ace68 Privacy Policy
Your privacy matters to us. This Privacy Policy explains what personal information ace68 collects from players in Bangladesh, how that information is used, with whom it may be shared, and what rights you hold over your own data. We are committed to transparency and to protecting your information at every step.
A plain-English summary of our key privacy commitments before you read the full policy below.
ace68 collects personal information solely to operate your account, process transactions, verify your identity, and comply with applicable anti-money laundering obligations. We do not collect data beyond what is reasonably necessary for these purposes.
ace68 will never sell, rent, or trade your personal information to third-party marketers. Your data is shared only with essential service partners — payment processors such as bKash and Nagad, identity verification providers, and regulatory authorities — and only to the extent necessary.
All data transmitted between your device and the ace68 platform is protected by industry-standard 256-bit SSL/TLS encryption. Sensitive fields such as passwords and payment credentials are additionally hashed and are never stored in plain text on our servers.
Registered ace68 players have the right to access, correct, port, and request deletion of their personal data at any time by contacting our support team. We will respond to verified data requests within 30 days in accordance with applicable data protection standards.
ace68 uses strictly necessary cookies to keep you logged in and to maintain session security, plus optional analytics cookies to understand platform usage patterns. You can manage non-essential cookie preferences via your browser settings at any time without affecting core functionality.
Whenever we make a material change to this Privacy Policy, we will notify you via the email address or mobile number associated with your ace68 account before the change takes effect. Continued use of the platform after notification constitutes acceptance of the updated policy.
Important Notice: This Privacy Policy describes how ace68 ("we", "us", "our", "the Company") collects, uses, stores, and shares personal information provided by users ("you", "the Player") of the ace68 platform at ace68.io. By registering an account or using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree, please do not use the platform.
Introduction
ace68 is an online betting and gaming platform operated as a licensed offshore entity, serving players primarily located in Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We offer sports betting, live casino games, slots, and related gaming entertainment services.
We take the privacy and security of your personal data seriously. This Privacy Policy sets out in detail what personal information we collect when you use the ace68 platform, why we collect it, how we use it, who we share it with, how long we retain it, and what rights you have in relation to it. This policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference.
Throughout this document, "personal data" means any information that identifies or could reasonably be used to identify you as an individual. "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
ace68 acts as the data controller in respect of personal information collected through the platform. All data processing activities described in this policy are carried out by ace68 or by carefully selected third-party processors acting on our behalf under binding data processing agreements.
Data We Collect
ace68 collects two broad categories of personal data: information you provide directly, and information collected automatically when you use the platform.
2.1 Information You Provide Directly
- Registration data: Full legal name, date of birth, residential address, email address, and mobile number (used for account creation and verification)
- Identity verification documents: Copies of your National ID card, passport, or driving licence; proof of address documents such as utility bills or bank statements; and payment method verification screenshots (e.g., your bKash or Nagad account name screen)
- Financial data: Mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank), deposit and withdrawal transaction records
- Communications: Content of messages you send to ace68 via live chat, email at [email protected], or any support ticket system
- Responsible gaming preferences: Self-imposed deposit limits, session time limits, cooling-off periods, and self-exclusion elections you make via the account dashboard
2.2 Information Collected Automatically
- Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers
- Usage data: Pages visited, games played, bet history, session duration, click-stream data, and navigation paths through the platform
- Location data: Approximate geographic location derived from your IP address (used to detect access from restricted jurisdictions)
- Cookie data: Session identifiers, authentication tokens, and analytics data collected via cookies and similar tracking technologies (see Section 7)
Sensitive Data: ace68 does not intentionally collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) as part of normal platform operation. If you voluntarily disclose such information — for example, in a support communication — it will be treated with the highest level of confidentiality.
