ace670 Privacy Policy

1 Lawful Basis for Processing

ace670 processes personal data only where a valid lawful basis exists. The primary lawful bases we rely upon are:

• Contractual necessity — processing required to operate your account, process transactions, and deliver the services you have requested.
• Legitimate interests — processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your rights.
• Consent — processing for direct marketing communications, where you have explicitly opted in and may withdraw consent at any time.
• Legal obligation — processing required to comply with applicable anti-money laundering, identity verification, and financial record-keeping obligations.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent does not affect processing carried out on other lawful bases.

2 How We Use Your Data

Personal data collected by ace670 is used for the following purposes:

• Creating and maintaining your player account, including verifying your identity and age before account activation.
• Processing deposits and withdrawals via your chosen payment method, including bKash, Nagad, Rocket, and other supported channels.
• Monitoring your account for signs of problem gambling and providing responsible gaming interventions where appropriate, including proactive contact from our responsible gaming team if unusual patterns are detected.
• Detecting and preventing fraud, cheating, money laundering, and other prohibited activities as defined in our Terms & Conditions.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, and changes to platform policies.
• Sending promotional communications about bonuses, new games, and seasonal offers — only where you have opted in to receive such communications.
• Analysing aggregated, anonymised usage data to improve the performance, reliability, and content of the ace670 platform.
• Fulfilling our legal and compliance obligations, including responding to lawful requests from law enforcement or regulatory bodies.

3 Cookies and Tracking Technologies

ace670 uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. Cookies are small text files placed on your device when you visit the Platform. We use the following categories of cookies:

• Essential cookies — required for the Platform to function correctly, including maintaining your login session and remembering your language preference. These cannot be disabled without affecting core functionality.
• Analytics cookies — used to collect aggregated information about how players navigate the Platform, which pages are visited most frequently, and how errors occur. This data is used to improve platform performance and does not identify you personally.
• Preference cookies — used to remember your settings and personalisation choices, such as your preferred deposit method and display preferences.

You may manage your cookie preferences through your browser settings. Blocking essential cookies will impair Platform functionality and may prevent you from logging into your account. ace670 does not use third-party advertising cookies or cross-site tracking technologies.

4 Data Sharing and Disclosure

ace670 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share your data only in the following limited and controlled circumstances:

• Payment processors — your transaction data is shared with payment service providers such as bKash, Nagad, Rocket, and Upay solely to the extent necessary to process your requested financial transactions.
• Identity verification providers — your KYC documentation may be shared with third-party identity verification services engaged by ace670 to conduct age and identity checks. These providers operate under strict confidentiality agreements.
• Technical service providers — companies that provide hosting, security, analytics, or customer support infrastructure to ace670 may have access to personal data as part of their service delivery. All such providers are contractually required to use data only for the specified purpose and not for any independent commercial purpose.
• Game content providers — game studios and providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data necessary to deliver their game content within the ace670 Platform.
• Legal and regulatory authorities — ace670 will disclose personal data to law enforcement, regulatory bodies, or other official authorities where required by law or where disclosure is necessary to protect the rights, property, or safety of ace670, its players, or third parties.

All third-party data processors engaged by ace670 are required to implement security standards equivalent to those applied by ace670 itself. We carry out due diligence on all service providers before engaging them and review these relationships periodically.

5 Data Security

ace670 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption applied to all data transmitted between your device and the ace670 servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encryption at rest for sensitive data categories including identity documents and payment account references stored on our servers.
• Role-based access controls ensuring that only personnel with a documented operational need can access player personal data, and that such access is logged and audited.
• Regular internal security reviews and vulnerability assessments of platform infrastructure.
• Two-factor authentication options available to players for their own account protection.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with ace670 is no longer secure, please contact our support team immediately at [email protected] (plain text — not a clickable link).

6 Data Retention

ace670 retains personal data for the period necessary to fulfil the purposes described in this Policy and to meet our legal and compliance obligations. Our general retention guidelines are as follows:

• Active account data — retained for the duration of the account relationship and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records — retained for a minimum of five years from the date of each transaction to satisfy financial record-keeping obligations.
• Identity verification documents — retained for the duration of the account relationship and for five years post-closure, or longer where required by applicable law.
• Support communications — retained for three years from the date of the relevant interaction unless the matter relates to an ongoing dispute or legal proceeding.
• Marketing preference data — retained until you withdraw consent to marketing communications, at which point your details are removed from active marketing lists (though a record of the withdrawal of consent is retained).

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

7 International Data Transfers

ace670 operates primarily for players based in Bangladesh. Some of our technical service providers and game content partners are located outside Bangladesh. Where personal data is transferred to processors or sub-processors located in other jurisdictions, ace670 ensures that appropriate safeguards are in place to protect the data at a level equivalent to that described in this Policy.

Such safeguards may include contractual clauses requiring the recipient to treat your data with the same standard of care as ace670, or the recipient may operate in a jurisdiction recognised as providing adequate data protection by applicable international standards. ace670 does not transfer personal data to jurisdictions that do not provide adequate protection without implementing compensating controls.

8 Children and Minors

The ace670 platform is strictly intended for adults aged 21 years and above. ace670 does not knowingly collect or process personal data belonging to individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 without appropriate parental consent, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered an account with ace670 using false age information, please contact our support team immediately so that we can investigate and take appropriate action. ace670 treats all reported instances of underage account use as a high-priority matter.

9 Marketing Communications

ace670 may send you promotional emails, platform notifications, and SMS messages about bonuses, new games, seasonal promotions, and platform updates. We will only send marketing communications where you have explicitly opted in to receive them at the time of registration or through your account settings.

You may withdraw your consent to marketing communications at any time by updating your notification preferences within your account settings or by contacting the support team. Withdrawal of marketing consent will be processed within a reasonable timeframe. Please note that withdrawing marketing consent does not affect transactional communications such as deposit confirmations and security alerts, which will continue to be sent regardless of your marketing preferences.

10 Changes to This Privacy Policy

ace670 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to the Policy, we will notify registered players via the email address associated with their account and post a prominent notice on the Platform. The updated Policy will display its effective date at the top of the document.

Your continued use of the ace670 Platform following the effective date of any revised Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to stay informed about how we are protecting your information. The version of the Policy that was in effect at the time of any disputed data processing activity will apply to that activity.

11 Contact for Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a potential data protection concern, please contact the ace670 data support team. We aim to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and provide a substantive response within 10 business days.

Contact email: [email protected] (plain text — not a clickable link). Please include "Privacy Enquiry" in your message subject so that your request is directed to the appropriate team member without delay.