ace999 Privacy Policy

1. Introduction

ace999 ("ace999", "we", "us", "our") operates the online betting and casino platform accessible at https://ace999.vip ("Platform"). In the course of providing our services to registered players in Bangladesh and other eligible jurisdictions, ace999 collects and processes certain categories of personal data.

This Privacy Policy ("Policy") explains in clear terms what personal data ace999 collects, the purposes for which it is used, the basis on which it is processed, how long it is retained, and the rights available to you as a data subject. This Policy applies to all users of the ace999 Platform, including registered account holders and unregistered visitors.

By accessing the Platform or registering an account, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you must not use the Platform or provide personal data to ace999.

This Policy should be read alongside the ace999 Terms & Conditions, which govern the overall contractual relationship between you and ace999.

2. Data Controller

ace999 is the data controller in respect of all personal data collected through the Platform. For the purposes of this Policy , the data controller is the operator of ace999.vip. If you have any questions about how ace999 handles your personal data, or if you wish to exercise any of your data rights, please contact our dedicated privacy team at [email protected].

3. Personal Data We Collect

ace999 collects the following categories of personal data from players on the Platform:

ace999 does not intentionally collect any special category data (such as health data, biometric data, political opinions, or religious beliefs) unless such data is directly relevant to a responsible gaming self-exclusion request or a legal obligation. Where special category data is collected for such purposes, it is handled with the highest level of care and access restriction.

4. How We Collect Your Data

ace999 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or responding to a promotion.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools when you visit or interact with the Platform. This data is collected regardless of whether you are logged in to an account.
• Third-party sources: Identity verification and fraud prevention data received from third-party KYC and anti-money laundering (AML) service providers where ace999 has engaged such providers to assist with verification obligations.
• Payment processors: Transaction confirmation and payment status data received from mobile wallet providers (bKash, Nagad, Rocket, Upay) and banking partners in connection with deposits and withdrawals.

5. How We Use Your Personal Data

ace999 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your registered player account, verifying your identity and age, and managing your account settings and preferences.
• Service delivery: Processing deposits and withdrawals, crediting winnings, applying bonuses, and delivering the full range of betting and casino services available on the Platform.
• Identity verification and fraud prevention: Conducting KYC checks to verify your identity and age, screening against sanctions lists, detecting and preventing fraudulent account activity, and complying with anti-money laundering obligations.
• Responsible gaming: Monitoring gameplay patterns to identify potential signs of problem gambling, administering deposit limits and self-exclusion requests, and providing responsible gaming support resources to players who need them.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance when you contact the ace999 support team.
• Platform improvement: Analysing usage data in aggregate (and where possible in anonymised form) to understand how players interact with the Platform, identify technical issues, and improve the quality and range of services offered.
• Marketing communications: Sending you promotional offers, bonus notifications, and news about new games or features — but only where you have consented to receive such communications. You may opt out of marketing communications at any time by contacting support at [email protected].
• Legal and regulatory compliance: Retaining records and providing information as required by applicable laws, regulations, and legitimate requests from law enforcement or regulatory authorities.

6. Legal Basis for Processing

ace999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to deliver the services set out in the ace999 Terms & Conditions, including account registration, transaction processing, and identity verification.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and data retention obligations.
• Legitimate interests: Processing carried out to pursue ace999's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your own privacy rights.
• Consent: Processing carried out on the basis of your explicit consent, particularly in relation to marketing communications. Where consent is the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Data with Third Parties

ace999 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to binding data protection obligations:

• Game providers: Certified third-party game providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) receive the minimum technical session data necessary to authenticate your game session and record your game results. These providers do not receive your full identity or financial details.
• Payment processors: Mobile wallet providers (bKash, Nagad, Rocket, Upay) and banking partners receive financial data necessary to process your deposit or withdrawal transaction.
• KYC and AML providers: Third-party identity verification and anti-money laundering screening services receive identity and document data as necessary to fulfil verification obligations. All such providers operate under strict data processing agreements.
• IT and hosting providers: Cloud infrastructure and hosting providers that store Platform data on behalf of ace999. Such providers act as data processors and are contractually bound to process data only on ace999's instructions.
• Law enforcement and regulatory authorities: ace999 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, or where necessary to investigate suspected fraud, match-fixing, or other criminal activity involving the Platform.

ace999 does not sell, rent, or license your personal data to any third party for that party's own commercial or marketing purposes.

