ace36 Privacy Policy
This Privacy Policy explains how ace36 collects, uses, stores, shares and protects the personal data of players and visitors across the ace36 platform. We are committed to handling your information with care, transparency and in full accordance with applicable data protection principles. Please read this policy carefully before using our services.
How ace36 Protects Your Data
ace36 applies consistent data protection standards across every part of the platform. These six principles summarise our approach to your personal information.
Minimal Data Collection
ace36 collects only the personal data that is strictly necessary to provide our services, verify your identity, process payments and comply with legal obligations. We do not collect data for its own sake.
No Sale of Personal Data
ace36 does not sell, rent or trade your personal data to third-party advertisers, data brokers or marketing networks. Your information is shared only with service providers who directly support the operation of the ace36 platform.
SSL Encryption & Secure Storage
All data transmitted between your device and the ace36 platform is protected by industry-standard TLS/SSL encryption. Personal data stored on our systems is held on access-controlled servers with layered security protocols.
Your Rights, Your Control
Players have the right to access, correct, export or request deletion of their personal data. You can exercise any of these rights by contacting ace36 support at [email protected] and we will respond within 30 days.
Defined Retention Periods
ace36 retains personal data only for as long as necessary to fulfil the purpose for which it was collected or to meet legal obligations. Retention periods for each data category are set out in this policy.
Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ace36 will notify affected players without undue delay and take immediate steps to contain and remediate the incident.
01 Introduction
ace36 ("we", "us", "our") operates the online betting and casino platform accessible at ace36.io and any associated interfaces or applications. This Privacy Policy describes how ace36 collects, processes, stores, shares and protects the personal data of individuals who register an account, visit the platform or interact with our services in any capacity ("you", "your", "Player").
ace36 acts as the data controller in respect of the personal data it collects directly from players and visitors. Where ace36 engages third-party service providers to process personal data on its behalf, those providers act as data processors and are contractually bound to process data only in accordance with ace36's instructions and this policy.
This Privacy Policy is incorporated into and must be read alongside the ace36 Terms and Conditions and Responsible Gaming Policy. By registering an account or using any ace36 service, you acknowledge that you have read and understood this policy. If you do not agree with any part of this policy, please do not use the platform.
ace36 is committed to transparency. If you have any questions about how your personal data is handled, please contact us at [email protected] before registering or using the platform.
02 Data We Collect
ace36 collects personal data from you directly when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or otherwise interact with the platform. We also collect certain data automatically when you access the platform through your browser or device.
Registration and account data includes the information you provide when creating an account:
- Full legal name;
- Date of birth (to verify you are 21 years of age or older);
- Email address and mobile phone number;
- Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code;
- Username and encrypted password.
Identity verification data collected to comply with our know-your-customer (KYC) obligations includes:
- Copies of government-issued photo ID (National ID card, passport, driving licence);
- Proof of address documents (utility bill, bank statement dated within 3 months);
- Proof of payment method ownership (screenshots of bKash, Nagad or Rocket accounts registered in your name).
Financial transaction data includes records of all deposits and withdrawals processed through your ace36 account, including transaction amounts in BDT (৳), timestamps, payment method references (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and transaction identifiers. ace36 does not store full card numbers — payment card data is tokenised and handled by our certified payment processing partners.
Gameplay and betting data includes your betting and gaming activity on the platform — game titles accessed, wagers placed, results, session durations, and balance movements. This data is used for account management, fraud prevention, responsible gaming monitoring and regulatory compliance.
Technical and device data collected automatically includes your IP address, browser type and version, operating system, device identifiers, time zone (Bangladesh Standard Time, UTC+6 is our default reference), pages visited, referring URLs, and session duration. This data is collected via server logs and cookies as described in Section 6.
Communications data includes the content of any email, live chat or support ticket exchanges between you and the ace36 support team, together with metadata such as date, time and communication channel.
03 How We Use Your Data
ace36 uses your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining and securing your ace36 account; processing logins; providing customer support. |
| Identity Verification | Verifying your age (21+), identity and payment method ownership in accordance with our KYC obligations. |
| Payment Processing | Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard; maintaining transaction records in BDT. |
| Fraud & Security | Detecting and preventing fraudulent activity, money laundering, multiple-account abuse and other prohibited conduct. |
| Responsible Gaming | Monitoring play patterns to identify potential gambling harm; administering deposit limits, loss limits and self-exclusion requests. |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve platform performance, game selection and user experience. |
| Legal Compliance | Meeting our obligations under applicable laws, responding to lawful requests from authorities, and maintaining required records. |
| Communications | Sending account notifications, security alerts, promotional communications (where you have opted in) and responses to support queries. |
ace36 does not use your personal data for automated decision-making that produces significant legal effects on you without providing an opportunity for human review.
04 Legal Basis for Processing
ace36 processes your personal data on the following legal grounds:
- Contractual necessity: Processing that is required to perform the contract between you and ace36 — including account creation, payment processing, bet settlement and customer support — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
- Legal obligation: Certain processing activities, including identity verification, anti-money-laundering checks and the retention of financial transaction records, are required by law. ace36 carries out this processing to comply with its applicable legal obligations.
- Legitimate interests: ace36 processes certain data — including technical log data, fraud detection signals and aggregated platform analytics — where we have a legitimate interest in doing so that is not overridden by your rights and interests. We conduct balancing tests before relying on this basis.
- Consent: Where ace36 sends you marketing communications by email or other electronic means, we do so on the basis of your freely given, specific and informed consent. You may withdraw consent at any time by contacting [email protected].
