ace77 Privacy
Policy

1. Introduction & Scope

This Privacy Policy ("Policy") explains how ace77 ("ace77", "we", "us", "our"), the operator of the online gaming platform accessible at ace77.onl, collects, processes, stores, and protects personal data relating to individuals ("you", "your", "the Player") who access or use the ace77 platform, including all products and services offered therein.

This Policy applies to all personal data collected through the ace77 website, mobile-optimised web application, customer support channels (including email correspondence to [email protected]), promotional communications, and any other interaction you have with ace77 as an operator. It covers all players based in Bangladesh and any other jurisdictions from which the ace77 platform is lawfully accessed.

This Policy should be read alongside the ace77 Terms & Conditions and the Responsible Gaming Policy. By creating an ace77 account or continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood how we handle your personal data as described herein.

2. Data We Collect

ace77 collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the platform, and in limited cases from trusted third-party verification partners. The categories of personal data we collect are described below.

2.1 Registration & Identity Data

When you create an ace77 account, we collect the information you provide during the registration process, including:

• Full legal name as it appears on your government-issued identification.
• Date of birth (to confirm you are 18 years of age or older).
• Email address and mobile phone number (Bangladesh mobile number required for SMS verification).
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other).
• Chosen username and encrypted password.
• Security questions and answers (if configured).

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, ace77 may request and store copies of:

• National Identity Card (NID), passport, or driving licence.
• Proof of address documents (utility bills, bank statements, or mobile banking statements issued within the last 3 months).
• Selfie or live photo used for biometric verification where applicable.
• Proof of payment method ownership (confirmation screenshots from bKash, Nagad, Rocket, Upay, or bank account statements).

2.3 Financial & Transaction Data

ace77 records all financial transactions conducted through your account, including:

• Deposit amounts, dates, and payment method references (bKash transaction IDs, Nagad reference numbers, bank transfer references, card last 4 digits).
• Withdrawal requests, amounts, and processing status.
• Account balance history and bonus credit records.
• Wagering history: game titles played, bet amounts, outcomes, and timestamps.

2.4 Technical & Usage Data

When you access ace77.onl, we automatically collect technical information about your device and browsing session:

2.5 Communications Data

If you contact ace77 via email ([email protected]) or through in-platform messaging, we retain records of that correspondence, including the content of your messages and our responses, for customer service quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Use Your Data

ace77 uses your personal data only for specific, legitimate purposes that are directly related to the operation of the platform and the fulfilment of our legal obligations. We do not use your data for any purpose that you would not reasonably expect. The primary purposes for which we process your data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your profile, and enable you to access all platform features.
• Age verification: To confirm that you are 18 years of age or older before permitting real-money wagering activity, in accordance with our strict 18+ policy.
• Payment processing: To process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, Mastercard) and to maintain accurate financial records.
• KYC and AML compliance: To satisfy Know Your Customer and Anti-Money Laundering obligations required under international gaming regulations and financial crime prevention frameworks.
• Platform security: To detect and prevent fraud, unauthorised account access, collusion, bonus abuse, and other prohibited activities described in the ace77 Terms & Conditions.
• Responsible gaming monitoring: To identify players who may be exhibiting signs of problem gambling behaviour, apply player-requested limits, and fulfil self-exclusion requests.
• Customer support: To respond to your enquiries, resolve complaints, process disputes, and maintain records of support interactions.
• Personalisation: To tailor game recommendations, promotional offers, and platform content to your preferences and play history.
• Marketing communications: To send you promotional emails, SMS notifications, and in-platform messages about offers and new games — but only where you have provided explicit consent and have not subsequently opted out.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, and continuously improve the ace77 platform experience for all players.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms & Conditions.

4. Legal Basis for Processing

ace77 processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

5. Data Sharing & Disclosure

ace77 does not sell, rent, or trade your personal data to third-party advertisers or marketers under any circumstances. We share your data only where necessary, with trusted partners who are contractually bound to handle your information in accordance with applicable data protection standards, or where we are legally required to do so.

5.1 Categories of Recipients

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard receive only the transaction data necessary to process your deposits and withdrawals. These providers operate under their own regulated data protection frameworks.
• Identity verification providers: Third-party KYC and AML screening services that assist ace77 in verifying player identities and screening against financial crime watchlists. These partners process data strictly under ace77's instructions.
• Game providers: Technology partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and game-relevant data to deliver their games on the ace77 platform. These providers do not receive your full personal profile.
• IT and hosting providers: Cloud infrastructure and server hosting partners who provide the technical environment for ace77. All hosting partners are contractually bound to process data solely on ace77's instructions and implement appropriate security measures.
• Fraud prevention services: Specialist fraud detection and cybersecurity partners who help ace77 identify suspicious activity and protect the platform from bad actors.
• Legal and regulatory authorities: ace77 will disclose personal data to law enforcement agencies, gaming regulators, financial intelligence units, or courts where required to do so by a lawful order or legal obligation.

