ace99 Privacy
Policy

ace99 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and in limited circumstances from third-party verification and payment service providers. The categories of data we collect are as follows:

Registration and Identity Data

When you create an ace99 account, we collect the personal information necessary to establish and verify your identity, including your full name, date of birth, gender, nationality, email address, and Bangladesh mobile phone number. This information is mandatory to open an account and cannot be omitted or replaced with fictional data.

Identity Verification Data

To comply with our age verification and anti-fraud obligations, ace99 may request copies of government-issued identity documents, including National ID cards, passports, or birth certificates. We may also request proof of Bangladesh address (such as a utility bill or bank statement) and proof of ownership of the payment method(s) used on your account.

Financial and Transaction Data

ace99 records all deposit and withdrawal transactions associated with your account, including transaction amounts, dates, payment method types, and transaction reference numbers. We do not store full bKash wallet credentials, bank account passwords, or any payment authentication PINs. Payment data is handled through secure tokenised references only.

Technical and Device Data

When you access the ace99 Platform, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, time zone setting, and referring URL. This data is used for security monitoring, fraud detection, and to optimise Platform performance across the range of devices used by players in Bangladesh.

Usage and Behavioural Data

ace99 records your activity on the Platform, including pages visited, games played, bets placed, session duration, and navigation patterns. This data is used in aggregate and pseudonymised form to improve the Platform, personalise your experience, and identify any unusual activity that may indicate a security concern or a potential responsible gaming issue.

Communications Data

When you contact ace99 support, submit a complaint, or engage in any written communication with our team via email or live chat, we retain records of those communications, including their content and metadata, for quality assurance, dispute resolution, and regulatory compliance purposes.

ace99 processes your personal data only for defined, legitimate purposes. We do not use your data for any purpose that is incompatible with the purposes disclosed in this Privacy Policy. The primary purposes for which ace99 processes your personal data are:

• Account Management: To create, maintain, and administer your ace99 account, process your login sessions, and communicate important account-related notices to you.
• Identity and Age Verification: To verify that you are who you claim to be and that you meet the minimum age requirement of 18 years, in compliance with our responsible gaming obligations.
• Payment Processing: To process deposits via bKash, Nagad, Rocket, Upay, and local bank transfers, and to process withdrawal requests to your registered payment method. Transaction records are maintained for financial reconciliation and dispute resolution.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, account takeover attempts, and any other activity that may harm the integrity of the ace99 Platform or the interests of other players.
• Regulatory Compliance: To fulfil any legal or regulatory obligations applicable to ace99, including record-keeping requirements and obligations to cooperate with law enforcement or competent authorities where required.
• Responsible Gaming: To monitor betting and gaming patterns that may indicate problem gambling behaviour, to apply deposit limits or self-exclusion measures requested by players, and to adhere to responsible gaming best practices.
• Platform Improvement: To analyse anonymised and aggregated usage data in order to improve the performance, design, game selection, and overall user experience of the ace99 Platform for players across Bangladesh.
• Customer Support: To respond to enquiries, resolve disputes, investigate complaints, and provide technical assistance to registered players.
• Promotional Communications: Where you have opted in to receive marketing communications, to send you information about relevant bonuses, promotions, and seasonal offers. You may opt out of marketing emails at any time by contacting support.

ace99 does not use automated decision-making processes that produce legal or similarly significant effects on individual players without human review. Decisions such as account closure, bonus disqualification, or fraud flags are reviewed by ace99 team members before final action is taken.

ace99 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Service Providers: ace99 shares necessary transaction data with Bangladesh-based mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank) in order to process deposits and withdrawals. These providers are bound by their own privacy and security policies and are not permitted to use your data for any purpose other than processing the specific transaction.
• Identity Verification Services: Where third-party KYC (Know Your Customer) verification tools are used to authenticate your identity documents, the minimum required data is shared with those providers under strict contractual data protection terms.
• Game Technology Providers: The game studios and technology providers whose games are featured on the ace99 Platform (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming) may receive anonymised session identifiers necessary to deliver game functionality. These providers do not receive your personal identity data.
• Fraud Prevention and Security Vendors: ace99 may share technical data (IP addresses, device fingerprints, session anomalies) with specialist fraud detection services to protect the Platform and its players from bad actors.
• Law Enforcement and Regulatory Authorities: ace99 will disclose personal data to police, financial intelligence units, or other competent authorities where required to do so by law, court order, or where we reasonably believe that disclosure is necessary to prevent serious harm, financial crime, or illegal activity.
• Business Successors: In the event of a merger, acquisition, or sale of assets involving ace99, player data may be transferred to the acquiring entity, subject to the acquiring party committing to privacy protections no less stringent than those described in this Policy. Players will be notified of any such transfer in advance where feasible.