8. International Data Transfers

In some cases, personal data processed by ace999 may be transferred to, stored in, or accessed from locations outside of Bangladesh — for example, in connection with cloud hosting infrastructure or third-party game providers whose servers are located in other jurisdictions. Where such transfers occur, ace999 takes appropriate safeguards to ensure that your personal data remains protected to the same standard as described in this Policy. These safeguards may include contractual data transfer agreements, standard contractual clauses, or equivalent data protection mechanisms appropriate to the recipient country.

9. Data Retention

ace999 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Account and identity data: Retained for the duration of your account plus a minimum of five years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping requirements.
• Verification documents: Retained for a minimum of five years following the completion of KYC verification, or for the duration of any related investigation, whichever is longer.
• Support and communications data: Retained for three years from the date of the most recent communication, unless the communication forms part of an ongoing dispute, in which case records are retained until the dispute is resolved.
• Technical and usage data: Retained in identifiable form for up to 24 months from collection, after which it is aggregated and anonymised for analytical purposes.
• Marketing consent records: Retained for as long as you remain subscribed to marketing communications, plus three years following any opt-out, to demonstrate that consent was properly obtained and withdrawn.

10. Security Measures

ace999 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your browser and ace999's servers.
• Encryption of sensitive data at rest, including financial records and identity documents.
• Role-based access controls restricting access to personal data to only those employees and contractors who require it to carry out their job functions.
• Regular internal security reviews and vulnerability assessments of the Platform infrastructure.
• Incident response procedures to detect, investigate, and respond to potential data breaches in a timely manner.
• Staff training on data protection obligations and secure data handling practices.

While ace999 takes all reasonable steps to protect your personal data, no internet-based system can guarantee absolute security. You are responsible for keeping your own account credentials confidential and for notifying ace999 immediately at [email protected] if you suspect any unauthorised access to your account.

11. Cookies and Tracking Technologies

ace999 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without affecting your ability to use the Platform.
• Analytics cookies: Used to collect aggregated data about how visitors interact with the Platform — including pages visited, session duration, and navigation paths — to help ace999 improve the user experience. Data collected via analytics cookies is processed in anonymised or pseudonymised form wherever possible.
• Functional cookies: Used to remember your preferences (such as language settings and game display options) so that the Platform delivers a more personalised experience on return visits.
• Performance cookies: Used to monitor Platform load times and technical performance in order to identify and resolve infrastructure issues.

By continuing to use the ace999 Platform after being presented with our cookie notice, you consent to the use of non-essential cookies as described above. You may manage or disable cookies through your browser settings at any time, noting that disabling essential cookies may impair your ability to use certain Platform features.

12. Your Data Rights

As a data subject, you hold the following rights in relation to the personal data that ace999 holds about you. To exercise any of these rights, please contact our privacy team at [email protected] with a clear description of your request. ace999 will respond within 30 days of receipt.

• Right of access: You may request a copy of all personal data that ace999 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ace999's legal retention obligations.
• Right to restrict processing: You may request that ace999 temporarily suspend processing of your personal data while a dispute about accuracy or legal basis is being resolved.
• Right to data portability: Where technically feasible, you may request that ace999 provide your personal data in a structured, machine-readable format so that it can be transferred to another service.
• Right to object: You may object to the processing of your personal data where that processing is based on ace999's legitimate interests, including the use of your data for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

ace999 will not charge a fee for processing any data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied or the request declined.

13. Minors

The ace999 Platform is strictly intended for individuals aged 18 years and above. ace999 does not knowingly collect personal data from any person under the age of 18. If ace999 discovers that personal data has been collected from a minor — whether as a result of a false age declaration at registration or any other means — the relevant account will be immediately closed, all funds will be handled in accordance with the ace999 Terms & Conditions and applicable law, and all associated personal data will be deleted as soon as practicable.

If you have reason to believe that a minor has registered an account on the ace999 Platform, please notify us immediately at [email protected].

14. Changes to This Privacy Policy

ace999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services offered on the Platform. Where changes are material, ace999 will notify registered players by posting a prominent notice on the Platform homepage or by sending an email to the address registered on your account, at least 14 days before the revised Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any change to this Policy, you must stop using the Platform and contact support to close your account.

15. Contact and Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how ace999 handles your personal data, please contact us using the details below:

• Email: [email protected]
• Subject line (recommended): Privacy Enquiry — [Your Registered Username]
• Response time: ace999 targets an initial response to all privacy-related enquiries within 48 hours, with full resolution within 30 calendar days.

ace999 is committed to resolving all privacy-related concerns promptly, transparently, and in accordance with this Policy and applicable data protection principles.