How We Collect Your Data
ace68 collects your personal data through the following channels:
- Account registration form: When you create your ace68 account on the platform at ace68.io
- KYC verification process: When you submit identity documents in response to a verification request from the ace68 compliance team
- Deposit and withdrawal transactions: When you initiate a financial transaction via bKash, Nagad, Rocket, or a connected bank account
- Platform activity: Automatically as you browse, bet, and play games on the ace68 platform through server logs and analytics systems
- Customer support interactions: When you contact ace68 via live chat, email, or any support ticket channel
- Third-party identity verification providers: Where ace68 uses an external KYC service to cross-reference the documents you submit
ace68 does not purchase personal data from data brokers or third-party list providers. All personal data we hold about you originates from your direct interaction with the platform or from the service providers we engage to operate it.
How We Use Your Data
ace68 processes your personal data for the following specific purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Creating and managing your ace68 account | Registration data, device data | Contract performance |
| Processing deposits and withdrawals | Financial data, identity data | Contract performance |
| Identity verification and KYC compliance | ID documents, address proof | Legal obligation |
| Anti-money laundering monitoring | Transaction data, usage data | Legal obligation |
| Fraud detection and prevention | Device data, IP address, usage data | Legitimate interest |
| Responsible gaming monitoring | Betting history, session data, preferences | Legal obligation / Legitimate interest |
| Customer support | Communications, account data | Contract performance |
| Platform improvement and analytics | Usage data, cookie data | Legitimate interest |
| Promotional communications (where opted in) | Email address, mobile number | Consent |
| Regulatory reporting | Account data, transaction data | Legal obligation |
ace68 will not use your personal data for any purpose that is incompatible with the purposes set out above without first obtaining your explicit consent or establishing a clear legal basis for doing so.
Legal Bases for Processing
Every processing activity carried out by ace68 rests on one or more of the following recognised legal bases:
- Contract performance: Processing is necessary to perform the contract between ace68 and you (i.e., operating your betting account, processing payments, and delivering game results).
- Legal obligation: Processing is required to comply with applicable legal requirements, including anti-money laundering regulations, age verification obligations, and any reporting requirements imposed on licensed offshore operators.
- Legitimate interests: Processing is necessary for ace68's legitimate business interests — such as fraud prevention, platform security, and analytics — provided those interests are not overridden by your fundamental rights and freedoms. ace68 has conducted legitimate-interest assessments for each processing activity relying on this basis.
- Consent: For processing activities not covered by the above — in particular, sending promotional emails or SMS marketing messages — ace68 relies on your freely given, specific, and informed consent. You may withdraw consent at any time by contacting [email protected] or by using the opt-out link in any marketing communication.
Withdrawing Consent: Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal, and it does not affect processing carried out on other legal bases.
Data Sharing & Third Parties
6.1 Categories of Recipients
ace68 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and under appropriate data protection obligations:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank — to process your deposits and withdrawals. Each payment partner receives only the data necessary to execute the specific transaction.
- Identity verification providers: Third-party KYC and document verification services engaged by ace68 to cross-check identity documents submitted during account verification.
- Game software providers: Providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive your anonymised player ID and game session data to power the games you play. These providers do not receive your full identity data.
- IT infrastructure providers: Cloud hosting, content delivery, and platform infrastructure providers that process data on ace68's behalf under binding data processing agreements.
- Analytics providers: Web analytics services that help ace68 understand platform usage patterns. Analytics data is aggregated and pseudonymised wherever possible.
- Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or other regulatory bodies where disclosure is required by applicable law or by a valid legal order.
- Professional advisers: Lawyers, auditors, and accountants where disclosure is necessary in connection with their professional engagements with ace68, subject to binding professional confidentiality obligations.
6.2 No Sale of Personal Data
ace68 does not sell, rent, license, or otherwise commercially exploit your personal data to any third party for their independent marketing or business purposes. This commitment applies regardless of the nature of the data or the identity of the potential buyer.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of ace68's business, your personal data may be transferred to the acquiring entity as part of that transaction. ace68 will notify you before your data is transferred and becomes subject to a different privacy policy, and you will have the right to request deletion of your data prior to any such transfer.
