ace670 Privacy Policy

1 Information We Collect

ace670 collects personal information from you in several ways: directly when you register an account or contact our support team, automatically as you use the platform, and from third-party sources such as payment processors and identity verification services. The following categories of data may be collected:

Account Registration Data

When you create an ace670 account, we collect the information you provide during the registration form, including your full legal name, date of birth, residential address in Bangladesh, email address, and Bangladeshi mobile number. This information is required to open your account and is used to verify your identity as part of our KYC process.

Identity Verification Documents

To comply with our responsible gaming and anti-money-laundering obligations, we may request copies of government-issued identification documents such as your National Identity Card (NID) or passport, proof of address, and evidence of your payment method ownership. These documents are handled with the highest level of security and are accessible only to authorised verification personnel.

Financial & Transaction Data

ace670 records all financial transactions conducted on the platform, including deposit amounts, withdrawal requests, transaction timestamps, and the payment methods used (such as your bKash mobile number or Nagad account reference). Full payment card or mobile banking credentials are never stored directly by ace670 — these are handled by our certified payment processing partners.

Behavioural & Usage Data

We automatically collect technical and behavioural data when you use the ace670 platform, including your IP address, device type, browser version, operating system, session duration, pages visited, games played, bets placed, and interaction patterns. This data helps us improve the platform experience and detect unusual activity that may indicate fraud or responsible gaming concerns.

Communications Data

If you contact our customer support team — by email, live chat, or any other channel — we retain records of that correspondence, including the content of your messages and any attachments. This allows us to track complaint resolution and improve the quality of our support service.

2 How We Use Your Data

ace670 processes your personal data only for lawful purposes. The following table summarises the primary purposes for which your data is used and the legal basis underpinning each activity:

Marketing Communications

ace670 will only send you promotional emails or SMS messages if you have expressly opted in to receive marketing communications during registration or via your account preferences. You may withdraw your consent to marketing at any time by updating your notification settings in your account dashboard or by contacting our support team. Opting out of marketing does not affect the delivery of transactional messages (such as deposit confirmations and withdrawal notifications), which are sent as a necessary part of account operation.

3 Data Sharing & Third Parties

ace670 does not sell, rent, or trade your personal data to third parties for commercial or advertising purposes. However, in order to deliver our services effectively, we share specific categories of data with the following types of trusted partners, each bound by strict data processing agreements:

Payment Processors

To process your deposits and withdrawals in BDT, ace670 shares relevant transaction data with our payment processing partners, including mobile financial service providers such as bKash, Nagad, Rocket, and Upay, as well as partner banking institutions including Dutch-Bangla Bank, City Bank, BRAC Bank, and others. These partners receive only the information necessary to execute and confirm your transactions.

Identity Verification Partners

Where we use third-party identity verification services to assist with our KYC process, we share identity document data and personal details with those providers solely for the purpose of age and identity verification. Such partners are prohibited from using your data for any purpose other than the specific verification task.

Game Providers

ace670's casino and betting games are powered by certified third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a player session token and anonymised identifier to facilitate gameplay, but they do not receive your full personal profile, financial data, or identity documents.

Law Enforcement & Regulatory Bodies

ace670 may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are legally required to do so, or where disclosure is necessary to prevent, detect, or prosecute criminal activity including fraud, money laundering, or terrorist financing. Any such disclosure is made only to the extent required by applicable law and is documented internally.

4 Cookies & Tracking Technologies

ace670 uses cookies and similar technologies (such as web beacons and local storage) to operate core platform functions, remember your preferences, and analyse how players interact with the site. The following categories of cookies are used:

ace670 does not use third-party advertising or retargeting cookies. You will not see ace670 advertisements following you across other websites based on your browsing activity on our platform.

Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will affect your ability to log in and use core platform features. Disabling analytical cookies will not impact your ability to play games or manage your account. Detailed instructions for managing cookies are available in your browser's help documentation.

5 Data Retention & Storage

ace670 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy. The following retention periods apply to the main categories of data we hold:

• Account and registration data: Retained for the lifetime of your account and for a period of five years following account closure, to meet our legal and regulatory obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in line with financial record-keeping requirements applicable to payment service operations.
• Identity verification documents: Retained for five years following account closure or the completion of the relevant verification process, whichever is later.
• Customer support communications: Retained for a period of three years from the date of the most recent interaction in a support thread.
• Behavioural and usage data: Anonymised and aggregated after 24 months; raw session data is retained for up to 12 months for security and platform improvement purposes.
• Marketing consent records: Retained for as long as you hold an ace670 account, and for three years following account closure as evidence of consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual player. Backup copies of data are purged on a rolling schedule consistent with the primary retention timelines above.

Data Storage Location

ace670's primary data infrastructure is hosted on secure servers. All data storage and processing arrangements are subject to contractual data protection obligations that require our hosting and infrastructure partners to maintain security standards consistent with this Privacy Policy. Where data is stored or processed in jurisdictions outside Bangladesh, appropriate safeguards are in place to protect your information.

6 Your Privacy Rights

As an ace670 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at support at ace670.club. We aim to respond to all data rights requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of all personal data ace670 holds about you, along with information about how it is being processed. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. You may also update certain account details directly through your account settings.
• Right to Erasure: You may request that ace670 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there is no overriding legitimate interest. This right is subject to our legal retention obligations.
• Right to Restrict Processing: In certain circumstances, you may request that ace670 restrict the processing of your personal data — for example, while a dispute about accuracy is being resolved or while you have lodged an objection to processing.
• Right to Data Portability: Where we process your data on the basis of your consent or for the performance of a contract, you have the right to receive your data in a structured, commonly used, machine-readable format and to request that it be transferred to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case we will assess whether our interests are overridden by your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Security Measures

ace670 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• TLS/SSL Encryption: All data transmitted between your browser or mobile device and the ace670 platform is encrypted using Transport Layer Security (TLS) protocols. You can verify this by checking for the padlock symbol in your browser's address bar when visiting ace670.club.
• Encryption at Rest: Sensitive personal data, including identity documents and payment records, is encrypted when stored on our servers using strong, industry-accepted encryption algorithms.
• Access Controls: Access to player personal data is restricted on a strict need-to-know basis. Only authorised ace670 personnel with a specific operational requirement may access personal data, and all access is logged and audited.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their ace670 accounts. Our OTP system sends a one-time verification code to your registered Bangladeshi mobile number each time a login is detected from an unrecognised device or location.
• Regular Security Reviews: Our platform and data infrastructure undergo regular internal security reviews and periodic external assessments to identify and address potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, ace670 will notify affected players without undue delay and take immediate steps to contain the breach, assess its impact, and prevent recurrence.

8 Policy Updates & Contact

ace670 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform services. When material changes are made, we will notify registered players via account notification or email before the updated policy takes effect. The "Effective Date" at the top of this document will be updated to reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how ace670 is protecting your data. Your continued use of the platform following the publication of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree to any changes, you should stop using the platform and contact us to close your account.

Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about the way your personal data is being handled by ace670, please contact us using the details below. Our privacy team is available seven days a week, including Bangladeshi public holidays such as Eid, Victory Day (December 16), and Independence Day (March 26).

• Email: support at ace670.club
• Subject Line: Privacy Policy Enquiry / Data Rights Request
• Response Time: Within 72 hours for acknowledgement; full response within 30 calendar days
• Office Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)