ace8 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ace8 ("the Company", "we", "us", "our"), the operator of the online gaming platform at ace8.club ("the Platform"), collects, uses, discloses, and safeguards personal information relating to individuals who visit, register on, or otherwise interact with the Platform ("you", "your", "the Player").

By accessing or using the ace8 Platform, you acknowledge that you have read and understood this Policy. If you do not agree with the terms of this Policy, please discontinue use of the Platform immediately. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and ace8.

We are committed to protecting your personal data and handling it with the care, transparency, and security it deserves. This Policy is written in plain, formal English so that every player in Bangladesh can understand exactly what data we hold, why we hold it, and what rights you have over it.

2. Data We Collect

ace8 collects personal data through multiple channels — directly from you when you register or interact with the Platform, automatically through your device and browser as you navigate the site, and from third-party service providers where necessary to verify your identity or process payments.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number, and preferred username.
• Identity verification documents: National Identity Card (NID), passport, or other government-issued photo identification submitted during KYC verification.
• Payment information: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank card details (Visa, Mastercard), or bank account details (Dutch-Bangla Bank, BRAC Bank) provided for deposits and withdrawals.
• Communications: The content of any messages, queries, or complaints you submit to our support team via live chat or email.
• Responsible gaming preferences: Deposit limits, session reminders, self-exclusion requests, and any other voluntary restrictions you set on your account.

2.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system version, browser type and version, and screen resolution.
• Usage data: Pages visited, features used, games played, betting history, session duration, click patterns, and navigation paths within the Platform.
• Geolocation data: Country and approximate regional location derived from your IP address, used for compliance and fraud prevention purposes.
• Cookie and tracking data: As described in the Cookies & Tracking section below.

2.3 Data Received from Third Parties

In certain circumstances, ace8 may receive personal data about you from third-party sources, including:

• Identity verification service providers used to confirm the authenticity of documents submitted during KYC.
• Payment processors and mobile financial service operators who confirm transaction status and account ownership.
• Fraud detection and anti-money laundering (AML) screening services that flag unusual patterns associated with your account or payment methods.
• Publicly available databases consulted as part of enhanced due diligence procedures.

The following table summarises the categories of personal data ace8 collects and the primary legal basis for processing each category:

3. How We Use Your Data

ace8 uses personal data only for defined, legitimate purposes. We do not use your data for purposes that are incompatible with those for which it was originally collected without first providing you with clear notice and, where required, obtaining your consent.

3.1 Account Management and Service Delivery

The primary purpose for processing your data is to create, maintain, and operate your ace8 player account. This includes processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer; displaying your transaction history; enabling you to place bets and play casino games; and providing personalised account features such as responsible gaming tools and promotional offers.

3.2 Identity Verification and Fraud Prevention

ace8 is legally and operationally required to verify the identity of all players prior to processing significant withdrawals. Your identity documents and payment method details are used to confirm that the account belongs to you and that transaction activity is consistent with your profile. Automated and manual fraud monitoring systems analyse usage patterns and financial transactions to detect and prevent money laundering, bonus abuse, and other forms of financial crime.

3.3 Customer Support

When you contact our support team, we use your account data and the content of your communication to investigate and resolve your query efficiently. Support interactions may be recorded and retained for quality assurance, training, and compliance purposes.

3.4 Responsible Gaming Monitoring

ace8 monitors player behaviour data — including session frequency, deposit volumes, and betting patterns — to identify indicators of problem gambling. Where such indicators are present, we may proactively reach out to offer responsible gaming resources or impose protective restrictions on your account, as required under our duty of care to players.

3.5 Legal and Regulatory Compliance

We process and retain certain personal data categories to comply with applicable legal obligations, including record-keeping requirements under anti-money laundering regulations, responding to lawful requests from law enforcement agencies or courts, and satisfying audit and reporting obligations.

3.6 Marketing Communications

With your consent, ace8 may use your email address and mobile number to send you promotional communications about bonuses, new games, and seasonal offers relevant to the Bangladesh market (for example, Eid promotions, BPL season offers, or Pohela Boishakh specials). You may withdraw your consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

4. Data Sharing & Disclosure

ace8 does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

4.1 Service Providers

We engage carefully selected third-party service providers to assist in delivering the Platform, including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), identity verification providers, cloud hosting and infrastructure partners, game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), customer support tooling vendors, and fraud and AML screening services. All such providers are contractually bound to process your data only for the specific purpose of supporting ace8's services and to maintain appropriate security standards.

