Privacy Policy — How ace7 Protects Your Data

1. Information We Collect

ace7 collects personal data from players through several channels: information you provide directly when registering and using the platform, information generated automatically by your use of the platform, and information received from third-party payment processors and identity verification partners. The following table summarises the categories of data collected and their source.

ace7 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or data concerning health beyond what is strictly necessary for responsible gaming assessments (for example, self-declared information submitted when requesting self-exclusion or deposit limit tools).

2. How We Use Your Information

ace7 processes your personal data only for lawful, specified, and legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which ace7 uses your personal data are set out below.

• Account Management: To create, maintain, and administer your ace7 player account, including verifying your identity and age (18+ requirement), processing your registration details, and managing your account preferences and responsible gaming settings.
• Service Delivery: To provide you with access to all betting markets, casino games, and platform features available on ace7, including live cricket odds for BPL, IPL, T20 World Cup, and Bangladesh Tigers matches, as well as slots from Pragmatic Play, NetEnt, Microgaming, and live tables from Evolution Gaming and Ezugi.
• Payment Processing: To process your deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and to verify and execute withdrawal requests to your registered payment method. ace7 uses your financial data solely for this purpose and does not retain full payment credentials on its own servers.
• Fraud Prevention and Security: To monitor your account and transaction activity for signs of fraud, money laundering, multi-accounting, bonus abuse, and other forms of prohibited conduct. This monitoring is a legal and operational necessity and is carried out using both automated systems and manual review.
• Responsible Gaming: To administer responsible gaming tools you have activated — including deposit limits, session time alerts, cooling-off periods, and self-exclusion — and to monitor usage patterns that may indicate problem gambling, enabling proactive outreach where appropriate.
• Customer Support: To respond to your queries, complaints, and support requests submitted via Live Chat or email, and to maintain a record of those communications for quality assurance and dispute resolution purposes.
• Legal Compliance: To comply with any applicable legal obligations, including responding to lawful requests from Bangladeshi law enforcement or judicial authorities, and maintaining transaction records for the minimum legally required period.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the ace7 platform, identify technical issues, and improve the overall user experience — including the layout of cricket betting markets and the performance of game loading times.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via SMS or email — but only where you have given explicit consent to receive such communications. You may withdraw marketing consent at any time via your account settings or by contacting support.

3. Data Sharing and Disclosure

ace7 does not sell your personal data to any third party. We share your personal data only with trusted partners and service providers who require access to it for the specific, limited purposes described below, and only under contractual obligations that require them to protect your data to the same standard as ace7 does.

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the transaction data necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and regulatory obligations as licensed financial service providers in Bangladesh.
• Identity Verification Partners: Third-party KYC service providers may receive copies of your identity documents for the purpose of age and identity verification. These partners are contractually bound to use your data solely for verification and to securely delete documents once verification is complete.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data (e.g., game ID, stake amount, outcome) to support game performance monitoring, RTP auditing, and jackpot management. These providers do not receive your name, contact details, or payment information.
• Fraud and Security Partners: Specialised fraud detection and cybersecurity service providers may process your IP address, device fingerprint, and account activity data for the sole purpose of identifying and preventing fraudulent activity on the ace7 platform.
• Legal and Regulatory Authorities: ace7 may disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by applicable law, court order, or legitimate legal process. In such cases, ace7 will disclose only the minimum amount of data required to satisfy the legal obligation.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a substantial part of ace7's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to the way your data is processed via the contact details on your account.

4. Cookies and Tracking Technologies

ace7 uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences, keep your session secure, and understand how the platform is used. A cookie is a small text file placed on your device by the ace7 platform when you visit. The following table describes the types of cookies ace7 uses.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. Disabling functional or analytical cookies will not affect your ability to bet or play games but may reduce the quality of your experience. ace7 does not use third-party advertising cookies or cross-site tracking cookies of any kind.

5. Data Security Measures

Protecting your personal data against unauthorised access, loss, or misuse is a core operational priority for ace7. We apply a layered security approach that combines technical controls, procedural safeguards, and staff training to maintain the confidentiality and integrity of your data at all times.

• Transport Encryption: All data exchanged between your browser or app and the ace7 platform is encrypted using TLS 1.2 or higher (256-bit SSL). This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Storage Encryption: Sensitive personal data stored in ace7's databases — including identity documents, payment account references, and KYC records — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from encrypted data and are rotated on a defined schedule.
• Access Controls: Access to personal data within ace7's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific job functions. All internal access is logged and subject to regular audit.
• OTP Authentication: Your ace7 account is protected by one-time password (OTP) verification sent to your registered mobile number. This two-factor approach significantly reduces the risk of unauthorised account access even if your password is compromised.
• Penetration Testing: ace7's platform infrastructure undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: In the event of a confirmed data security incident that affects your personal data, ace7 will notify you via the contact details on your account within a reasonable timeframe and will provide clear information about the nature of the incident and the steps being taken to address it.

6. Data Retention Policy

ace7 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory requirements, and to resolve disputes or enforce our agreements. Once data is no longer required for any of these purposes, it is securely deleted or irreversibly anonymised.

Where you request deletion of your personal data and no overriding legal obligation requires us to retain it, ace7 will action your request within 30 days of receipt and confirm completion. Please note that even following deletion, anonymised and aggregated data derived from your activity — which cannot be used to identify you — may be retained indefinitely for statistical and analytical purposes.

7. Your Rights Over Your Data

As a player on the ace7 platform, you hold a number of rights in relation to the personal data we hold about you. ace7 is committed to honouring these rights promptly and without undue restriction. The rights described below may be exercised by contacting our support team at any time.

• Right of Access: You have the right to request a copy of the personal data ace7 holds about you. We will provide this within 30 days of your verified request, free of charge, in a readable format.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact our support team with the specific data point to be corrected and, where relevant, supporting documentation.
• Right to Erasure: You may request that ace7 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you believe processing is unlawful. This right is subject to overriding legal retention obligations described in Section 6 above.
• Right to Restrict Processing: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that ace7 restrict the processing of your personal data to storage only, without further active use.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your individual circumstances give rise to compelling grounds for objection.
• Right to Data Portability: Where ace7 processes your data on the basis of your consent or a contract with you, and that processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where ace7 relies on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to your withdrawal. Use your account settings or contact support to withdraw consent.

8. Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or the way ace7 handles your personal data, we encourage you to contact us directly. Our support team is available around the clock to address privacy-related enquiries.

• Email: [email protected] — for written privacy enquiries, data access requests, and erasure requests. Please include "Privacy Request" in your subject line to ensure prompt routing to the relevant team.
• Live Chat: Available 24 hours a day, 7 days a week, directly on the ace7 platform. Live Chat is the fastest route to initial support for general privacy questions.
• Response Times: ace7 aims to acknowledge all privacy enquiries within 24 hours and to provide a substantive response within 7 working days. Complex data access or erasure requests may require up to 30 days to fulfil, in line with standard data protection practice. All times are Bangladesh Standard Time (UTC+6).