ace677 Privacy Policy

01 Data We Collect

ace677 collects personal data from players for the purposes of account management, identity verification, payment processing, fraud prevention, and regulatory compliance. We apply the principle of data minimisation — meaning we collect only the information that is genuinely necessary for the specific purpose identified at the time of collection.

The categories of personal data we collect from players registered in Bangladesh are described below.

1.1 Registration Data

When you create an ace677 account, we collect the following information:

• Full legal name (as it appears on your National ID).
• Date of birth (to verify the 18+ age requirement).
• Email address.
• Mobile phone number registered in Bangladesh.
• Username and encrypted password.
• Preferred currency (Bangladeshi Taka, BDT).

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to verify that all players meet the minimum age of 18, we collect the following documentation before processing your first withdrawal:

• A copy or photograph of a valid Bangladesh National ID (NID) or passport.
• A selfie photograph for facial identity confirmation.
• Proof of payment method ownership (e.g., screenshot of your bKash or Nagad wallet displaying your registered name and number).
• Source-of-funds documentation may be requested for large withdrawals at our discretion.

1.3 Financial Data

We collect transaction data relating to your deposits and withdrawals, including payment method type (bKash, Nagad, Rocket, Upay, bank transfer), transaction reference numbers, transaction amounts in BDT, and timestamps. We do not store full mobile banking PINs or full bank card numbers on our servers. Payment authentication is handled directly by your payment provider.

1.4 Technical & Usage Data

When you access ace677, our servers automatically collect certain technical data, including:

• IP address and approximate geographic location.
• Device type, operating system, and browser version.
• Pages visited, features used, and time spent on the platform.
• Session login and logout timestamps.
• Betting and gaming history associated with your account.

1.5 Communications Data

If you contact our support team via live chat, email, or WhatsApp, we retain a record of that correspondence. This includes the content of your messages, the channel used, and the timestamp of each interaction. Communication records are retained for up to five years for dispute resolution and quality assurance purposes.

02 How We Use Your Data

ace677 uses your personal data only for legitimate, clearly defined purposes. We do not process your data in ways that are incompatible with the purpose for which it was originally collected. The table below sets out the primary purposes for which we use your data and the legal basis for each use.

2.1 Marketing Communications

ace677 may send you promotional communications about bonuses, special offers, seasonal promotions (such as BPL cricket season offers, Eid promotions, and Pohela Boishakh campaigns), and new game launches — but only where you have actively opted in to receive such communications during registration or in your account settings. You may withdraw consent for marketing communications at any time by updating your notification preferences or by contacting support.

03 Data Sharing & Third Parties

ace677 does not sell, rent, or commercially trade your personal data. We share data with third parties only where it is necessary to operate the platform, comply with legal obligations, or protect the safety and integrity of the service. All third-party service providers who process data on our behalf are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to ace677.

3.1 Payment Processors

To facilitate deposits and withdrawals, we share limited financial data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and Visa/Mastercard networks. The data shared is limited to what is strictly necessary to initiate and confirm each transaction. Each payment provider operates under their own privacy policy and data handling standards.

3.2 Game Providers

Game content on the ace677 platform is provided by certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive a session token that allows them to authenticate your game session, but they do not receive your full personal profile, NID documents, or payment details.

3.3 Identity Verification Services

To conduct KYC verification, ace677 may engage authorised identity verification partners. These partners process your submitted NID documents solely for the purpose of identity confirmation and are prohibited from retaining or using your documents beyond that specific purpose.

3.4 Legal & Regulatory Disclosure

ace677 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so, or where we reasonably believe that disclosure is necessary to prevent fraud, money laundering, or other illegal activity. We will notify you of any such disclosure where we are legally permitted to do so.

04 Cookies & Tracking Technologies

ace677 uses cookies and similar tracking technologies on its platform to maintain session security, analyse usage patterns, and deliver a personalised experience. This section explains the types of cookies we use and how you can manage them.

4.1 Types of Cookies We Use

4.2 Managing Cookie Preferences

You can control non-essential cookies through your browser's settings panel. Most modern browsers allow you to block, delete, or restrict cookies on a per-site basis. Please note that disabling functional cookies may affect your experience on the ace677 platform — for example, your display preferences may not be saved between sessions. Disabling essential or security cookies is not supported and will prevent you from logging in to your account.