In every case of third-party data sharing, ace99 uses contractual, technical, and organisational safeguards to ensure that your data is protected and used only for the specific, disclosed purpose. ace99 does not transfer personal data to countries or territories that do not provide an adequate level of data protection without first implementing appropriate safeguards.

ace99 uses cookies and similar tracking technologies to operate core Platform functionality and to improve your overall experience. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain viruses, cannot execute programmes, and cannot access any other data on your device beyond what was placed by the originating server.

ace99 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the ace99 Platform to function. They maintain your login session, remember your language and display preferences within a session, and enable the secure processing of transactions. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the ace99 Platform — which pages are visited most frequently, where errors occur, and how navigation flows are used. This information is used exclusively to improve the Platform. No personally identifiable information is gathered by these cookies.
• Functionality Cookies: These cookies remember your preferences across sessions, such as preferred payment methods and game category selections, so that your ace99 experience is more personalised on return visits.

ace99 does not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies for the purpose of serving targeted advertisements on external websites.

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse some or all cookies, or to be notified when a cookie is being placed. Please note that disabling strictly necessary cookies will prevent you from logging into your ace99 account and using core Platform features. The steps to manage cookies vary by browser — refer to your browser's help documentation for specific instructions.

ace99 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and ace99 servers is encrypted using current TLS protocols. The ace99.im website operates exclusively over HTTPS.
• Password Hashing: Account passwords are never stored in plain text. ace99 uses industry-standard one-way cryptographic hashing algorithms to store password data, meaning that even in the unlikely event of a data breach, raw passwords are not exposed.
• Access Controls: Access to systems that store personal data is restricted to authorised ace99 personnel on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• Two-Factor Authentication: ace99 offers two-factor authentication (2FA) to all registered players and strongly encourages its use. Players who enable 2FA add a significant additional layer of protection against unauthorised account access.
• Intrusion Detection and Monitoring: ace99 employs automated intrusion detection systems and 24/7 security monitoring to identify and respond to suspicious activity on the Platform infrastructure in real time.
• Regular Security Reviews: ace99 conducts periodic internal security assessments and works with third-party security specialists to identify and address potential vulnerabilities in its systems and processes.

While ace99 employs commercially reasonable and technically current security measures, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights and interests, ace99 will notify affected players within a reasonable timeframe and take all appropriate remediation steps.

You also play a role in keeping your ace99 account secure. You should choose a strong, unique password, enable 2FA, never share your login credentials, and contact support immediately at [email protected] if you suspect any unauthorised access to your account.

ace99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active ace99 account is retained for the duration of the account's existence and remains accessible to you through your account dashboard. This includes identity data, contact information, and account preferences.
• Transaction Records: Financial transaction records — including deposit and withdrawal history — are retained for a minimum of five years following the date of the transaction, in accordance with standard financial record-keeping requirements applicable to online payment platforms.
• Identity Verification Documents: Copies of identity documents submitted for KYC verification are retained for a minimum of five years following the closure of your account, or longer if required by an ongoing legal or regulatory matter.
• Communications Data: Support communications, including email and live chat logs, are retained for a period of three years following the close of the relevant interaction, after which they are securely deleted unless retention is required for an unresolved dispute or legal proceeding.
• Closed and Inactive Accounts: When an account is closed voluntarily or terminated by ace99, personal data is retained in an archived form for the legally required minimum period before being securely and permanently deleted from ace99 systems.

When personal data is no longer required and has reached the end of its applicable retention period, ace99 securely disposes of that data using industry-standard deletion or anonymisation procedures, such that the data cannot be recovered or linked back to an individual.

If you wish to request earlier deletion of specific categories of personal data (where no legal obligation requires continued retention), please submit a data deletion request to [email protected]. ace99 will respond to deletion requests within a reasonable timeframe and will confirm the outcome of each request in writing.

• Right of Access: You have the right to request a copy of the personal data ace99 holds about you. We will provide this in a clear, structured format. One copy is provided free of charge; additional copies may be subject to a reasonable administrative fee.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details (such as your email address or phone number) directly through your account settings. For other corrections, contact support.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent is the legal basis), or where the data has been processed unlawfully. This right is subject to overriding legal retention obligations — ace99 may be required to retain certain data even after account closure.
• Right to Restriction of Processing: In certain circumstances, you may request that ace99 restrict the processing of your personal data — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where technically feasible, you have the right to request a structured, machine-readable export of the personal data you have provided to ace99, so that it can be transferred to another service provider of your choosing.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to other forms of processing where ace99's legitimate interests are cited as the legal basis, subject to ace99 demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where ace99 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ace99 will not charge you for exercising your privacy rights in good faith. Where a request is manifestly unfounded or excessive, ace99 reserves the right to charge a reasonable fee or decline to act on the request, with written reasons provided.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ace99 handles your personal data, please contact our support team. We are committed to addressing all privacy-related enquiries promptly and transparently.

You can reach the ace99 privacy support team by email at [email protected]. Please include "Privacy Enquiry" or "Privacy Rights Request" in the subject line of your email to ensure your message is directed to the correct team. Support is available 24 hours a day, 7 days a week, in English.

ace99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players by email. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.