and represents both a contractual requirement and a compliance obligation. Players who do not complete KYC verification will have withdrawal functionality restricted until verification is complete. The legal basis is compliance with our legal and regulatory obligations, as well as the performance of our contract with you.
3.3 Payment Processing
Financial and transaction data is processed to facilitate deposits to and withdrawals from your ace64 account, to detect and prevent payment fraud, and to maintain accurate transaction records. ace64 uses this data in conjunction with our payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners) to complete payment instructions. The legal basis is performance of a contract and compliance with AML obligations.
3.4 Responsible Gaming and Player Protection
Gameplay and betting data is monitored to support ace64's responsible gaming obligations, including identifying patterns of play that may indicate problem gambling, enforcing self-exclusion requests and deposit limits, and generating account-level activity reports. The legal basis is our legitimate interest in protecting player welfare and compliance with responsible gaming best practices.
3.5 Platform Security and Fraud Prevention
Technical and device data is used to detect and prevent fraud, account takeover, money laundering, and other prohibited activities. This includes cross-referencing IP addresses and device fingerprints to identify duplicate accounts or coordinated abuse patterns. The legal basis is our legitimate interest in maintaining the security and integrity of the platform.
3.6 Customer Support
Communications data is processed to respond to your support enquiries, resolve disputes, and maintain an accurate record of all account-related communications. The legal basis is the performance of a contract and our legitimate interest in maintaining quality customer service records.
3.7 Marketing Communications
Where you have given explicit consent to receive promotional communications from ace64, we may use your email address and/or mobile phone number to send you information about new games, promotional offers, seasonal bonuses (such as those available during Eid, Pohela Boishakh, or BPL season), and platform updates. You may withdraw your marketing consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing communication. Withdrawal of marketing consent does not affect the processing of data for other purposes described in this section.
Lawful Bases We Rely On
- Contract — account creation, payments, KYC
- Legal Obligation — AML, age verification
- Legitimate Interest — security, fraud, support
- Consent — marketing communications only
Opt Out of Marketing
You can withdraw your marketing consent at any time. Simply email us or use the unsubscribe link in any promotional message. Opting out of marketing will not affect your ability to receive essential account communications.
Contact: [email protected]
Data Sharing & Third Parties
ace64 does not sell, rent, or commercially trade your personal data with any third party. Data is shared with external parties only to the extent strictly necessary to operate the platform and fulfil our legal obligations. The following categories of third parties may receive limited personal data from ace64 under appropriate data processing agreements.
4.1 Payment Service Providers
To process your deposits and withdrawals, ace64 shares transaction-relevant data with the payment service provider you select at the cashier. This includes your registered account name and transaction details. Providers include bKash, Nagad, Rocket, Upay, SureCash, BRAC Bank, City Bank, and Islami Bank. Each of these providers operates under its own privacy policy and applicable Bangladeshi financial regulations. ace64 shares only the minimum data necessary to complete each transaction.
4.2 Identity Verification Providers
ace64 may engage third-party KYC and identity verification service providers to assist in verifying the identity and age of registered players. These providers process the identity documents you submit strictly for verification purposes and are contractually prohibited from using your data for any other purpose.
4.3 Game Content Providers
The games available on ace64 are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive anonymised or pseudonymised session data necessary for game delivery (such as session tokens and bet parameters) but do not receive your full personal identity data as part of standard game delivery operations.
4.4 Analytics and Security Providers
ace64 uses third-party technology tools for platform analytics, fraud detection, and cybersecurity monitoring. These tools may process technical data such as IP addresses, device fingerprints, and behavioural patterns on the platform. All such providers are engaged under data processing agreements that restrict use of data to the purposes for which it was shared.
4.5 Law Enforcement and Regulatory Authorities
ace64 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by applicable law or where disclosure is necessary to prevent, detect, or investigate financial crime, fraud, or other serious offences. Where legally permitted, ace64 will attempt to notify affected players of such disclosures.
