Privacy Policy — ace333 Online Casino
At ace333, protecting your personal information is a responsibility we take seriously. This Privacy Policy explains what data we collect, why we collect it, how it is used, and the rights you hold as a player on our Bangladesh platform.
All data transmitted between your device and ace333 servers is protected by 256-bit SSL/TLS encryption. Your financial transactions and personal details are never sent in plain text over any network.
ace333 collects only the personal data that is strictly necessary to operate your account, process payments, and comply with responsible gaming obligations. We do not collect data for data collection's sake.
ace333 does not sell, rent, or trade your personal information to third-party marketers, data brokers, or advertising networks. Your data is used solely to deliver and improve the ace333 platform experience.
You have the right to access, correct, or request deletion of your personal data at any time. ace333 responds to all verified data requests within 30 days in accordance with applicable data protection standards.
Payment data processed via bKash, Nagad, Rocket, and other local providers is handled through encrypted, tokenised channels. ace333 does not store full card numbers or mobile banking PINs on its servers.
ace333 uses cookies strictly for session management, platform performance, and fraud prevention. We do not use third-party advertising cookies or cross-site tracking scripts that follow you across the web.
1. Information We Collect
When you register an account with ace333, we collect the personal identification information you provide during sign-up and throughout the account verification process. This information is necessary to create and maintain your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.
- Full legal name (as it appears on your government-issued ID)
- Date of birth (for age verification — players must be 18 or older)
- Residential address, including city, district, and postal code
- Bangladesh mobile phone number
- Valid email address
- National Identity Card (NID) number or passport number (collected during KYC verification)
- Scanned copies or photographs of identity documents submitted for KYC, including national ID, passport, or driving licence
To process deposits and withdrawals via your chosen payment method, ace333 collects financial data associated with your transactions. This is limited to what is necessary to execute and record payment activity on your account.
- bKash, Nagad, Rocket, or Upay mobile banking account numbers associated with your deposits and withdrawals
- Dutch-Bangla Bank (DBBL) or other local bank account details where used for bank transfer withdrawals
- Masked card details (last four digits, card type, and expiry date) for Visa or Mastercard transactions — full card numbers are not stored
- Cryptocurrency wallet addresses for USDT transactions
- Transaction history: deposit amounts, withdrawal amounts, dates, payment method used, and transaction reference numbers
- Account balance history and bonus redemption records
ace333 does not store mobile banking PINs, full card numbers, or one-time passwords (OTPs). Payment provider authentication is handled entirely within the respective provider's secure environment.
ace333 automatically records data related to your gameplay activity on the platform. This data is used to maintain accurate game records, settle disputes, detect fraud, and improve the player experience.
- Games played, bet amounts staked, game outcomes, and session durations
- Sports betting selections, stake amounts, odds accepted, and bet settlement outcomes
- Bonus claims made, wagering progress, and promotional offer interactions
- Responsible gaming tool usage, including deposit limits set, time-out periods activated, and self-exclusion requests
- Customer support interaction logs, including live chat transcripts and email correspondence
When you access the ace333 platform, our servers automatically collect certain technical information about your device and connection. This data is used for security monitoring, fraud detection, and platform performance optimisation.
- IP address and approximate geographic location derived from IP
- Device type (mobile, tablet, desktop), operating system, and browser type and version
- Session timestamps: login time, logout time, and session duration
- Pages visited within the ace333 platform and navigation path data
- Referral source (e.g., which page or link directed you to ace333.bio)
- Error logs and crash reports generated during your session
2. How We Use Your Data
ace333 uses the personal data we collect exclusively for legitimate, defined purposes directly related to the operation of the platform and the fulfilment of our obligations to you as a player. The following table summarises the primary purposes for which your data is processed and the legal basis for each processing activity.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Name, email, phone number, date of birth, address | Contractual necessity |
| Identity and age verification (KYC) | ID documents, NID/passport number, date of birth | Legal obligation / responsible gaming compliance |
| Processing deposits and withdrawals | Payment account details, transaction history | Contractual necessity |
| Fraud detection and security monitoring | IP address, device data, session logs, transaction patterns | Legitimate interest (platform integrity) |
| Customer support and dispute resolution | Account data, game records, correspondence logs | Contractual necessity / legitimate interest |
| Responsible gaming monitoring | Gaming behaviour, deposit patterns, self-exclusion status | Legal obligation / player protection |
| Platform improvement and analytics | Aggregated, anonymised behavioural and technical data | Legitimate interest (service improvement) |
| Promotional communications (opted-in players only) | Email address, communication preferences | Consent (opt-in only) |
ace333 will only send you promotional emails, SMS messages, or push notifications if you have explicitly opted in to receive them during registration or via your account communication preferences. You may withdraw your consent to receive marketing communications at any time by updating your preferences in the account settings section or by contacting the support team.
