ace77 Privacy Policy

1Who We Are

ace77 is an online casino and sports betting platform operating at ace77.club and targeting players in Bangladesh. When this Policy refers to "ace77", "we", "us", or "our", it refers to the operator of the ace77 Platform. For all data-related enquiries, the data controller can be reached at [email protected].

ace77 takes its obligations as a data controller seriously. We only collect the minimum personal data necessary to operate the Platform, verify player identity, process payments, comply with our anti-money laundering obligations, and provide player support. We do not collect or process special-category personal data (such as biometric data, health data, or political opinions).

2What Data We Collect

ace77 collects personal data from three sources: data you provide directly, data generated automatically as you use the Platform, and data received from third-party service providers such as payment processors. The specific categories of personal data we collect are set out below.

Data You Provide Directly

• Full name and date of birth — collected at registration to verify that you meet the minimum age requirement of 21 years.
• Bangladesh mobile number — used as your primary account identifier, for OTP verification at login, and for transactional SMS notifications related to deposits and withdrawals.
• National Identity Card (NID) number or passport number — collected as part of KYC verification when required by ace77's anti-money laundering procedures.
• Residential address in Bangladesh — collected during KYC verification to confirm your location and satisfy identity verification requirements.
• Communications you send us — including support messages, complaint submissions, and any correspondence with the ace77 support team via email or in-platform chat.

Data Generated Automatically

• Device and browser data — including device type (Android/iOS), operating system version, browser type and version, screen resolution, and device language setting.
• IP address and approximate geolocation — used to verify that you are accessing the Platform from Bangladesh and to detect suspicious access patterns that may indicate account compromise.
• Session and gameplay data — including login timestamps, session duration, game titles played, bet amounts, win/loss outcomes, and betting history. This data is used to operate the Platform, settle bets correctly, process bonus wagering requirements, and identify problem gambling patterns.
• Cookie and tracking data — see Clause 6 (Cookies and Tracking Technologies) for full details of what cookies ace77 uses and how to manage your preferences.

Data from Third Parties

• Payment verification data — bKash, Nagad, Rocket, Upay, Visa, and Mastercard may share transaction confirmation data (including transaction reference numbers and wallet-holder names) with ace77 to confirm the status of deposits and withdrawals. ace77 never receives or stores your bKash PIN, card CVV, or full card number.
• Fraud and AML screening data — ace77 may use third-party fraud prevention and anti-money laundering screening services. These services may share data with us about flagged transactions or high-risk patterns associated with an account or payment method.
• Self-exclusion registry data — where applicable, ace77 may receive data from responsible gaming self-exclusion registries to enforce exclusion requests submitted by players.

3How We Use Your Data

ace77 uses your personal data only for the purposes set out in the table below. We do not use your data for any purpose that is incompatible with the purpose for which it was collected.

4Legal Basis for Processing

ace77 processes your personal data on the following legal bases:

• Contractual necessity — processing your registration data, gameplay data, and payment data is necessary to perform the contract between you and ace77 (your account agreement and these Terms & Conditions).
• Legal obligation — processing identity and payment data for KYC and anti-money laundering purposes is necessary to comply with legal obligations applicable to ace77 as a payment-processing platform.
• Legitimate interests — processing device data, IP data, and session data for fraud prevention, responsible gaming monitoring, and Platform security is necessary for the legitimate interests of ace77 and its players, and those interests are not overridden by your privacy rights.
• Consent — where ace77 sends you optional promotional communications (such as bonus offer SMS notifications), we do so on the basis of your consent. You may withdraw this consent at any time by contacting [email protected].

5Sharing Your Personal Data

ace77 does not sell your personal data. We share your personal data only in the limited circumstances set out below, and only to the extent necessary for the stated purpose.

Payment Processors

To process deposits and withdrawals, ace77 shares your name and registered mobile number with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, or Mastercard). This sharing is strictly limited to the transaction data required to route and confirm your payment. Payment processors operate under their own privacy policies and are required to maintain appropriate data security standards.

Technology and Service Providers

ace77 uses third-party technology providers to operate the Platform, including game content providers (such as Pragmatic Play, Evolution Gaming, PG Soft, Habanero, NetEnt, Microgaming, Spribe, and Ezugi), cloud hosting services, and customer support tools. These providers act as data processors on ace77's behalf and are contractually bound to process your data only as instructed by ace77, to maintain appropriate security standards, and not to use your data for their own purposes.

Legal and Regulatory Disclosure

ace77 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are required to do so by applicable law, or where disclosure is necessary to protect the safety of our players, staff, or the public, or to prevent or detect fraud or other criminal activity.

6Cookies and Tracking Technologies

ace77 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file that is stored on your device when you visit a website. Cookies help us recognise your device on return visits, maintain your session when you are logged in, and understand how players use the Platform so we can improve it.

Essential Cookies

Essential cookies are strictly necessary to operate the Platform. They maintain your login session, remember your language preference, and ensure that the Platform functions correctly and securely. Essential cookies cannot be disabled without breaking the Platform. They do not track your activity for marketing purposes and do not store any personal data beyond what is necessary for session management.

Analytics Cookies

ace77 uses anonymised analytics cookies to understand aggregate patterns of Platform usage — for example, which pages are most visited, how long players stay on a page, and which features generate the most engagement. This data is used solely to improve the Platform experience and is never linked back to an individual player's account or identity.