Data Retention & Deletion
ace64 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply to the main categories of personal data held by ace64.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account Registration Data | Duration of active account + 5 years after closure | Contractual records, legal obligation |
| KYC / Identity Documents | Duration of active account + 5 years after closure | AML compliance, regulatory obligation |
| Financial / Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| Gameplay and Betting Records | 5 years from date of activity | Dispute resolution, responsible gaming audit |
| Support Communications | 3 years from last communication | Customer service records, dispute evidence |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Proof of consent for marketing activities |
| Technical / Server Logs | 90 days | Security monitoring, fraud investigation |
6.1 Account Closure and Data Deletion
When a player requests account closure, ace64 will deactivate the account promptly. However, certain categories of personal data — particularly identity documents, transaction records, and KYC data — must be retained for the periods specified in the table above in order to comply with our legal obligations. Following the expiry of all applicable retention periods, personal data will be securely deleted or irreversibly anonymised. To request account closure, contact [email protected] with the subject line "Account Closure Request".
Your Rights as a Player
ace64 respects your rights over your personal data. The following rights are available to all registered players. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within 30 calendar days.
7.1 Right of Access
You have the right to request a copy of all personal data that ace64 holds about you. Upon verification of your identity, we will provide a structured summary of your data in a readable format within 30 calendar days of your verified request.
7.2 Right to Rectification
If you believe that any personal data ace64 holds about you is inaccurate or incomplete, you have the right to request correction. For basic profile data (such as email address or mobile number), corrections can be made by contacting our support team. Corrections to KYC identity documents require resubmission of valid documentation.
7.3 Right to Erasure
You have the right to request deletion of your personal data where: the data is no longer necessary for the purpose for which it was collected; you withdraw consent (where consent was the legal basis); or you object to processing based on legitimate interests and there are no overriding grounds to continue. Please note that this right is subject to our legal retention obligations — data that must be retained for AML, KYC, or financial record-keeping purposes cannot be deleted ahead of schedule.
7.4 Right to Data Portability
Where data is processed on the basis of your consent or for the performance of a contract, you have the right to receive that data in a structured, commonly used, machine-readable format. You may also request that we transmit that data directly to another controller where technically feasible.
7.5 Right to Object
You have the right to object to processing of your personal data where ace64 relies on legitimate interests as the legal basis for processing. ace64 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims. You have an absolute right to object to the use of your data for direct marketing purposes at any time.
7.6 Right to Restrict Processing
In certain circumstances — such as where you contest the accuracy of data or have objected to processing and we are assessing that objection — you may request that ace64 restrict processing of your personal data. During a restriction period, data will be stored but not actively processed for other purposes.
Your Data Rights Summary
- Access — request a copy of your data
- Rectification — correct inaccurate data
- Erasure — request deletion where applicable
- Portability — receive data in readable format
- Object — oppose legitimate interest processing
- Restrict — limit processing in certain cases
How to Submit a Request
Email our data protection team at [email protected] with the subject line "Data Rights Request". Include your registered account username and a brief description of your request. We will verify your identity and respond within 30 calendar days.
Security Measures
ace64 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. The following measures are currently in place across the ace64 platform.
SSL / TLS Encryption
All data transmitted between your device and the ace64 platform is encrypted using SSL/TLS protocols, preventing interception by third parties.
Secure Server Infrastructure
Player data is stored on secured servers with access restricted to authorised ace64 personnel only, protected by multi-layer authentication.
Fraud Detection Systems
Automated systems continuously monitor account activity for signs of fraud, account takeover, or suspicious transaction patterns in real time.
Staff Access Controls
Access to personal data by ace64 staff is governed by role-based access controls. Staff with access to player data receive mandatory data protection training.
8.1 Your Responsibility for Account Security
While ace64 implements robust security measures on the platform side, account security also depends on the actions you take to protect your own credentials. You are responsible for keeping your ace64 username and password confidential, not sharing your account with any third party, and logging out of your account when using shared or public devices. ace64 will never ask you for your password via email, chat, or any other channel. If you receive a communication purporting to be from ace64 requesting your password, treat it as fraudulent and report it to [email protected] immediately.
8.2 Data Breach Response
In the event of a data breach that poses a risk to the rights and freedoms of affected players, ace64 will take immediate steps to contain the breach, assess its scope, and notify affected players without undue delay. Notification will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the steps ace64 is taking to address the breach and mitigate its impact.
Your Privacy Is Our Priority at ace64
We are committed to keeping your personal data safe and giving you full control over how it is used. Explore the ace64 platform with confidence — or review our other policies and resources below.