ace69 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how ace69 ("we", "us", "our") collects, uses, stores, and discloses personal information obtained from users ("you", "your", "the Player") who access or use the ace69 online betting and casino platform available at ace69.io.

ace69 is committed to maintaining the privacy, confidentiality, and security of all personal data entrusted to us by players based in Bangladesh and elsewhere. We approach data protection as an ongoing obligation — not a one-time compliance exercise — and continuously review our practices to ensure they remain appropriate and proportionate.

By registering an account, making a deposit, or otherwise using the ace69 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which contain additional provisions relevant to your use of the platform.

2 Data We Collect

ace69 collects personal data in two broad categories: data you provide directly, and data generated automatically through your use of the platform. The following table summarises the categories of data we collect and the specific data points within each category.

3 How We Collect Your Data

ace69 collects personal data through the following channels and methods:

• Direct submission at registration — when you create your ace69 account, you voluntarily provide identity and contact information through the registration form.
• KYC document upload — when you submit identity, address, and payment method verification documents as part of our Know Your Customer process prior to your first withdrawal.
• Transaction processing — when you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or any supported bank or card method, financial data is captured to record and reconcile the transaction.
• Platform usage and activity logs — our servers automatically record technical and usage data each time you interact with the ace69 platform, including every page view, game session, and bet placed.
• Cookies and similar tracking technologies — see Section 7 for a detailed explanation of how ace69 uses cookies, session tokens, and analytics tools.
• Customer support interactions — when you contact our support team via live chat or email, we record the content of those interactions for quality assurance, training, and dispute resolution purposes.
• Third-party identity verification providers — where we use external KYC or anti-fraud services to cross-reference identity data, those providers may supply us with verification outcomes and risk scores derived from the documents you submit.

4 Legal Basis for Processing

ace69 processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual necessity — the majority of data processing is required to fulfil our contractual obligations to you as a registered player. This includes operating your account, processing deposits and withdrawals, settling bets, and providing customer support.
• Legal obligation — we are required to collect and retain certain data to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, and other applicable legal and regulatory requirements. We cannot waive these obligations at a player's request.
• Legitimate interests — we process certain technical and usage data on the basis of our legitimate interests in operating a secure, fair, and well-functioning platform. This includes fraud detection, platform security monitoring, and service improvement analytics.
• Consent — where we rely on consent (for example, for optional marketing communications or for the processing of sensitive personal data in responsible gaming contexts), we will obtain your explicit consent before processing begins. You have the right to withdraw consent at any time without detriment to your account.

5 How We Use Your Data

The personal data collected by ace69 is used exclusively for the following purposes. We do not use your data for any purpose that is incompatible with those described below without first obtaining your explicit consent:

• To create, maintain, and secure your ace69 player account, including verifying your identity and age (21+ requirement) at registration and periodically thereafter.
• To process financial transactions — deposits and withdrawals in Bangladeshi Taka (৳) — through bKash, Nagad, Rocket, Upay, supported banks, and card providers.
• To settle bets and game rounds accurately, and to resolve any disputes that arise in relation to specific outcomes or transactions.
• To fulfil our KYC and AML compliance obligations, including screening against sanctions lists and flagging unusual transaction patterns for review.
• To operate and enforce responsible gaming tools — deposit limits, session timers, cooling-off periods, and self-exclusion requests — as set by you or applied by ace69 in the interests of player welfare.
• To send you account-related communications, including transaction confirmations, security alerts, and material changes to our policies. These communications are not optional — they are necessary for account management.
• To send promotional communications (bonus offers, seasonal promotions, tournament announcements) where you have opted in to receive such messages. You may opt out at any time via account settings or by contacting support.
• To improve the platform through internal analytics — understanding which games are most popular, how players navigate the site, and where technical issues most frequently arise.
• To detect, investigate, and prevent fraud, cheating, bonus abuse, money laundering, and any other activity that violates our Terms & Conditions or applicable law.

6 Data Sharing & Disclosure

ace69 does not sell, rent, or trade your personal data to any third party. We may share your data with carefully selected third parties only in the following circumstances, and only to the extent strictly necessary for the relevant purpose:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC and identity verification providers — specialist third-party services that cross-reference the identity documents you submit against authoritative databases to confirm your identity and age.
• Game content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios receive a pseudonymous player session identifier to enable you to play their games on the ace69 platform. They do not receive your full name, contact details, or financial data.
• Fraud detection and security services — specialist providers who analyse technical and behavioural signals to detect bot activity, multi-accounting, and other forms of platform abuse.
• Legal and regulatory authorities — we will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal order, warrant, or other lawful request. We will notify you of any such disclosure where we are legally permitted to do so.
• Business transfers — in the event of a merger, acquisition, or sale of all or part of the ace69 business, personal data held by ace69 may be transferred to the acquiring entity, subject to equivalent privacy protections. Players will be notified of any such transfer in advance.