Managing Your Cookie Preferences

You can control and manage cookies through your mobile browser settings. Most browsers allow you to refuse to accept cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling essential cookies may prevent the Platform from functioning correctly, and you may not be able to log in or access account features.

ace77 does not currently use third-party advertising cookies or cross-site tracking cookies. No advertising network or social media platform places cookies on the Platform on our behalf.

7Data Retention

ace77 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The following retention periods apply: account registration data and KYC documents are retained for a minimum of 5 years from the date of account closure to meet anti-money laundering record-keeping requirements; transaction records (deposits, withdrawals, and bet history) are retained for a minimum of 5 years from the date of each transaction; customer support correspondence is retained for 3 years from the date of the last interaction; cookie and analytics data is anonymised or deleted within 13 months of collection.

When your data is no longer required for these purposes and no legal obligation requires its continued retention, ace77 will securely delete or anonymise it. If you close your account and request deletion of your personal data, ace77 will complete the deletion within 30 days subject to the legal retention periods described above.

8Data Security

ace77 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data transmitted between your device and ace77 servers; encrypted storage of passwords using industry-standard hashing algorithms; access controls that limit access to personal data to authorised ace77 staff on a need-to-know basis; regular security reviews of Platform infrastructure and third-party integrations; and incident response procedures to detect, investigate, and report data security breaches.

While ace77 uses all reasonable measures to protect your data, no transmission over the internet or electronic storage system is 100% secure. You are responsible for keeping your account credentials (mobile number and password) confidential. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately.

9Your Data Rights

As a player at ace77, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with your registered mobile number and a description of your request. ace77 will respond within 30 days.

• Right of access — you may request a copy of all personal data ace77 holds about you. ace77 will provide this in a commonly used electronic format within 30 days of your request.
• Right to rectification — if any personal data ace77 holds about you is inaccurate or incomplete, you may request that it be corrected or completed. ace77 will action valid rectification requests within 14 days.
• Right to erasure ("right to be forgotten") — you may request that ace77 delete your personal data where: the data is no longer necessary for the purpose for which it was collected; you withdraw consent and there is no other legal basis for processing; or the data has been processed unlawfully. This right is subject to ace77's legal retention obligations described in Clause 7.
• Right to restriction of processing — you may request that ace77 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed, or where you have objected to processing pending a determination of ace77's legitimate interests.
• Right to data portability — you may request a copy of personal data you have provided to ace77 in a structured, commonly used, machine-readable format, and have that data transmitted directly to another service provider where technically feasible.
• Right to withdraw consent — where ace77 processes your data on the basis of your consent (for example, for optional promotional SMS), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

ace77 will not charge a fee for exercising any of the rights listed above and will not discriminate against you for exercising your privacy rights. If ace77 is unable to fulfil a request — for example, because it conflicts with a legal retention obligation — ace77 will explain the reason in writing within 30 days of receiving the request.

10Children and Minors

ace77 is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 21. Our registration process requires users to confirm that they are aged 21 or above, and we apply age verification checks to all new accounts as part of our KYC procedures. If ace77 discovers that a person under the age of 21 has registered an account, that account will be immediately closed, all gameplay data will be deleted, and any deposits made will be returned net of any winnings derived from underage play.

If you believe that a person under the age of 21 has registered an account at ace77 using false information, please report this to [email protected] immediately. ace77 takes underage gambling extremely seriously and will take immediate action on receipt of a credible report.

11Payment Data and Financial Information

ace77 processes payment data in order to receive deposits from you and to send withdrawals to you. ace77 works with bKash, Nagad, Rocket, Upay, Visa, and Mastercard as payment processing partners. When you initiate a deposit or withdrawal, ace77 shares the minimum necessary data with your chosen payment processor (your registered name and mobile number) to route the transaction. ace77 does not store your bKash Personal Identification Number (PIN), your card CVV number, your full debit or credit card number, or any other sensitive authentication credential used by your payment provider.

All financial transaction records (deposit and withdrawal history) are retained in accordance with the retention schedule in Clause 7. These records may be provided to regulatory authorities or law enforcement agencies in response to a lawful request. ace77 uses these records internally for KYC verification, dispute resolution, bonus wagering audits, and responsible gaming monitoring.

12Third-Party Links and Game Providers

The ace77 Platform embeds game content from third-party game providers including Pragmatic Play, Evolution Gaming, PG Soft, Habanero, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, you are interacting with software operated by the relevant game provider. Game providers may collect limited technical data (such as session identifiers and game outcome logs) to operate their games and comply with their own regulatory requirements. ace77 is not responsible for the privacy practices of third-party game providers. We recommend reviewing the privacy policy of any game provider whose content you interact with if you have questions about their specific data practices.

13Changes to This Privacy Policy

ace77 reserves the right to update or modify this Privacy Policy at any time. Where any change is material — for example, a change to the categories of personal data we collect, a new third-party data sharing arrangement, or a change to our data retention periods — ace77 will notify registered players by displaying a prominent notice on the Platform for a minimum of 7 days before the change takes effect, and by sending an SMS notification to registered mobile numbers.

The current version of this Privacy Policy is always available at ace77.club/privacy-policy. The date of the most recent update is displayed at the top of this page. Your continued use of the Platform following publication of an updated Policy constitutes acceptance of the updated Policy.

14Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about the way ace77 handles your personal data, our support team is available 24 hours a day, 7 days a week in Bangladesh Standard Time (BST, UTC+6).

Email us at: [email protected]