ace88 Privacy Policy —
How We Protect Your Personal Data

1 Data Controller

For the purposes of this Privacy Policy, ace88 — operating the online gaming and sports betting platform at https://ace88.online — acts as the data controller in respect of all personal data collected from players and visitors to the platform. As the data controller, ace88 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and in a transparent manner.

If you have any questions, concerns, or requests relating to the processing of your personal data by ace88, you may contact us at any time via the channels listed in Section 14 of this Privacy Policy. ace88 is committed to responding to all data-related enquiries promptly and in accordance with applicable data protection principles.

2 Data We Collect

ace88 collects the following categories of personal data from players during and after the account registration process:

2.1 Identity Data

This includes your full legal name as it appears on your government-issued identification document, your date of birth, your gender, and a copy of your national identity card (NID) or passport submitted during the KYC verification process.

2.2 Contact Data

This includes your registered Bangladesh mobile phone number, your email address, and — where provided — your residential address in Bangladesh. Contact data is used for account communication, withdrawal confirmations, and marketing communications (where consent has been given).

2.3 Financial Data

This includes the mobile wallet identifiers (bKash number, Nagad number, Rocket number, Upay number) and card details (masked card number, card type) associated with deposits and withdrawals made on the ace88 platform. ace88 does not store full card numbers or CVV codes on its own servers — card payment data is processed and tokenised by our certified payment processing partners.

2.4 Transaction Data

This includes the complete history of all deposits, withdrawals, bonus credits, wagers placed, games played, and account balance movements associated with your ace88 account. Transaction records are retained for a minimum of five years as required by our anti-money laundering obligations.

2.5 Technical Data

This includes your IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, and other technical identifiers generated automatically when you access the ace88 platform. Technical data is used for fraud prevention, platform security, and aggregate analytics.

2.6 Behavioural Data

This includes data about your gaming activity on the ace88 platform — such as the games you play, your average session length, your wagering patterns, and your use of responsible gaming tools. Behavioural data is used to personalise your experience, identify potential problem gambling behaviour, and improve the platform.

2.7 Communications Data

This includes the content of any communications you send to or receive from the ace88 customer support team via live chat, email, or any other channel. Communications records are retained for a minimum of 24 months and are used for quality assurance, dispute resolution, and staff training purposes.

3 How We Collect Data

ace88 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated technical collection: Data generated automatically by your device and browser each time you access the ace88 platform, including IP address, session timestamps, and page interaction data collected via server logs and first-party cookies.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when a deposit or withdrawal is processed on your account.
• Identity verification partners: Data returned by our KYC verification service providers when verifying the authenticity of documents submitted by players, such as NID validation results.
• Internal fraud and risk systems: Data generated by ace88's internal anti-fraud and responsible gaming monitoring systems based on analysis of your account activity patterns.

4 Purposes of Processing

ace88 processes your personal data for the following specific and defined purposes:

• Account creation and management: To register and maintain your ace88 account, verify your identity and age, and provide you with access to the platform and its services.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records for your account.
• KYC compliance: To verify your identity and age in accordance with our obligations to prevent underage gambling, money laundering, and fraud.
• Customer support: To respond to your queries, resolve complaints, and provide assistance via live chat and email.
• Platform security and fraud prevention: To protect the ace88 platform and its players from fraudulent activity, multi-accounting, bonus abuse, and other prohibited behaviours.
• Responsible gaming: To monitor your gaming behaviour for indicators of problem gambling and to apply protective measures where appropriate, including proactive outreach and account-level restrictions.
• Platform improvement: To analyse aggregate usage data and improve the performance, reliability, and user experience of the ace88 platform.
• Legal compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records required by law.
• Marketing communications (where consented): To send you promotional offers, bonus notifications, and event-based communications via email or SMS, where you have explicitly opted in to receive such communications.