Withdrawing consent to marketing communications will not affect the processing of your data for other purposes listed in the table above, such as account management, payment processing, and responsible gaming monitoring, which are carried out on different legal bases.
ace333 does not use your personal data to build advertising profiles, does not share your data with advertising networks, and does not engage in targeted advertising on third-party platforms based on your ace333 activity.
3. Data Sharing and Disclosure
ace333 may share your personal data with the following categories of third parties, and only to the extent necessary for the stated purpose:
- Payment service providers: When you make a deposit or request a withdrawal, relevant payment data is shared with the payment provider you select (e.g., bKash, Nagad, Rocket, Upay, DBBL, Visa/Mastercard networks) solely to process the transaction. These providers operate under their own privacy policies and are independently regulated.
- Game studio providers: Games on the ace333 platform are supplied by third-party studios including Pragmatic Play, Microgaming, NetEnt, Evolution Gaming, Spribe, and Ezugi. These studios may receive anonymised session identifiers necessary to operate their game software within our platform. They do not receive your full personal profile.
- Identity verification services: For KYC verification, ace333 may use a third-party identity verification service to cross-reference submitted documents against relevant databases. These services are bound by strict data processing agreements and use your data solely for the verification purpose.
- IT infrastructure and hosting providers: ace333's platform is hosted on secure servers managed by reputable cloud infrastructure providers. These providers have access to server-level data as a technical necessity but are contractually prohibited from accessing or using player data for any other purpose.
- Fraud prevention and security services: ace333 uses specialised fraud detection tools that may process IP addresses, device fingerprints, and behavioural data to identify and block fraudulent activity. These tools process data under our instruction and may not use it for their own purposes.
- Legal and regulatory authorities: Where required by applicable law, court order, or a lawful request from a governmental or law enforcement authority, ace333 may disclose personal data to the relevant authority. ace333 will notify affected players of such disclosures where legally permitted to do so.
In the event that ace333 undergoes a business restructuring, merger, or acquisition, your personal data may be transferred to the acquiring or successor entity, subject to equivalent data protection commitments. Players will be notified of any such transfer and given the opportunity to close their accounts if they do not wish their data to be processed under new ownership.
4. Cookies and Tracking Technologies
ace333 uses a limited set of cookies and similar local storage technologies to ensure the platform functions correctly, to maintain your login session, and to detect unusual activity that may indicate fraud or account compromise. The following table describes the categories of cookies used on the ace333 platform.
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Maintain login sessions, load-balancing, security tokens, CSRF protection | Session / up to 24 hours | No — platform will not function without these |
| Functional | Remember your language preference, game lobby filter settings, and display preferences | Up to 30 days | Yes — disabling may reduce platform convenience |
| Analytics (first-party) | Aggregated, anonymised usage data used to improve platform performance and game lobby layout | Up to 90 days | Yes — no impact on core functionality |
| Fraud Detection | Device fingerprinting and behavioural signals used to detect account takeover and fraudulent deposits | Up to 12 months | No — required for platform security |
ace333 does not use any of the following cookie or tracking technologies on its platform:
- Third-party advertising cookies or pixels (e.g., Google Ads, Meta Pixel, TikTok Pixel)
- Cross-site tracking cookies that follow your browsing activity on other websites
- Social media tracking scripts (e.g., Facebook Login SDKs, Twitter share buttons with embedded trackers)
- Behavioural profiling cookies intended to build advertising audience segments
You may manage cookie preferences through your browser settings at any time. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Please note that disabling strictly necessary or fraud detection cookies may prevent you from logging in or using the platform normally.
5. Data Security Measures
ace333 implements a layered approach to data security, combining technical controls, organisational procedures, and staff training to protect your personal information against unauthorised access, disclosure, alteration, and destruction.
The following technical security measures are in place across the ace333 platform infrastructure:
- TLS/SSL encryption: All data transmitted between your browser or app and ace333 servers is encrypted using TLS 1.2 or higher. We enforce HTTPS across all platform endpoints with HSTS headers to prevent protocol downgrade attacks.
- Data encryption at rest: Sensitive personal data fields — including identity document references, payment account identifiers, and KYC records — are encrypted at rest in our database using AES-256 encryption.
