ace333 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ace333 ("we", "us", "our", "the Platform") collects, uses, stores, and discloses personal information relating to individuals ("you", "Player", "User") who access or use the ace333 website at https://ace333.bar and all associated services (collectively, "the Service").

By registering an account or continuing to use the Service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Service immediately.

This Policy is to be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are accessible via the footer of every page on this site. Where any conflict exists between this Policy and those documents, this Policy shall prevail in respect of data privacy matters.

---

2. Data Controller

ace333 acts as the data controller in respect of personal data collected through the Service. As data controller, we determine the purposes and means by which your personal data is processed. Our contact details for all data-related enquiries are provided in Section 13 of this Policy.

---

2. What Personal Data We Collect

We collect personal data from you directly (when you register, make a deposit, contact support, or use the Service) and indirectly (through automated means when you interact with the Platform). The categories of personal data we may collect include:

We do not knowingly collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless specifically required for regulatory compliance, in which case you will be notified and your consent sought.

---

3. How We Collect Your Data

3.1 Direct Collection

We collect data directly from you when you complete the account registration form, submit identity verification documents, make a deposit or withdrawal request, contact our customer support team, participate in a promotion or survey, or update your account preferences.

3.2 Automated Collection

When you access the Service, we automatically collect certain technical data through the use of cookies, web beacons, pixel tags, and server log files. This data is used to ensure the security and performance of the Platform, detect fraudulent activity, and improve user experience. Please refer to Section 10 of this Policy for full details of our cookie practices.

3.3 Third-Party Sources

In some circumstances we may receive personal data about you from third parties, including identity verification providers, fraud prevention agencies, payment processors (such as bKash, Nagad, Rocket, and Upay), and our game software suppliers. Data received from third-party sources is handled with the same standard of care as data collected directly from you.

---

4. How We Use Your Personal Data

ace333 uses your personal data only for the following lawful purposes:

• Account creation and management: to register your account, verify your identity and age (21+ requirement), and maintain your account in good standing.
• Service delivery: to provide access to casino games, sports betting markets, live dealer tables, and all other features of the Service.
• Payment processing: to facilitate deposits and withdrawals via your chosen payment method and to maintain accurate transaction records.
• Security and fraud prevention: to detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, and other prohibited activities.
• Regulatory compliance: to comply with applicable legal obligations, including identity verification, age verification, and financial reporting requirements.
• Customer support: to respond to your enquiries, resolve disputes, and provide technical assistance.
• Responsible gaming: to monitor gameplay patterns for signs of problem gambling and to enforce self-imposed limits, self-exclusions, and cooling-off periods you have set on your account.
• Platform improvement: to analyse aggregated, anonymised usage data to improve the performance, usability, and content of the Service.
• Marketing communications: to send you promotional offers, bonus notifications, and news about ace333, where you have opted in to receive such communications. You may unsubscribe at any time.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

---

5. Legal Basis for Processing

We process your personal data on one or more of the following legal bases:

• Contractual necessity: processing is required to perform our contractual obligations to you under the Terms and Conditions, including operating your account and processing payments.
• Legitimate interests: processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, and service improvement, provided those interests are not overridden by your rights.
• Legal obligation: processing is required for compliance with applicable laws and regulations, including anti-money laundering obligations and age verification requirements.
• Consent: where we rely on your consent as the legal basis for processing (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

---

6. Disclosure of Your Personal Data

6.1 Service Providers

We may share your personal data with carefully selected third-party service providers who assist us in operating the Service, including payment processors, identity verification providers, IT infrastructure partners, fraud detection agencies, and customer support software vendors. All third-party processors are bound by data processing agreements that require them to handle your data securely and only for the purposes instructed by ace333.

6.2 Game Software Providers

Certain technical data (such as session identifiers and game-specific parameters) may be shared with our game software suppliers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — solely to facilitate gameplay. These providers do not receive your full personal profile and may not use shared data for their own purposes.

