ace7 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ace7 ("we", "us", "our") collects, uses, stores, and discloses personal information obtained from users ("you", "Player") of the ace7 platform located at https://ace7.io. This Policy applies to all individuals who visit, register on, or otherwise interact with the ace7 website and its associated services.

By creating an ace7 account or using any part of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the ace7 platform.

This Policy should be read alongside the ace7 Terms & Conditions, which govern your overall use of the platform. In the event of any conflict between this Policy and the Terms & Conditions regarding data handling matters, this Policy shall prevail.

2. Data We Collect

ace7 collects the following categories of personal data from players:

Category	Examples	Purpose
Identity Data	Full name, date of birth, National ID number, photograph	Account registration, KYC verification, age verification
Contact Data	Email address, mobile number, residential address (city/district in Bangladesh)	Account communication, transaction alerts, support responses
Financial Data	bKash/Nagad/Rocket wallet reference, bank account identifiers, transaction amounts in BDT	Deposit and withdrawal processing, fraud prevention
Technical Data	IP address, device type, browser type and version, operating system, session tokens	Platform security, fraud detection, session management
Usage Data	Pages visited, games played, bets placed, session duration, feature interactions	Platform improvement, responsible gaming monitoring, personalisation
Communications Data	Support ticket content, live chat transcripts, email correspondence	Customer support, complaint resolution, quality assurance

We do not collect any special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required for a legally mandated verification process, and only with your explicit consent in that instance.

3. How We Collect Data

ace7 collects personal data through the following channels:

• Direct interactions: Data you provide when you create an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a promotional offer.
• Automated technologies: When you access the ace7 platform, we automatically collect certain technical and usage data via cookies, web beacons, server logs, and similar tracking technologies. Please refer to Section 6 for full details on our use of cookies.
• Third-party sources: We may receive identity verification data from payment processors (such as bKash or Nagad) confirming successful transaction authorisation, or from third-party KYC and fraud detection partners, solely for the purpose of verifying your identity and preventing fraudulent activity on the platform.

4. How We Use Your Data

ace7 uses your personal data for the following purposes, each of which has a defined lawful basis:

• Account administration: Creating, maintaining, and managing your ace7 account, including processing deposits and withdrawals in Bangladeshi Taka (৳), and communicating account-related information to you.
• Identity and age verification: Confirming that you are at least 21 years of age and that the identity information you provided during registration is accurate, as required by our KYC obligations.
• Fraud and security monitoring: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited activities on the platform.
• Responsible gaming: Monitoring gaming behaviour to identify patterns that may indicate problem gambling, and delivering appropriate responsible gaming interventions such as deposit limit notifications or self-exclusion options.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how players interact with ace7, identify technical issues, and improve the overall quality of the platform.
• Legal and regulatory compliance: Fulfilling obligations imposed by applicable law, responding to lawful requests from public authorities, and maintaining records required for audit purposes.
• Marketing communications: Where you have provided consent, sending you information about promotions, bonuses, new games, and other ace7 updates. You may withdraw consent at any time by contacting [email protected].

ace7 will not use your personal data for any purpose that is incompatible with the purposes described above without first notifying you and, where required, obtaining your consent.

5. Data Sharing

ace7 does not sell your personal data. We may share your information with the following categories of third parties, but only to the minimum extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive only the transaction data required to process your deposits and withdrawals. These providers operate under their own privacy policies and are contractually required to handle your data securely.
• KYC and identity verification partners: Third-party verification services that assist with document authentication and fraud screening receive identity data strictly for verification purposes and are prohibited from using it for any other purpose.
• Technology and infrastructure providers: Cloud hosting, content delivery, and analytics service providers that support the technical operation of the ace7 platform. All such providers are bound by data processing agreements that restrict their use of your data.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are legally required to do so or where disclosure is necessary to protect the rights, property, or safety of ace7, our players, or the public.

In all cases where we share data with third parties, we implement appropriate contractual, technical, and organisational safeguards to protect your information.

