ace346 Privacy Policy

ace346 collects personal data through several distinct channels and for specific, legitimate purposes. The categories of information we collect are described in detail below. We only collect information that is necessary and proportionate to the stated purpose.

1.1 Registration & Account Data

When you create an account on ace346, we collect the following information:

• Full legal name as it appears on a government-issued identity document;
• Date of birth (required to verify that you are 18 years of age or older);
• Mobile number registered in Bangladesh (used for account verification and two-factor authentication);
• Email address (used for account communications, security alerts, and optional marketing updates);
• Preferred currency (BDT — Bangladeshi Taka);
• Username and hashed password (passwords are never stored in plain text).

1.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) obligations and to protect the platform from fraud and underage gambling, ace346 may request:

• A copy of your Bangladesh National Identity Card (NID) or valid Bangladeshi passport;
• A recent utility bill or bank statement confirming your registered address;
• A photograph or selfie with your identity document, where required for enhanced verification;
• Proof of ownership of a payment method (e.g., screenshot of a bKash or Nagad account registered in your name).

KYC documents are stored in a secure, access-controlled environment and are used exclusively for identity and age verification purposes. They are not used for marketing, profiling, or any purpose beyond regulatory compliance.

1.3 Transaction & Financial Data

When you make deposits or withdrawals through bKash, Nagad, Rocket, Upay, or Bangladeshi bank transfers, ace346 records:

• Transaction reference numbers and timestamps;
• Deposit and withdrawal amounts in BDT;
• Payment method type and the last four digits or registered mobile number associated with the payment account;
• Transaction status (pending, completed, reversed, flagged).

ace346 does not store full payment card numbers, full mobile banking PINs, or any credential that would allow the platform to initiate transactions independently on your behalf.

1.4 Platform Usage & Device Data

When you browse or interact with ace346, we automatically collect certain technical and behavioural data to maintain platform security and improve the player experience:

• IP address and approximate geographic location (city-level);
• Device type, operating system, and browser version;
• Session duration, pages visited, and in-game activity logs;
• Referral source (if you arrived via a tracked link);
• Error logs and crash reports used for technical debugging.

ace346 processes your personal data only for specific, clearly defined purposes. We do not process data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which ace346 uses personal data are:

• Account Management: Creating, maintaining, securing, and closing player accounts on the ace346 platform;
• Identity Verification: Confirming that players are who they claim to be and are at least 18 years of age, in compliance with responsible gaming obligations;
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfer channels;
• Fraud Prevention and Security: Detecting and investigating suspicious account activity, duplicate registrations, bonus abuse, and potential money laundering;
• Legal and Regulatory Compliance: Meeting anti-money-laundering (AML) obligations, retaining records as required by applicable law, and responding to lawful requests from regulatory authorities;
• Customer Support: Responding to queries, resolving disputes, and providing technical assistance through support channels;
• Platform Improvement: Analysing aggregate, anonymised usage patterns to improve game selection, platform stability, payment flow, and the overall player experience;
• Marketing Communications: Sending promotional emails, bonus notifications, and seasonal offers — but only to players who have opted in to receive such communications. You may opt out at any time by contacting [email protected].

ace346 relies on one or more of the following legal bases for processing personal data: performance of a contract (your account agreement with us), compliance with a legal obligation, protection of legitimate interests (fraud prevention and platform security), and explicit consent where required (marketing communications).

ace346 may share your personal data with a limited set of trusted third parties where doing so is necessary to operate the platform and fulfil our obligations to you. These categories are:

3.1 Payment Processing Partners

When you make a deposit or withdrawal, ace346 shares the minimum necessary transaction data with the relevant payment provider — bKash, Nagad, Rocket, Upay, or a Bangladeshi bank — to process the transaction. These partners are contractually required to handle your data in accordance with applicable data protection standards and may not use it for any purpose other than completing the transaction.

3.2 Identity Verification Services

ace346 may use accredited third-party KYC and identity verification service providers to assist with the verification of identity documents. These providers process data on our behalf under strict data processing agreements and are not permitted to retain, use, or disclose verification data for their own purposes.

3.3 Game and Platform Technology Providers

Game studios and technology providers whose products appear on the ace346 platform — including but not limited to Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive aggregated, anonymised session data for the purpose of game performance reporting and integrity monitoring. Individually identifying data is not shared with game providers unless specifically required by a regulatory investigation.