6.3 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement authorities, regulatory bodies, or other competent authorities where we are legally required to do so, or where disclosure is necessary to prevent or investigate suspected illegal activity, fraud, or a threat to the safety of any individual.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of our business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via a notice published on the Service, and your rights under this Policy will be preserved.

6.5 No Sale of Data

ace333 does not sell, rent, lease, or otherwise trade your personal data to third-party marketing organisations or data brokers. This commitment is unconditional and applies regardless of any commercial consideration.

---

7. International Data Transfers

ace333 operates internationally, and your personal data may be processed by our service providers in countries outside Bangladesh. Where data is transferred internationally, we ensure that appropriate safeguards are in place — such as standard contractual clauses or equivalent data protection mechanisms — to ensure your data receives a level of protection consistent with this Policy.

---

8. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. As a general guide:

• Account and identity data is retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Transaction and financial records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for up to three (3) years from the date of the interaction.
• Technical and usage data (logs, cookies) is typically retained for up to twelve (12) months.
• Marketing consent records are retained until you withdraw your consent, after which they are deleted within a reasonable period.

Where data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual.

---

9. Your Data Rights

Subject to applicable law, you have the following rights with respect to your personal data held by ace333:

• Right of Access: you may request a copy of the personal data we hold about you at any time.
• Right to Rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Erasure: you may request that we delete your personal data, subject to any legal retention obligations that may prevent immediate deletion.
• Right to Restrict Processing: in certain circumstances you may request that we limit how we use your data while a dispute or correction request is outstanding.
• Right to Data Portability: where technically feasible and legally applicable, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: you may object to the processing of your personal data where we rely on legitimate interests as the legal basis, or where data is used for direct marketing purposes.
• Right to Withdraw Consent: where processing is based on your consent, you may withdraw that consent at any time without penalty, though this will not affect any processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team using the email address displayed in the footer of this page. We will respond to all verified requests within a reasonable timeframe and in any event within thirty (30) calendar days.

---

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device and store certain information about your preferences and session state. ace333 uses cookies and similar technologies (including web beacons and local storage objects) to operate the Service effectively.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: essential for the Platform to function. These include session authentication tokens and security cookies. You cannot opt out of these without affecting your ability to use the Service.
• Performance Cookies: collect anonymised data about how visitors interact with the Platform, such as pages visited and errors encountered. This data is used to improve Platform performance.
• Functional Cookies: remember your preferences (such as language and currency settings) to provide a more personalised experience.
• Analytics Cookies: help us understand aggregate usage patterns so we can improve content, navigation, and game offerings on ace333.

10.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You may block or delete cookies at any time; however, doing so may impair certain features of the Service, including your ability to remain logged in to your account. Continued use of the Platform after reviewing this Policy constitutes acceptance of our cookie practices.

---

11. Security Measures

ace333 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including payment method identifiers and identity documents;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Multi-factor authentication options for player accounts;
• Automated fraud detection systems that monitor for unusual account activity in real time.

While we take every reasonable precaution, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay.

---

12. Children and Minors

The Service is strictly for individuals aged 21 years or older. We do not knowingly collect personal data from persons under 21. If we become aware that an account has been created by or on behalf of an individual under the age of 21, we will close that account immediately, delete any associated personal data to the extent permitted by law, and forfeiture any balances in accordance with our Terms and Conditions.

If you believe a minor has registered on ace333, please contact our support team immediately so that appropriate action can be taken.

---

13. Changes to This Policy

ace333 reserves the right to update or modify this Privacy Policy at any time. Any changes will be published on this page with an updated effective date. Where changes are material, we will endeavour to provide additional notice (for example, by placing a prominent notice on the Platform or sending a notification to registered players). Your continued use of the Service following the publication of any revised Policy constitutes your acceptance of those changes.

---

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ace333 handles your personal data, please contact our support team. Our contact email address is displayed as plain text in the footer of every page on this site. We aim to acknowledge all privacy-related enquiries within two (2) business days during Bangladesh Standard Time (BST, UTC+6) business hours and to provide a full response within thirty (30) calendar days.