7 Cookies & Tracking Technologies

ace69 uses cookies and similar technologies to operate the platform, maintain your session, and gather anonymised analytics data. Cookies are small text files placed on your device by your browser when you visit the platform. The following table describes the types of cookies we use:

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core features of ace69, though some functional preferences (such as remembered display settings) may not be retained between sessions. Please note that strictly necessary cookies cannot be disabled without impairing your ability to log in and use the platform.

8 Data Security

ace69 implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and the ace69 servers, including login credentials, financial transactions, and document uploads.
• Encryption at rest for all stored personal data, including identity documents and financial records, using AES-256 encryption on secured servers with restricted physical and logical access.
• Role-based access controls ensuring that only authorised ace69 personnel with a documented business need can access personal data. All internal data access events are logged and audited.
• Two-factor authentication (2FA) available to all players for account login, and mandatory for all ace69 staff who access player data systems.
• Penetration testing and vulnerability assessments conducted periodically by independent security specialists to identify and remediate weaknesses in the platform.
• Data breach response procedures — in the unlikely event of a security breach that affects your personal data, ace69 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

9 Data Retention

ace69 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data — retained for the duration of your account and for a period of five (5) years following permanent account closure, to meet AML and KYC record-keeping obligations.
• Transaction records (deposits, withdrawals, bet history) — retained for seven (7) years following the date of each transaction, in line with standard financial record-keeping requirements.
• KYC documents (identity and address verification) — retained for five (5) years following account closure or the date the document was submitted, whichever is later.
• Customer support records (live chat logs, email correspondence) — retained for three (3) years from the date of the interaction, or longer where the interaction relates to an open dispute or investigation.
• Technical and usage logs — retained for up to twelve (12) months from the date of generation, after which they are aggregated or anonymised for long-term analytics purposes.
• Marketing consent records — retained for three (3) years from the date of consent, or until consent is withdrawn, whichever is earlier.

At the end of each applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual. ace69 conducts periodic data retention reviews to ensure compliance with this schedule.

10 Your Data Rights

As a player on the ace69 platform, you hold the following rights in respect of your personal data. All rights requests should be submitted to [email protected] with the subject line "Data Rights Request" and will be responded to within 30 days of receipt:

• Right of Access — you may request a copy of all personal data that ace69 holds about you, along with information about how it is used, who it has been shared with, and how long it will be retained.
• Right to Rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number) can be made directly within your account settings.
• Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our legal record-keeping obligations, which may require us to retain certain data notwithstanding a deletion request.
• Right to Restrict Processing — in certain circumstances (for example, where you contest the accuracy of data, or where processing is unlawful but you prefer restriction to deletion), you may request that we restrict processing of your data.
• Right to Data Portability — you may request an export of your personal data in a commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you wish.
• Right to Object — you may object to processing carried out on the basis of our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent — where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11 Children & Minors

ace69 is strictly an adult platform. We do not knowingly collect, process, or retain personal data from any person under the age of 21. The platform is not intended for, and is not directed at, any person under the age of 21 years.

If ace69 discovers or has reasonable grounds to believe that an account has been registered by or on behalf of a person under the age of 21, we will immediately suspend the account, void all associated bets and winnings, retain any deposits pending investigation in accordance with our AML procedures, and permanently close the account. All personal data associated with the account will be deleted once our legal obligations with respect to the relevant transaction records have been fulfilled.

If you are a parent or guardian and believe that a minor in your care has registered an account on ace69, please contact our support team immediately at [email protected]. We will treat all such reports with urgency and complete confidentiality.

12 Third-Party Links

The ace69 platform may contain references to or integrations with third-party services, including game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment partners (bKash, Nagad, Rocket, Upay). When you interact with these third-party services — for example, when launching a live casino game hosted on an Evolution Gaming environment or completing a bKash transaction — you may be subject to that third party's own privacy policy and data practices.

ace69 is not responsible for the privacy practices of any third-party service provider or game studio. We encourage you to review the privacy policies of any third party whose services you access through or in connection with the ace69 platform. Our data sharing arrangements with game providers are limited to pseudonymous session identifiers, and we contractually prohibit game providers from using player data for any purpose other than delivering the game session.

13 Policy Updates

ace69 reserves the right to update, revise, or replace this Privacy Policy at any time. We may do so in response to changes in applicable law, updates to our platform features, or refinements to our internal data practices. The effective date at the top of this document will be updated each time a material change is made.

Where changes are material — meaning they meaningfully affect how we collect, use, or share your personal data — ace69 will notify registered players via the email address associated with their account and/or via a prominent notice on the platform prior to the revised policy taking effect. Your continued use of the ace69 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms.

We encourage all players to review this Privacy Policy periodically to stay informed about how ace69 protects and handles their personal data. If you have any questions about a specific change, please contact our support team before the revised policy takes effect.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which ace69 handles your personal data, please contact us using the details below. We aim to respond to all privacy-related enquiries within 4 business hours during standard Bangladesh Standard Time (BST, UTC+6) working hours, and within 24 hours at all other times.

All privacy-related enquiries are handled by ace69's dedicated data protection team. If you are not satisfied with the response you receive, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction.