365ace Privacy Policy

1 Overview

This Privacy Policy explains how 365ace collects, uses, stores, and protects the personal data of players who register and use the 365ace platform at 365ace.asia. By creating an account and using the platform, you agree to the practices described in this policy.

365ace is committed to handling your personal data responsibly. We understand that players in Bangladesh trust us with sensitive information — including identity documents and mobile wallet details — and we take that responsibility seriously. This policy is written in plain language so you know exactly what happens to your data.

If you have any questions about this policy or how your data is handled, contact the support team at [email protected] at any time. The team is available 24 hours a day, 7 days a week.

2 Data We Collect

365ace collects personal data in two ways: information you provide directly when registering and using the platform, and information collected automatically when you access the site. Below is a breakdown of both categories.

Information you provide directly:

• Full name as it appears on your national ID or passport.
• Email address used to register your account.
• Mobile phone number linked to your bKash, Nagad, or Rocket wallet.
• Date of birth, used to verify that you are 18 years of age or older.
• Identity documents submitted during verification, such as a national ID card or passport.
• Any information you provide when contacting the support team.

Information collected automatically:

• IP address and approximate geographic location.
• Device type, operating system, and browser version.
• Pages visited on the 365ace platform and time spent on each page.
• Game sessions, bet amounts, and gameplay history.
• Login timestamps and session duration.

3 How We Use Your Data

365ace uses the personal data we collect for specific, legitimate purposes. We do not use your data for purposes beyond those listed below without first obtaining your consent.

365ace does not use your personal data to build advertising profiles or to target you with third-party advertisements. Promotional communications from 365ace relate only to offers and updates on the 365ace platform itself.

4 Data Sharing

365ace does not sell, rent, or trade your personal data to any third party. Data is shared only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment processors: bKash, Nagad, and Rocket receive only the information required to process your transaction — typically your phone number and transaction amount. They do not receive your full account profile or gameplay history.
• Identity verification services: When you submit identity documents for KYC verification, those documents may be processed by a third-party verification service. These services are contractually bound to handle your data securely and to use it only for verification purposes.
• Legal and regulatory authorities: 365ace may be required to disclose personal data to regulatory bodies or law enforcement agencies where required by applicable law. In such cases, 365ace will disclose only the minimum data required to comply with the legal obligation.
• Platform infrastructure providers: The servers and technical infrastructure that power 365ace are provided by third-party hosting services. These providers have access to data stored on their infrastructure but are contractually prohibited from accessing or using that data for any purpose other than providing the hosting service.

5 Payment Data

All deposits and withdrawals on 365ace are processed in Bangladeshi Taka (BDT) via bKash, Nagad, and Rocket. These transactions are initiated through the respective mobile wallet platforms, which means your wallet credentials — including your PIN — are entered directly into the bKash, Nagad, or Rocket interface and are never transmitted to or stored by 365ace.

365ace records the following payment-related data for each transaction:

• Transaction reference number provided by the wallet platform.
• Transaction amount in BDT.
• Date and time of the transaction.
• Mobile wallet type used (bKash, Nagad, or Rocket).
• The last four digits of the mobile number associated with the wallet.

This data is retained for the period required by applicable financial regulations and is used solely for the purposes of processing transactions, resolving disputes, and complying with anti-money laundering requirements. It is not used for any marketing purpose.

6 Cookies

365ace uses cookies — small text files stored on your device — to make the platform work correctly and to improve your experience. The table below explains the types of cookies used and their purpose.

365ace does not use advertising cookies or allow third-party advertising networks to place cookies on the platform. You can manage or delete cookies through your browser settings. Disabling non-essential cookies will not prevent you from using the platform, though some preference settings may not be saved between sessions.

7 Data Security

365ace takes the security of your personal data seriously. The platform uses industry-standard security measures to protect your data from unauthorised access, disclosure, alteration, or destruction.

• All data transmitted between your device and the 365ace platform is encrypted using TLS (Transport Layer Security).
• Personal data stored on 365ace servers is encrypted at rest.
• Access to player data is restricted to authorised personnel only, and all access is logged and audited.
• Passwords are stored using one-way hashing — 365ace staff cannot see your password.
• The platform is regularly tested for security vulnerabilities.

While 365ace takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password, do not share your login credentials with anyone, and contact support immediately if you suspect your account has been accessed without your permission.

8 Data Retention

365ace retains your personal data for as long as your account is active and for a period after account closure as required by applicable law and regulation. The specific retention periods for different categories of data are as follows:

• Account data (name, email, phone number): retained for the duration of your account and for 5 years after account closure.
• Transaction records: retained for a minimum of 5 years from the date of the transaction, in line with financial record-keeping requirements.
• Identity verification documents: retained for the duration of your account and for 5 years after account closure.
• Gameplay history: retained for 2 years from the date of each session.
• Support communications: retained for 2 years from the date of the communication.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised data may be retained for longer periods for statistical and analytical purposes.

9 Your Rights

As a 365ace player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the support team at [email protected] with the subject line "Data Request".

• Right of access: You can request a copy of the personal data 365ace holds about you. We will provide this within a reasonable timeframe.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you can request that it be corrected.
• Right to erasure: You can request that your personal data be deleted. This right is subject to legal retention requirements — some data must be kept for a minimum period regardless of your request.
• Right to restrict processing: In certain circumstances, you can request that we limit how we use your data while a dispute or query is being resolved.
• Right to data portability: You can request a copy of your data in a structured, machine-readable format.
• Right to object: You can object to the use of your data for certain purposes, including direct marketing communications from 365ace.

10 Minors

365ace is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. During registration, players are required to confirm that they are 18 years of age or older. 365ace may request proof of age at any time, and accounts found to belong to players under 18 will be closed immediately.

If you believe that a minor has registered an account on 365ace, please contact the support team at [email protected] immediately. We will investigate and take appropriate action, including closing the account and returning any deposited funds in accordance with applicable regulations.

11 Policy Changes

365ace may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or our data handling practices. When changes are made, the updated policy will be published on this page with a revised "last updated" date at the top.

For significant changes that materially affect how your personal data is used, 365ace will make reasonable efforts to notify registered players via email before the changes take effect. Continued use of the 365ace platform after a policy update constitutes acceptance of the revised Privacy Policy.

We recommend reviewing this page periodically so you are always aware of how your data is being handled. If you disagree with any changes to this policy, you should stop using the platform and contact the support team to close your account.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 365ace handles your personal data, please get in touch with the support team. We are available around the clock and will respond to privacy-related queries as a priority.

• Email: [email protected]
• Subject line for data requests: "Data Request"
• Subject line for privacy concerns: "Privacy Query"
• Response time: typically within 24 hours for privacy-related queries.

When submitting a data request, please include your registered email address and a brief description of your request so the team can locate your account and process your request efficiently. Identity verification may be required before certain data requests can be fulfilled, to ensure we are releasing data only to the account holder.