4.2 Legal Authorities

ace8 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are required to do so by law, legal process, or lawful government request. We will notify affected players of such disclosures where we are legally permitted to do so.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the ace8 business, personal data held by ace8 may be transferred to the acquiring or successor entity as part of that transaction. You will be notified prior to any such transfer taking effect, and the acquiring entity will be required to honour the commitments set out in this Policy.

4.4 Aggregate and Anonymised Data

ace8 may share aggregated or fully anonymised statistical data (from which no individual can be identified) with research partners, game providers, or for publication purposes. Such data does not constitute personal data and is not subject to the restrictions in this Policy.

5. Cookies & Tracking

ace8 uses cookies and similar tracking technologies (such as web beacons and local storage objects) on the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you interact with the site.

5.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limits you have set, and your last visited game categories. Disabling these may reduce the personalisation of your experience.
• Analytics cookies: Collect anonymous statistical data about how visitors use the Platform (e.g., which pages are visited most frequently, which games are most popular). This information helps us improve the Platform. We use aggregated data only — analytics cookies do not track personally identifiable information.
• Security and fraud prevention cookies: Help us identify suspicious login patterns, detect automated bot activity, and protect your account from unauthorised access attempts.

5.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via their privacy or settings menu. Please note that disabling certain cookies may impair your ability to use parts of the Platform, including account login and game loading. ace8 does not respond to browser "Do Not Track" signals at this time, as no universally accepted standard for such signals exists.

6. Data Retention

ace8 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or for the duration required by applicable legal and regulatory obligations, whichever is longer. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five years following account closure, in compliance with standard AML record-keeping requirements.
• Transaction records: Deposit and withdrawal records, including payment method details, are retained for a minimum of five years from the date of each transaction.
• KYC and identity documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Support communications: Retained for up to three years from the date of the interaction, unless the communication relates to an unresolved dispute or legal matter, in which case it is retained until resolution.
• Marketing consent records: Retained for the duration of your consent and for one year following withdrawal, to demonstrate compliance.
• Cookie and analytics data: Session cookies are deleted at the end of your browser session. Analytics data is retained in aggregated, anonymised form for up to 24 months.

When personal data is no longer required under any of the above criteria, ace8 will securely delete or anonymise it in a manner that prevents reconstruction of the original data.

7. Your Rights

As a player whose personal data is processed by ace8, you hold the following rights in relation to that data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within a reasonable timeframe, typically within 30 days of receiving your request.

7.1 Right of Access

You have the right to request a copy of the personal data ace8 holds about you, along with information about how that data is being used. We will provide this information in a structured, commonly used, and machine-readable format where technically feasible.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details such as email address or phone number, you may update these directly in your account settings without needing to contact support.

7.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you believe the processing was unlawful. Please note that this right is subject to limitations — in particular, ace8 is legally required to retain certain financial and identity records for a minimum period following account closure, as described in Section 6. We will inform you clearly if any data cannot be deleted and explain the reason.

7.4 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You can opt out of marketing communications via your account settings or by contacting [email protected]. Once you opt out, marketing messages will be discontinued promptly, though you may continue to receive essential transactional communications (e.g., deposit confirmations, withdrawal notifications, and security alerts) that are necessary for your account.

7.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, you have the right to receive the personal data you have provided to ace8 in a structured format, and to request that it be transmitted to another service provider where technically feasible.

7.6 Right to Restrict Processing

In certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and we are evaluating that objection — you may request that we restrict the processing of your data. During a restriction period, your data will be stored but not actively used for any other purpose.

8. Contact & Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ace8 handles your personal data, please contact our support team in writing at [email protected]. Please include "Privacy Policy Enquiry" in the subject line to ensure your message is directed to the appropriate team member. We aim to respond to all privacy-related enquiries within 5 business days.

ace8 reserves the right to update this Privacy Policy at any time. When we do, we will revise the effective date shown at the top of this document and, where the changes are material, notify registered players by email and via a notice on the Platform. We encourage you to review this Policy periodically to stay informed about how we are protecting your data.

Your continued use of the ace8 Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and may request account closure by contacting [email protected].