ace64 Privacy Policy

ace64 is an online casino and sports betting platform operating in the Bangladesh market. As part of delivering a safe, personalised, and legally compliant gaming experience, ace64 necessarily collects and processes certain categories of personal data from registered players and, to a limited extent, from visitors to the platform who have not yet registered.

This Policy applies in full to all data processing activities carried out by ace64 in connection with the platform. It covers data collected through the website, any mobile-optimised interface, customer support channels, promotional communications, and payment processing interactions. This Policy does not apply to third-party websites or services that may be linked to or from the ace64 platform — those third parties operate under their own independent privacy policies.

ace64 takes its data protection obligations seriously. We process personal data only for the purposes described in this Policy and retain it only for as long as is necessary. We do not sell personal data to third parties and we do not use personal data for purposes that are incompatible with the reasons for which it was originally collected.

This Policy was last reviewed and updated in January 2026. The most current version of this Policy is always available on the ace64 website at ace64.io/privacy-policy. We recommend that you review this page periodically.

ace64 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through technical systems when you use the platform, and from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect are described below.

2.1 Registration & Identity Data

When you create an ace64 account, we collect: your full legal name, date of birth, mobile phone number, and a password of your choosing. This information is necessary to open and manage your account, verify that you meet the minimum age requirement of 21 years, and communicate with you about your account.

2.2 Know Your Customer (KYC) & Verification Data

Prior to processing any withdrawal, ace64 is required to verify your identity. This requires you to submit a copy of a valid Government of Bangladesh National Identity Card (NID) or a valid passport. Where the name or address on the NID does not match your registration data, we may request supporting documentation such as a utility bill or bank statement dated within the last three months. KYC documents are processed securely and stored in encrypted form.

2.3 Financial & Transaction Data

ace64 collects transaction records associated with your account, including: deposit amounts and timestamps, withdrawal requests and processing status, account balance history, bet history, and the payment method identifiers (e.g., registered mobile number for bKash or Nagad, masked card number for Visa or Mastercard) associated with each transaction. ace64 does not store full card numbers or mobile wallet PINs — payment authentication is handled directly by the respective payment provider.

2.4 Technical & Usage Data

ace64 automatically collects certain technical data when you access the platform, including: IP address, device type and model, operating system, browser type and version, session start and end times, pages visited, games played, bet amounts and outcomes, and in-platform interaction logs. This data is collected through server logs and first-party analytics tools and is used to maintain platform security, detect fraud, and improve the player experience.

2.5 Communications Data

If you contact ace64 support via email or live chat, we retain records of that correspondence, including the content of your messages and any attachments, for the purposes of resolving your query and maintaining a service history.

2.6 Responsible Gaming Data

Where you use ace64's responsible gaming tools — including deposit limits, session time limits, cooling-off periods, or self-exclusion — we record these settings and their activation history. This data is retained to ensure that the restrictions you have requested are enforced correctly and consistently, including after account re-opening where applicable.

ace64 uses the personal data it collects only for the purposes set out below. We do not use your data in ways that are incompatible with these stated purposes without first seeking your explicit consent.

ace64 does not use your personal data to make fully automated decisions that produce significant legal or similarly significant effects on you, without your knowledge or without a human review mechanism being available.

ace64 processes personal data only where a valid legal basis exists for doing so. The legal bases on which ace64 relies are as follows:

• Contractual necessity: The majority of data processing carried out by ace64 is necessary for the performance of the contract between ace64 and the player — specifically, to operate your account, process your transactions, and provide the gaming services you have signed up for.
• Legal obligation: ace64 is required by anti-money laundering (AML) obligations and responsible gaming standards to collect and retain certain data, including KYC documentation and transaction records.
• Legitimate interests: ace64 processes technical and usage data on the basis of its legitimate interests in maintaining platform security, preventing fraud, and improving its services, where those interests are not overridden by your privacy rights.
• Consent: Where ace64 sends you promotional communications about bonuses, new games, or seasonal promotions, it does so on the basis of your consent. You may withdraw consent for marketing communications at any time by contacting [email protected] or by using the unsubscribe function in any promotional message.

ace64 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. We share personal data only in the following limited situations:

• Payment processors: To process deposits and withdrawals, ace64 shares the minimum necessary transaction data with the relevant payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard). Each of these providers operates under its own privacy policy and data handling standards.
• Identity verification providers: To complete KYC verification, ace64 may engage a specialist identity verification service. Any such provider is contractually bound to process your data solely for the purpose of verification and to delete it upon completion.
• Game providers: When you play a game supplied by a third-party provider (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), limited technical session data may be passed to that provider's game servers for the purpose of delivering the game and recording its outcome. Game providers do not receive your full profile or financial data.
• Legal authorities: ace64 will disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where required to do so by applicable law, court order, or binding regulatory direction. ace64 will, where legally permitted, notify the affected player of such a disclosure.
• Internal group entities: Where ace64 operates as part of a corporate group, data may be shared with related entities for internal administrative purposes, subject to the same data protection standards as set out in this Policy.