3.4 Legal and Regulatory Disclosure

ace346 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, by a court order, or in connection with an investigation of fraud, money laundering, or other serious offences. We will make reasonable efforts to notify affected players of such disclosures where permitted to do so by law.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ace346's business, player data may be transferred to the successor entity as part of the transaction. Players will be notified of any such transfer via the email address registered on their account, and the successor entity will be required to honour the terms of this Privacy Policy.

ace346 uses cookies and similar technologies to maintain session continuity, protect account security, understand how players interact with the platform, and improve the overall experience. This section explains the types of cookies used and your options for managing them.

ace346 does not deploy third-party advertising cookies, social media pixel trackers, or behavioural profiling technologies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary or fraud prevention cookies may prevent you from logging into or using the platform correctly.

Where local law requires explicit consent for non-essential cookies, ace346 will seek that consent before placing non-essential cookies on your device. Continued use of the platform without adjusting your browser settings constitutes acceptance of the use of strictly necessary cookies as described above.

ace346 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law or regulatory obligation. The following retention periods apply:

• Active Account Data: Retained for the duration of your active account relationship with ace346 plus a minimum post-closure period as required by AML obligations;
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure in accordance with standard financial record-keeping requirements;
• Transaction Records: Retained for a minimum of five (5) years following the transaction date for AML compliance and dispute resolution purposes;
• Customer Support Communications: Retained for three (3) years from the date of the final communication in a support thread, to support dispute resolution and service quality review;
• Marketing Preferences: Retained until you opt out of marketing communications, after which the opt-out record itself is retained indefinitely to prevent re-subscription without fresh consent;
• Technical Logs (IP addresses, session data): Retained for up to ninety (90) days for security and fraud investigation purposes, then automatically deleted or anonymised.

When personal data is no longer required, ace346 securely deletes or anonymises it using industry-standard methods. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregate analytical purposes and does not constitute personal data for the purposes of this policy.

If you request closure of your ace346 account, personal data that is not subject to a legal retention obligation will be deleted or anonymised within ninety (90) days of the verified closure request being processed.

ace346 implements a layered approach to data security, combining technical controls, organisational policies, and staff training to protect your personal data against unauthorised access, loss, alteration, and disclosure. The key security measures currently in place include:

• Transport Encryption: All data exchanged between your browser or device and ace346 servers is encrypted using TLS 1.2 or higher with 256-bit symmetric encryption;
• At-Rest Encryption: Sensitive data stored on ace346 servers — including KYC documents, hashed passwords, and financial records — is encrypted at rest using AES-256 encryption;
• Password Hashing: Player passwords are never stored in plain text. They are processed using a strong, salted hashing algorithm (bcrypt) so that even in the unlikely event of a data breach, raw passwords cannot be recovered;
• Access Controls: Access to personal data within ace346 is restricted on a strict need-to-know basis. Internal access logs are maintained and reviewed regularly;
• Penetration Testing: ace346 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited;
• DDoS Protection: The ace346 platform is protected against distributed denial-of-service attacks through industry-standard network-level mitigation systems;
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security.

Whilst ace346 takes all reasonable and practicable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that poses a significant risk to player privacy, ace346 will notify affected players without undue delay and take all appropriate remedial action.

You also play an important role in keeping your account secure. Keep your password unique and confidential, do not share your login credentials with anyone, and contact [email protected] immediately if you suspect your account has been compromised.

As a player on the ace346 platform, you hold a number of rights in relation to the personal data we hold about you. ace346 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, submit a written request to [email protected]. We will acknowledge receipt within five (5) business days and provide a full response within thirty (30) calendar days.

ace346 reviews this Privacy Policy periodically and will update it as necessary to reflect changes in platform operations, applicable legal requirements, or best practices in data protection. Material changes to this policy will be communicated to registered players via the email address on file at least seven (7) calendar days before the updated policy takes effect. Minor clarifications or corrections may be published without individual notice, in which case the "Last Updated" date at the top of this page will be revised accordingly.

Continued use of the ace346 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to revisit this page periodically to stay informed of how your data is being protected.

If you have any questions about this Privacy Policy, wish to understand more about how specific data is used, or would like to exercise any of your privacy rights, please reach out to the ace346 privacy team at the contact details below:

• Email: [email protected] (subject line: "Privacy Policy Enquiry")
• Response Time: Within 5 business days for general queries; within 30 calendar days for formal data subject requests
• Business Hours: Monday to Sunday, 09:00 – 22:00 Bangladesh Standard Time (BST, UTC+6)

ace346 takes all privacy queries seriously. Whether you are a player in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh, you are entitled to the same standard of data protection and the same responsiveness from our team.