5 Legal Basis for Processing

ace88 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being processed:

5.1 Contractual Necessity

The processing of your identity data, contact data, financial data, and transaction data is necessary for the performance of the contract between you and ace88 — specifically, to operate your account, process your deposits and withdrawals, and deliver the gaming services you have requested.

5.2 Legal Obligation

The processing of identity data and financial data for KYC verification purposes, and the retention of transaction records, is necessary for ace88 to comply with its legal obligations in respect of anti-money laundering, fraud prevention, and responsible gaming.

5.3 Legitimate Interests

The processing of technical data and behavioural data for platform security, fraud prevention, and responsible gaming monitoring is carried out on the basis of ace88's legitimate interest in operating a safe, fair, and secure platform. This processing is carried out in a manner that does not override your rights and interests as a data subject.

5.4 Consent

The processing of your contact data for direct marketing purposes — including promotional emails and SMS notifications — is carried out on the basis of your explicit consent, given at the time of registration or subsequently via the account dashboard. You may withdraw your consent to marketing communications at any time without affecting the lawfulness of processing carried out prior to the withdrawal of consent.

6 Data Sharing & Third Parties

6.1 Payment Processors

ace88 shares financial data with its certified payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to the extent strictly necessary to process deposits and withdrawals on your account. These partners are contractually bound to handle your data securely and to use it only for the purpose of processing your specific transaction.

6.2 Identity Verification Partners

ace88 may share identity data — including your name, date of birth, and copies of your identification documents — with its appointed KYC verification service providers for the sole purpose of verifying your identity and age in accordance with our legal obligations. These providers are bound by strict data processing agreements and are not permitted to use your data for any other purpose.

6.3 Legal and Regulatory Authorities

ace88 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities in Bangladesh or internationally where required to do so by law, court order, or other lawful authority. Such disclosures will be limited to the minimum data necessary to comply with the specific legal requirement in question.

6.4 Internal Service Providers

ace88 may share personal data with carefully selected third-party technology and infrastructure providers — such as cloud hosting providers and customer support platform vendors — that process data on behalf of ace88 under the terms of a binding data processing agreement. These providers act as data processors and are not permitted to use your data for their own purposes.

6.5 No Sale of Data

ace88 does not sell, rent, barter, or otherwise commercially transfer your personal data to any third party for marketing, advertising, or any other commercial purpose. This restriction applies without exception to all categories of personal data described in Section 2 of this Privacy Policy.

7 Data Retention

ace88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal obligations. The specific retention periods applicable to each category of personal data are set out in the table in Section 2.7 of this Privacy Policy.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its reconstruction or re-identification. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained indefinitely for aggregate statistical and analytical purposes, as it no longer constitutes personal data.

Where a player requests deletion of their personal data prior to the expiry of the applicable retention period, ace88 will action that request to the extent that it is not overridden by a legal obligation to retain the data. In such cases, ace88 will notify the player of the specific legal obligation that prevents full deletion and will confirm the date on which the remaining data will be deleted.

8 Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function efficiently, to remember your preferences, and to provide analytical information to website operators. The ace88 platform uses cookies and similar technologies including local storage objects and session identifiers.

8.2 Types of Cookies Used

• Essential cookies: Required for the ace88 platform to function. These include session authentication cookies that keep you logged in during your playing session and security cookies that help detect fraudulent account access. These cookies cannot be disabled without preventing access to the platform.
• Functional cookies: Used to remember your language preferences, display settings, and responsible gaming tool configurations across sessions. These cookies improve your experience but are not strictly required for the platform to function.
• Analytical cookies: Used to collect aggregate, anonymised data about how players interact with the ace88 platform — such as which pages are visited most frequently and how long players spend on different sections. This data is used solely to improve the platform and is not linked to individual player identities.

8.3 Managing Cookies

You may configure your browser to block or delete cookies at any time. However, please note that disabling essential cookies will prevent you from logging in to your ace88 account and using the platform. Disabling functional or analytical cookies will not affect your ability to access the platform but may result in a less personalised experience. Instructions for managing cookies are available in the help documentation of your browser.