All third parties with whom ace64 shares personal data are required to maintain appropriate technical and organisational security measures and to process the data only for the purposes specified by ace64.

ace64 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, and in any event for no longer than required by applicable law. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of the active account relationship, plus a minimum of five years following account closure, in accordance with standard financial record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five years from the date of account closure or the date of the last transaction, whichever is later, in accordance with AML compliance requirements.
• Transaction and bet history: Retained for a minimum of five years from the date of the transaction.
• Technical and usage logs: Retained for up to 12 months on a rolling basis, unless specific logs are required to be retained in connection with an ongoing fraud investigation or dispute.
• Customer support communications: Retained for three years from the date of the last interaction in the relevant support thread.
• Responsible gaming data: Self-exclusion records are retained indefinitely to prevent re-registration by individuals who have requested permanent exclusion. Other responsible gaming settings are retained for five years from account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which you can no longer be identified) may be retained indefinitely for statistical and analytical purposes.

ace64 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform effectively, remember your preferences, and analyse how the platform is used. The categories of cookies used by ace64 are described below.

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your authenticated session, remember your language preferences, and enable core security features. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: These cookies remember choices you make (such as game preferences, display settings, and responsible gaming tool configurations) to provide a more personalised experience. They are not used for advertising purposes.
• Analytics cookies: ace64 uses first-party analytics to understand how players navigate the platform, which games are most popular, and where technical issues arise. This data is aggregated and anonymised before analysis.
• Security cookies: These cookies support fraud detection and account security features, including identifying unusual login patterns and preventing credential stuffing attacks.

ace64 does not use third-party advertising cookies or serve behavioural advertising. You may manage browser-level cookie settings through your browser's privacy controls. Please note that disabling strictly necessary cookies will impair your ability to use the platform.

ace64 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ace64 platform.
• Encrypted data storage for all sensitive personal data, including KYC documents and financial records, at rest.
• Access controls: Personal data is accessible only to ace64 staff members and systems that require it to perform their specific function. Access is role-based and logged.
• Two-factor authentication (2FA) available to all players via account settings to protect against unauthorised account access.
• Regular security assessments of the platform's infrastructure, including penetration testing and vulnerability scanning.
• Incident response procedures: In the event of a data security incident that is likely to result in a risk to your rights or freedoms, ace64 will notify affected players promptly with details of the incident and the steps being taken to address it.

While ace64 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your own account credentials and for notifying ace64 immediately at [email protected] if you believe your account has been compromised.

As a player whose personal data is processed by ace64, you hold the following rights with respect to that data. To exercise any of these rights, please contact ace64 at [email protected] with the subject line "Data Rights Request". ace64 will respond to all verifiable data rights requests within 30 days.

Please note that certain rights, in particular the right to erasure, are subject to overriding legal retention obligations (for example, AML record-keeping requirements). Where ace64 cannot fulfil a data rights request in full, it will explain the specific reason in its response.

ace64 strictly prohibits the use of its platform by any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. The age verification procedures applied at registration and during KYC are designed to identify and prevent underage access.

If ace64 becomes aware that personal data has been collected from a person who was under the age of 21 at the time of collection, that data will be permanently deleted and the associated account will be closed immediately. Any balance held in the account will be reviewed in accordance with the terms of the ace64 Terms & Conditions.

If you are a parent or guardian and you believe that your child (under 21) has registered on ace64, please contact us immediately at [email protected] with the subject line "Underage Account Report". We treat all such reports as high priority and will investigate and respond within 48 hours.

The ace64 platform integrates with a number of third-party services to deliver its full range of features. These include game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and identity verification providers. Each of these third parties operates under its own privacy policy and is independently responsible for its own data processing activities.

ace64 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external service whose functionality is accessed through or alongside the ace64 platform. When you interact with a live dealer game powered by Evolution Gaming, for example, your session data is processed partly by Evolution Gaming's infrastructure. We recommend that you review the privacy policies of any third-party service you interact with through ace64.

ace64 selects its third-party partners carefully and requires all partners who process personal data on ace64's behalf to maintain security standards commensurate with those applied by ace64 itself. Data processor agreements are in place with all relevant third parties.

ace64 reserves the right to amend this Privacy Policy at any time. Where a material change is made — meaning a change that substantively alters the way in which your personal data is collected or used — ace64 will provide advance notice via a platform notification and, where practicable, by direct communication to your registered mobile number or email address.

The effective date of the current version of this Policy is stated at the top of this document. Your continued use of the ace64 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must discontinue use of the platform and may request account closure by contacting [email protected].

Minor amendments — such as corrections of typographical errors, clarifications that do not change the substance of the Policy, or updates to contact details — may be made without advance notice. The updated version will be published on this page with the revised effective date.

All privacy-related enquiries, data rights requests, complaints, and underage account reports should be directed to the ace64 support team using the contact details below. Please include your registered account username and a brief description of your request in all correspondence to enable prompt handling.

Email: [email protected]

Subject line guidance:

• Data access, rectification, erasure, portability, or restriction requests: "Data Rights Request"
• Marketing opt-out: "Marketing Opt-Out"
• Underage account reports: "Underage Account Report"
• Security incident or suspected account compromise: "Security Incident"
• General privacy enquiries: "Privacy Enquiry"

Response times: ace64 aims to acknowledge all privacy-related correspondence within 24 hours (Bangladesh Standard Time, UTC+6). Full written responses to data rights requests will be provided within 30 calendar days of identity verification. Urgent matters such as underage account reports and security incidents are treated as high priority with a 48-hour response target.