All third parties with whom ace68 shares personal data are contractually required to maintain appropriate technical and organisational security measures and to use the data only for the purposes specified in their data processing agreement with ace68.
Cookies & Tracking Technologies
7.1 What Are Cookies?
Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function properly, to remember your preferences, and to provide analytical information to site operators. ace68 uses cookies and similar technologies (such as local storage and session storage) on the platform.
7.2 Types of Cookies We Use
- Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. You cannot opt out of strictly necessary cookies without preventing the platform from functioning.
- Functional cookies: Remember your preferences such as language setting, last-used payment method, and interface customisations. Disabling these cookies may affect your experience but will not prevent access to the platform.
- Analytics cookies: Collect pseudonymised information about how users interact with the ace68 platform — pages visited, time on site, navigation paths, and error occurrences. This data helps us improve the platform. You may opt out via your browser settings.
- Security cookies: Used to detect fraudulent activity, identify unusual login patterns, and protect your account from unauthorised access attempts.
7.3 Managing Cookies
You can manage and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and be notified when a new cookie is set. Note that disabling strictly necessary cookies will prevent you from logging in to your ace68 account. For guidance on managing cookies in your specific browser, refer to the browser's help documentation.
Third-Party Cookies: Some game providers integrated into the ace68 platform may place their own cookies on your device when you launch their games. ace68 does not control these third-party cookies. Please refer to the relevant game provider's privacy policy for information on their cookie practices.
Data Retention
ace68 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. Our standard retention periods are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years | AML compliance, legal disputes |
| Identity verification documents | Duration of account + 5 years | Regulatory obligation |
| Financial transaction records | Duration of account + 7 years | Financial record-keeping requirements |
| Betting and gaming history | Duration of account + 3 years | Dispute resolution, responsible gaming |
| Support communications | 3 years from last interaction | Quality assurance, dispute resolution |
| Analytics and usage data | 26 months (rolling) | Platform improvement |
| Marketing consent records | Until consent withdrawn + 3 years | Proof of consent |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where deletion is not immediately possible due to backup schedules, data will be isolated and protected from further processing until deletion is complete.
Data Security
ace68 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:
- 256-bit SSL/TLS encryption applied to all data transmitted between your device and our servers
- Password hashing using industry-standard bcrypt algorithms — your password is never stored in plain text
- Two-factor authentication (2FA) available to all registered players via the account dashboard
- Firewall and intrusion detection systems monitoring platform infrastructure around the clock
- Regular security audits and penetration testing conducted by qualified security professionals
- Strict access controls limiting employee access to personal data on a need-to-know basis, with all access logged and audited
- Encrypted storage of sensitive data fields including identity document images and financial account references
- Incident response procedures in place to contain, investigate, and notify affected parties in the event of a data breach
Your Responsibility: The security of your ace68 account also depends on you keeping your login credentials confidential. Never share your password with anyone, including ace68 support staff (who will never ask for your full password). If you suspect your account has been compromised, contact ace68 support immediately at [email protected].
Your Rights
As a data subject, you hold the following rights in relation to the personal data ace68 holds about you. You may exercise any of these rights by submitting a written request to [email protected]. ace68 will respond to verified requests within 30 days.
Request a copy of all personal data ace68 holds about you, along with information about how it is processed.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that we restrict processing of your data in certain circumstances, such as while a rectification request is being resolved.
Receive a copy of your data in a structured, machine-readable format and, where technically feasible, have it transferred to another provider.
Object to processing based on legitimate interests, including profiling. We will cease processing unless we can demonstrate compelling legitimate grounds.
To exercise any of the above rights, please send a clear written request to [email protected] from the email address registered to your ace68 account. We may ask for proof of identity before processing your request. There is no charge for exercising these rights except in cases of manifestly unfounded or excessive repetition, where a reasonable administrative fee may apply.