5.2 International Data Transfers

Some of the third-party service providers engaged by ace77 operate in jurisdictions outside Bangladesh. Where personal data is transferred internationally, ace77 ensures that appropriate safeguards are in place, such as contractual clauses that require the recipient to maintain a standard of data protection equivalent to that applied by ace77 under this Policy.

6. Cookies & Tracking Technologies

ace77 uses cookies and similar tracking technologies (such as pixel tags and local storage objects) on ace77.onl to enable essential platform functionality, improve performance, and where you have consented, to support analytics and personalisation.

6.1 Types of Cookies Used

6.2 Managing Cookies

You can control cookie settings through your web browser. Most modern browsers allow you to block all cookies, accept only first-party cookies, or clear existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your ace77 account and using core platform features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

7. Data Retention

ace77 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The retention periods we apply to different categories of data are summarised below:

Upon expiry of the applicable retention period, ace77 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you as an individual.

8. Your Privacy Rights

ace77 respects your rights over your personal data. Depending on applicable data protection laws, you may be entitled to exercise some or all of the following rights in relation to the personal data we hold about you:

To exercise any of the above rights, please contact our data team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 72 hours and provide a full response within 30 days. In certain circumstances (for example, where deletion would conflict with our AML record-keeping obligations), we may not be able to fully comply with a deletion request, and we will explain the reason for any such limitation clearly.

9. Data Security Measures

ace77 implements a multi-layered security framework designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption: All data transmitted between your device and ace77.onl is encrypted in transit using industry-standard TLS protocols, preventing interception by third parties.
• Data encryption at rest: Sensitive data stored on ace77 servers, including identity documents and payment references, is encrypted at rest using AES-256 encryption.
• Access controls: Personal data is accessible only to ace77 staff and authorised partners who have a documented operational need to access it. Role-based access controls and multi-factor authentication are enforced for all internal systems.
• Penetration testing: ace77 engages qualified cybersecurity professionals to conduct regular penetration tests and vulnerability assessments of the platform infrastructure.
• Anomaly detection: Automated monitoring systems are in place to detect unusual login patterns, suspicious transaction activity, and potential data breaches in real time.
• Staff training: All ace77 staff who handle personal data receive mandatory data protection training and are contractually bound by confidentiality obligations.
• Incident response: In the event of a data security incident that poses a risk to your rights, ace77 will notify affected players and relevant authorities within the timeframes required by applicable law.

10. Third-Party Services

The ace77 platform integrates with a number of third-party service providers to deliver its full range of features, including game content from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as payment processing partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard.

When you interact with a third-party service embedded within the ace77 platform — for example, when you launch a live dealer game powered by Evolution Gaming or process a deposit via bKash — that third-party provider may independently collect and process certain data about your interaction in accordance with their own privacy policies. ace77 is not responsible for the data practices of these third parties and encourages you to review their respective privacy policies for full information on how they handle your data.

ace77 carefully evaluates all third-party integrations and contractually requires all service providers who process personal data on our behalf to maintain security and confidentiality standards that meet or exceed those described in this Policy.

11. Changes to This Policy

ace77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, the services we offer, applicable legal requirements, or the recommendations of data protection authorities.

When we make material changes to this Policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify registered players by sending an email to the address associated with their ace77 account, or by displaying a prominent notice on the ace77.onl platform, at least 14 days before the changes take effect. Your continued use of the ace77 platform after the effective date of any updated Policy constitutes your acknowledgement of the revised terms.

For non-material changes (such as corrections of typographical errors, clarifications of existing language, or updates to contact details), we may update this Policy without prior notice, though the "Last updated" date at the top of the document will always reflect the date of the most recent revision. We recommend that you review this Policy periodically to stay informed about how ace77 protects your personal data.

12. Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ace77 handles your personal data, please contact our dedicated data protection team using the details below. We are committed to responding to all data-related enquiries promptly and transparently.

When submitting a privacy rights request, please include your full name, your registered ace77 username, and the email address associated with your account so that we can verify your identity before processing your request. ace77 takes all privacy enquiries seriously and will never use a data subject request as grounds to restrict your use of the platform.