4.3 Third-Party Cookies

Certain game content delivered by third-party providers such as Pragmatic Play and Evolution Gaming may set their own session cookies within the game iframe. These cookies are scoped to the game provider's domain and are governed by each provider's own privacy and cookie policy. ace677 does not control these cookies directly.

05 Data Retention & Storage

ace677 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our anti-money-laundering obligations. The retention periods below reflect standard requirements for online gambling platforms operating in the Bangladesh market.

5.1 Data Storage Location

Player data is stored on servers located in secure data centres. Where data is processed by third-party service providers, those providers are contractually required to maintain security standards equivalent to those applied by ace677 directly. Data transfers to third-party processors are governed by data processing agreements that require appropriate technical and organisational safeguards.

5.2 Account Deletion Requests

If you request the permanent closure of your ace677 account, we will anonymise or delete personal data that is no longer required for a legal or compliance purpose within 30 days of processing your request. Transaction records and KYC documents will be retained for the mandatory periods described above even after your account is closed, as these retention obligations cannot be waived by individual request.

06 Data Security Measures

ace677 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect player information against unauthorised access, loss, disclosure, or destruction.

6.1 Technical Safeguards

• 256-bit SSL/TLS encryption on all data in transit between your device and ace677 servers.
• AES-256 encryption at rest for all stored personal and financial data.
• Web application firewall (WAF) to block malicious traffic, injection attacks, and brute-force login attempts.
• Two-factor authentication (2FA) available on all player accounts and mandatory for all internal staff accounts.
• Intrusion detection and monitoring with 24/7 automated alerting for anomalous activity.
• Regular penetration testing and third-party security audits conducted at least annually.

6.2 Organisational Safeguards

• Access to player personal data is restricted to staff members with a documented operational need.
• All staff with access to personal data receive mandatory privacy and data security training.
• Internal data access is logged and reviewed on a regular basis.
• A formal incident response procedure is in place for data breaches, including player notification protocols where required.

6.3 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ace677 will notify affected players without undue delay. Notifications will be sent to the email address or mobile number registered on your account and will include a description of the nature of the breach, the categories of data affected, and the steps we have taken and recommend you take in response.

07 Your Privacy Rights

As a player on the ace677 platform, you have the following rights with respect to your personal data. These rights may be subject to certain limitations where their exercise conflicts with our legal obligations or the rights of third parties.

7.1 Right of Access

You have the right to request a copy of the personal data that ace677 holds about you. Access requests will be fulfilled within 30 days of receipt and verification of your identity. Data will be provided in a structured, commonly used, machine-readable format where technically feasible.

7.2 Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For registration data such as your email address or phone number, corrections can be made directly through your account settings. For identity documents, please contact support to initiate a re-verification process.

7.3 Right to Erasure

Subject to our legal retention obligations described in Section 5, you have the right to request the deletion of your personal data. We will action erasure requests within 30 days. Please note that data we are legally required to retain — such as KYC documents and financial transaction records — cannot be erased on request during the applicable retention period.

7.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction over erasure — you may request that we restrict the processing of your personal data. During a restriction period, we will continue to store the data but will not process it further except with your consent or for the establishment of legal claims.

7.5 Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including profiling for responsible gaming monitoring purposes. We will cease the processing in question unless we can demonstrate compelling legitimate grounds that override your interests.

7.6 Right to Withdraw Consent

Where processing of your personal data is based on your consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal. To withdraw marketing consent, update your notification settings in your account or contact support.

08 Contact & Privacy Queries

If you have any questions, concerns, or complaints relating to this Privacy Policy or the way in which ace677 processes your personal data, please contact us in the first instance through one of the following channels:

• Live Chat: Available 24/7 on the ace677 platform with an average response time of 2–5 minutes.
• Email: [email protected] — privacy-related queries are handled by our dedicated data team.
• WhatsApp: +880 17XX-XXXXXX (available during Bangladesh Standard Time business hours, UTC+6).

We take all privacy concerns seriously and aim to resolve queries at the first point of contact. Where a concern cannot be resolved through our standard support channels, it will be escalated to our data protection team for formal review.

8.1 Policy Updates

ace677 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, technology, or legal requirements. The most current version of the Privacy Policy is always available at ace677.app/privacy-policy. Where changes are material, we will notify registered players via the email address or mobile number associated with their account. Continued use of the ace677 platform following notification of a policy update constitutes acceptance of the revised Privacy Policy.