Children's Privacy
The ace68 platform is strictly for persons aged 21 years and above. ace68 does not knowingly collect, solicit, or process personal data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent underage access to the platform.
If ace68 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data from our systems and close the associated account. If you believe that a minor has registered an account on the ace68 platform, please notify us immediately at [email protected] and we will investigate and act promptly.
21+ Only: Gambling is an adult activity. ace68 is committed to preventing underage gambling and supports responsible gaming practices across Bangladesh. For more information on our responsible gaming tools and safeguards, please visit our Responsible Gaming page.
Third-Party Links
The ace68 platform may contain references to or integrations with third-party services — for example, game software providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. While these providers deliver game content within the ace68 environment, they operate under their own separate privacy policies and terms of service.
ace68 is not responsible for the privacy practices, content, or security measures of any third-party services accessible through the platform. We strongly encourage you to review the privacy policy of any third-party service with which you interact. The inclusion of a third-party integration on the ace68 platform does not constitute an endorsement of that party's privacy practices.
Links to external websites appearing in support documentation or FAQ resources provided on ace68.io are for informational purposes only. ace68 has no control over the content or data practices of those external sites.
International Data Transfers
ace68 operates as a licensed offshore operator, and as such, some of the personal data we collect may be processed on servers located outside Bangladesh. Where personal data is transferred internationally, ace68 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.
These safeguards may include:
- Contractual clauses in data processing agreements with overseas service providers that require them to maintain data protection standards consistent with this policy
- Processing personal data only in jurisdictions that maintain adequate data protection frameworks
- Technical measures such as end-to-end encryption applied to data in transit across international borders
By creating an ace68 account and using the platform, you acknowledge and consent to the transfer of your personal data outside Bangladesh to the extent necessary to operate the platform and deliver the services described in our Terms & Conditions. All international transfers are conducted with appropriate protective measures in place.
Policy Amendments
ace68 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform features. The version number and effective date at the top of this document will be updated whenever a change is made.
For material changes — those that significantly affect your rights or how your data is used — ace68 will provide notice to you via:
- An email notification sent to the address registered to your ace68 account, at least 14 days before the change takes effect
- A prominent notice displayed on the ace68 platform when you next log in
For minor or administrative changes (such as clarifications, formatting corrections, or updates to contact details), ace68 may update the policy without individual notification, though the version number and date will always be updated accordingly.
Your continued use of the ace68 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised policy, you must cease using the platform and may request account closure by contacting our support team.
Archive: Previous versions of this Privacy Policy are available upon request by contacting [email protected]. We maintain a complete version history for transparency and accountability.
Contact & Data Protection Officer
If you have any questions, concerns, or complaints about this Privacy Policy or about the way ace68 processes your personal data, please contact us using the details below. We are committed to resolving privacy concerns promptly and transparently.
General Privacy Enquiries
Email: [email protected]
Response time: Within 5 business days for general enquiries
Bangladesh Standard Time (BST, UTC+6) business hours: Monday to Friday, 09:00–18:00
Data Subject Rights Requests
To exercise any of the rights described in Section 10, please send a written request to [email protected] with the subject line "Data Rights Request" and include your registered email address and a brief description of the right you wish to exercise. We will respond within 30 calendar days of receiving a verified request.
Complaints
If you are not satisfied with our response to a privacy concern or believe that ace68 is processing your personal data in a manner inconsistent with this policy, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. ace68 will cooperate fully with any such investigation.
ace68 takes every privacy complaint seriously. Our internal complaints process involves a formal acknowledgement within 48 hours, an investigation by a senior member of our compliance team, and a written response within 30 days. Where a complaint reveals a genuine issue with our data practices, we will take corrective action and update this policy if necessary.
Now that you understand how ace68 protects your data, dive into Bangladesh's most trusted online betting platform — from BPL cricket and live casino to the latest slots and live dealer tables.