- Access controls: Access to production systems and player data is restricted to authorised ace333 personnel on a strict need-to-know basis. All internal access is logged and subject to periodic review.
- Password security: Account passwords are stored using industry-standard one-way hashing algorithms with salting. ace333 does not store plaintext passwords and is unable to retrieve your password — only a password reset is possible.
- Two-factor authentication: Players are encouraged to enable 2FA on their ace333 accounts. Staff access to internal systems requires 2FA at all access levels.
- Vulnerability management: ace333 conducts regular security assessments of platform infrastructure and third-party integrations. Known vulnerabilities are patched in accordance with a risk-tiered remediation schedule.
- Incident response: In the event of a data breach affecting player personal information, ace333 will notify affected players within 72 hours of becoming aware of the breach, and take immediate steps to contain the incident and prevent further exposure.
While ace333 maintains robust security measures, no online platform can guarantee absolute security against all possible threats. Players are encouraged to use a strong, unique password for their ace333 account, enable 2FA, and report any suspicious activity to the support team immediately.
6. Data Retention Policy
ace333 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the principal categories of data we hold:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation, dispute resolution |
| KYC identity documents | Duration of account + 5 years after closure | Anti-money laundering compliance |
| Transaction and payment records | 7 years from transaction date | Financial record-keeping obligations |
| Game and betting records | 5 years from session date | Dispute resolution, RNG audit trail |
| Customer support logs | 3 years from last interaction | Service quality, dispute evidence |
| Fraud and security logs | Up to 7 years | Fraud investigation, law enforcement |
| Marketing consent records | Duration of consent + 3 years | Proof of consent compliance |
| Anonymised analytics data | Indefinitely (non-personal) | Platform improvement — no personal data retained |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically immediately possible (e.g., in backup systems), the data is quarantined from active processing until secure deletion can be completed during the next scheduled backup cycle.
7. Your Privacy Rights
As a player on the ace333 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the ace333 support team via live chat or by email at [email protected]. ace333 will respond to all verified requests within 30 calendar days.
You have the right to request a copy of all personal data that ace333 holds about you. Upon receiving a verified access request, we will provide a structured summary of your data categories, the purposes for which they are processed, and the retention periods applied, within 30 days.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Most contact information can be updated directly through your account settings. For identity document corrections, please contact the support team with the updated documentation.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Please note that data subject to legal retention obligations (e.g., transaction records, KYC documents) cannot be deleted until the applicable retention period has expired.
In certain circumstances — such as where the accuracy of data is contested or where processing is unlawful but you prefer restriction to erasure — you have the right to request that ace333 suspend active processing of your data while the matter is resolved. Data under a restriction request will be retained but not actively used.
Where data has been processed on the basis of your consent or contractual necessity, you have the right to receive a machine-readable copy of your personal data in a structured, commonly used format (e.g., CSV or JSON). This right applies to data you have actively provided to ace333, such as account registration information and communication preferences.
Where ace333 processes your data on the basis of your consent — principally for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Consent withdrawal can be actioned via account settings or by contacting the support team directly.
8. Contact Us and Policy Updates
If you have any questions, concerns, or requests relating to this Privacy Policy or the way ace333 processes your personal data, please contact our support team using the following details:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available directly within the ace333 platform, accessible after logging in to your account
- Response time: We aim to respond to all privacy-related enquiries within 5 business days, and to all formal data subject requests within 30 calendar days
When submitting a data subject rights request, please include your registered email address and, where possible, your account username so that we can verify your identity and process your request efficiently. ace333 will not action data requests from unverified individuals to prevent unauthorised disclosure of another person's data.
ace333 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, platform features, legal requirements, or regulatory guidance. When material changes are made, we will notify registered players by email to the address on file and by displaying a prominent notice on the ace333 platform for a minimum of 14 days prior to the changes taking effect.
The "Effective Date" displayed at the top of this page reflects the date on which the current version of this policy came into force. Previous versions of the Privacy Policy are available on request by contacting the support team. Your continued use of the ace333 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.
We encourage all players to review this Privacy Policy periodically to stay informed about how ace333 protects your data. If you do not agree with any changes made to this policy, you are entitled to close your account and request deletion of your data in accordance with the rights described in Section 7 above.
Ready to Explore ace333?
Now that you understand how ace333 protects your privacy, discover our full range of casino games, live sports betting, and exclusive promotions available to players across Bangladesh.