6. Cookies & Tracking Technologies

ace7 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by a website server. We use the following types of cookies:

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies, load balancing cookies, and security tokens. These cookies cannot be disabled without preventing your use of the platform.
• Functional cookies: Remember your preferences such as language settings, display options, and last-used game category, so you do not have to re-configure them each time you visit.
• Analytical cookies: Collect anonymised information about how players use the platform — which pages are visited, how long sessions last, and which features are used most. This data helps us improve the platform experience.
• Responsible gaming cookies: Track session duration and gaming activity to support the responsible gaming tools we offer, including session reminders and deposit limit monitoring.

You may control non-essential cookies through your browser settings. However, disabling certain cookies may affect the functionality of the ace7 platform, particularly features that rely on session continuity. ace7 does not use third-party advertising or retargeting cookies.

7. Data Retention

ace7 retains your personal data for as long as your account is active and for a defined period following account closure, as set out below:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following permanent account closure, in accordance with our fraud prevention and record-keeping obligations.
• Transaction and financial data: Retained for a minimum of 5 years from the date of each transaction to satisfy financial record-keeping requirements.
• KYC documents: Retained for the duration of your account and for 5 years following closure. Original document images are stored in encrypted form with strictly controlled access.
• Support communications: Retained for 2 years from the date of the last interaction, to facilitate quality assurance and complaint resolution.
• Technical and usage data: Retained in aggregated or anonymised form for up to 2 years for platform improvement purposes. Raw, individually identifiable technical logs are deleted after 90 days.

When the applicable retention period expires, your data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

8. Data Security

ace7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for all personally identifiable information stored on our servers, including KYC documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular internal and third-party security audits and penetration testing of the platform infrastructure.
• Multi-factor authentication requirements for all staff accessing systems that process personal data.
• Automated intrusion detection and real-time security monitoring of all platform systems.

Despite our best efforts, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ace7 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

9. Your Rights

As a player on the ace7 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered account username.

• Right of access: You may request a copy of the personal data we hold about you. We will respond within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account details such as your name or address, you may also update certain fields directly within your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other lawful basis applies), or where processing has been unlawful. Please note that this right is subject to our legal retention obligations — we may not be able to delete all data immediately if we are required to retain it by law.
• Right to restriction: You may request that we temporarily suspend processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to other forms of processing, though in some cases we may be able to demonstrate a compelling legitimate ground to continue.
• Right to withdraw consent: Where our processing of your data is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

10. Minors

The ace7 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If you are under 21 years of age, you must not create an account or use the ace7 platform in any capacity.

If ace7 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has provided personal data to ace7, please contact us immediately at [email protected].

11. International Data Transfers

ace7 primarily processes and stores personal data on servers located in secure data centres. In some cases, your data may be transferred to, and processed by, third-party service providers located outside Bangladesh — for example, cloud infrastructure or KYC verification partners with operations in other countries.

Whenever personal data is transferred internationally, ace7 ensures that appropriate safeguards are in place to maintain a level of data protection consistent with this Privacy Policy. These safeguards include contractual data processing agreements and, where applicable, adherence to internationally recognised data transfer frameworks.

By using the ace7 platform and accepting this Privacy Policy, you acknowledge and consent to your personal data being transferred and processed in this manner.

12. Changes to This Policy

ace7 reserves the right to update or amend this Privacy Policy at any time. When we make changes, the revised Policy will be published on this page with an updated effective date. For material changes — those that significantly affect your rights or the way we handle your data — we will make reasonable efforts to notify you via the email address registered to your ace7 account prior to the change taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the ace7 platform following the publication of any revised Policy constitutes your acceptance of the updated terms.

13. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ace7 handles your personal data, please reach out to our support team. We are committed to resolving all data-related queries promptly and transparently.

Contact email: [email protected]

Please include "Privacy Policy Query" or "Data Rights Request" in the subject line of your message, along with your registered account username and a clear description of your query. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).