9 Security Measures

ace88 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the ace88 platform, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Encrypted data storage for all sensitive personal and financial data held on ace88 servers, using industry-standard encryption algorithms.
• Role-based access controls limiting internal access to player personal data to only those members of the ace88 team whose specific job function requires such access.
• Comprehensive access logging recording all internal access to player data by ace88 staff, with logs reviewed by the security team on a regular basis.
• Multi-factor authentication requirements for all internal ace88 staff accounts that have access to player data systems.
• Regular security assessments of the ace88 platform and infrastructure to identify and remediate potential vulnerabilities before they can be exploited.

Despite these measures, no platform can guarantee absolute security. In the unlikely event of a data breach that poses a significant risk to your rights and interests, ace88 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

10 Exercising Your Rights

To exercise any of the data rights described in this Privacy Policy — including the right of access, rectification, erasure, restriction, portability, or objection — please contact the ace88 data privacy team via one of the following channels:

• Live chat: Available 24 hours a day, 7 days a week, directly from the ace88 platform. For data rights requests, please clearly state "Data Privacy Request" at the start of your message so the query can be directed to the appropriate team immediately.
• Email: [email protected] — please include your registered account username, your registered mobile number, and a clear description of the specific right you wish to exercise.

ace88 will acknowledge receipt of your request within 5 business days and will fulfil the request within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it before the expiry of the initial 30-day period.

In order to protect player privacy, ace88 may be required to verify your identity before processing a data rights request. This may involve asking you to confirm certain account details or to resubmit identification documents via the KYC verification process.

11 Children's Privacy

The ace88 platform is strictly restricted to individuals who are 21 years of age or older. ace88 does not knowingly collect, process, or retain personal data from any individual below the age of 21. If ace88 discovers, at any point, that personal data has been collected from an individual below the minimum age requirement — whether through deliberate misrepresentation or otherwise — that data will be permanently deleted and the associated account will be closed immediately, with all balances forfeited.

If you have reason to believe that a minor has registered an account with ace88 or that personal data of a minor is being processed on the ace88 platform, please contact the support team immediately at [email protected] so that the matter can be investigated and resolved without delay.

12 Third-Party Links

The ace88 platform may contain references to or descriptions of third-party products and services — such as game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt), payment providers (bKash, Nagad, Rocket, Upay), and sports organisations (BPL, ICC, FIFA). The ace88 platform does not link to external third-party websites. However, to the extent that any third-party service accessed in connection with the ace88 platform operates its own website or application, please be aware that such third-party platforms have their own privacy policies that are entirely independent of this Privacy Policy. ace88 accepts no responsibility for the privacy practices of any third party.

13 Changes to This Privacy Policy

ace88 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, changes in our data processing practices, or changes in the services offered on the platform. Where a material change is made to this Privacy Policy, ace88 will notify registered players via the email address associated with their account and will post a prominent notice on the platform no fewer than 7 calendar days before the change takes effect.

The date of the most recent update to this Privacy Policy is stated at the top of the document and in the sidebar contents panel. Your continued use of the ace88 platform after the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the amended Privacy Policy, you must cease using the platform and contact the support team to request account closure.

14 Contact Us

If you have any questions, concerns, complaints, or requests relating to this Privacy Policy or to the processing of your personal data by ace88, please contact the customer support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the ace88 platform. Average first response time is 2 to 5 minutes. Agents are available in both English and Bengali.
• Email: [email protected] — for formal written privacy enquiries and data rights requests. Response time via email is typically 12 to 24 hours.

ace88 is committed to handling all privacy-related enquiries with the highest level of care, confidentiality, and professionalism. We aim to resolve all data-related concerns fairly and transparently, and we welcome feedback on our privacy practices from all players.