05 Sharing Your Data
ace36 does not sell, rent or trade your personal data. We share your data with third parties only in the following limited circumstances:
- Payment processors: bKash, Nagad, Rocket, Upay and our card processing partners receive the transaction data necessary to process your deposits and withdrawals. These providers are certified and contractually bound to process your data securely.
- Identity verification providers: Third-party KYC service providers receive the identity documents and personal data necessary to complete verification checks on our behalf.
- Game content providers: Platform game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi and Spribe receive the session data necessary to deliver and settle their games. These providers do not receive your full profile data.
- IT infrastructure providers: Hosting, cloud storage and cybersecurity vendors who process data on our behalf under strict data processing agreements.
- Legal and regulatory authorities: ace36 will disclose personal data to law enforcement, regulators or courts where required to do so by law, a valid legal order or to protect the rights and safety of ace36 and its players.
- Business transfers: In the event of a merger, acquisition or sale of all or part of the ace36 business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.
All third-party data processors engaged by ace36 are required to implement appropriate technical and organisational security measures and to process personal data only for the purposes specified by ace36.
06 Cookies & Tracking Technologies
ace36 uses cookies and similar tracking technologies on the platform to support essential functionality, remember your preferences, analyse platform usage and assist with fraud prevention.
Types of cookies used by ace36:
- Strictly necessary cookies: Required for the platform to function correctly. These include session cookies that maintain your logged-in state, security tokens and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
- Functional cookies: Store your preferences such as language settings and display options so that you do not need to reconfigure them on each visit.
- Analytics cookies: Collect aggregated, anonymised data about how visitors navigate the platform. This helps us identify performance issues and improve the user experience. No individually identifiable data is shared with analytics providers.
- Security cookies: Used to detect fraudulent logins, bot activity and unusual session behaviour to protect the integrity of your account.
You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from accessing certain features of the platform. ace36 does not use third-party advertising cookies or cross-site tracking technologies for behavioural advertising purposes.
07 Data Retention
ace36 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation / contractual |
| Identity verification documents | Duration of account + 5 years after closure | Anti-money-laundering legal obligation |
| Financial transaction records | 7 years from transaction date | Financial record-keeping legal obligation |
| Gameplay and betting history | Duration of account + 3 years after closure | Contractual / legitimate interest |
| Support communications | 3 years from date of communication | Legitimate interest / dispute resolution |
| Technical log data | 12 months from collection | Legitimate interest / security |
| Marketing consent records | Until consent withdrawn + 3 years | Legal obligation to evidence consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.
08 Your Privacy Rights
As a player or visitor, you have the following rights in relation to your personal data held by ace36. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". ace36 will respond within 30 calendar days of receiving a valid request.
ace36 will not charge a fee for reasonable requests made in good faith. Where a request is manifestly unfounded or excessive, ace36 reserves the right to charge a reasonable administrative fee or decline to respond, with written explanation.
09 Children & Minors
The ace36 platform is strictly intended for adults aged 21 years and older. ace36 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that a minor in your care has registered an account or submitted personal data to ace36, please contact us immediately at [email protected]. We will investigate and act promptly.
ace36 encourages responsible device and account security practices to prevent minors from accessing online gambling services. Players are responsible for ensuring that their ace36 login credentials are not accessible to individuals under the minimum age.
10 Security Measures
ace36 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure or destruction. These measures include:
- TLS/SSL encryption for all data transmitted between your device and the ace36 platform;
- Encrypted storage of sensitive personal data fields, including passwords (stored as salted hashes) and identity document images;
- Access controls ensuring that only authorised ace36 personnel with a legitimate operational need can access personal data, on a strictly role-based basis;
- Intrusion detection and monitoring systems to identify and respond to suspicious access attempts in real time;
- Regular security assessments of our infrastructure, code and third-party integrations;
- Tokenisation of payment card data — full card numbers are never stored on ace36 systems.
While ace36 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also have a responsibility to protect your account by keeping your login credentials confidential and reporting any suspected unauthorised access to [email protected] immediately.
11 Third-Party Links
The ace36 platform may contain references to third-party payment providers, game studios and related services. These references are operational in nature and ace36 does not maintain or control external websites or services. This Privacy Policy applies solely to personal data collected and processed by ace36 directly. ace36 is not responsible for the privacy practices of any third party whose services are accessed in connection with the platform. We encourage you to review the privacy policies of any third-party service providers you interact with.
12 Policy Updates
ace36 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or platform features. Where a material change is made, ace36 will provide reasonable advance notice via the platform or by email to your registered address. The effective date of the current version is stated at the top of this document.
Your continued use of the ace36 platform following the effective date of any update constitutes your acknowledgement of the revised policy. If you do not accept a revised policy, please cease using the platform and contact support to arrange account closure.
13 Contact & Complaints
If you have any questions, concerns or requests relating to this Privacy Policy or the way ace36 handles your personal data, please contact our support team:
- Email: [email protected]
- Subject line for privacy matters: "Privacy Rights Request" or "Privacy Complaint"
- Response time: ace36 targets an initial response within 24 hours and a full substantive response within 30 calendar days of receiving a valid request.
- Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).
If you are not satisfied with ace36's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection or supervisory authority in your jurisdiction.
ace36 treats all privacy complaints seriously and will acknowledge receipt of your complaint within 24 hours. We are committed to resolving all data protection concerns fairly and promptly. For adults aged 21 and above only. Gambling can be addictive — please play responsibly.
Have Questions About Your Data?
Contact the ace36 support team, review our FAQ, or explore our Responsible Gaming resources. We are here to help. 21+ only.