ace97 Privacy Policy

1. Data Controller

This Privacy Policy ("Policy") is issued by ace97 ("ace97", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at ace97.app and its subdomains. ace97 acts as the data controller in respect of personal data collected from users ("you", "the Player") of the platform.

This Policy applies to all personal data collected via the ace97 website, mobile interface, live chat support system, and any other channels through which you interact with ace97 as a registered or prospective player. By registering an account with ace97 and using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

If you have questions about this Policy or about the personal data ace97 holds about you, please contact our Data Support team at [email protected]. Email addresses are for written correspondence only and must be contacted in writing — please use the live chat for day-to-day support queries, which are resolved more quickly.

2. Information We Collect

ace97 collects personal data in several ways: information you provide directly during registration and account management, information generated through your use of the platform, and in some cases information obtained from third-party verification services. The categories of data we collect are described in the table below.

ace97 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information unless specifically required by law or by our responsible gaming obligations (for example, recording a self-exclusion request). Where such data is collected, it is handled with heightened security and strict access controls.

3. How We Use Your Data

ace97 uses personal data only for purposes that are necessary, proportionate, and consistent with the reason the data was originally collected. The following table describes the primary purposes for which your data is processed.

• Account creation and management: To register your player account, verify your identity, maintain your account settings, and communicate important account-related updates.
• Service delivery: To enable you to place bets, play casino games, access the live casino, use crash games, and participate in promotional events on the ace97 platform.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported bank channels. Financial data is used solely to complete the requested transactions and for fraud prevention.
• Identity verification (KYC): To confirm that you are who you say you are, that you meet the minimum age requirement of 18 years, and to comply with our anti-money laundering obligations.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent transactions, bonus abuse, account takeover attempts, and other prohibited activities outlined in our Terms & Conditions.
• Responsible gaming: To monitor your gaming behaviour for indicators of problem gambling and to give effect to any responsible gaming tools you activate, including deposit limits, session reminders, and self-exclusion requests.
• Customer support: To respond to your enquiries, resolve disputes, and process complaints submitted via live chat or email.
• Platform improvement: To analyse aggregate usage patterns, diagnose technical issues, test new features, and improve the overall performance and user experience of the ace97 platform.
• Marketing communications: Where you have opted in to receive promotional communications, to send you information about ace97 bonuses, promotions, and seasonal offers (such as BPL and IPL cricket promotions or Eid special offers). You may opt out at any time.
• Legal compliance: To meet our obligations under applicable law, including responding to lawful requests from regulatory authorities or law enforcement bodies.

4. Legal Basis for Processing

ace97 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing that is required to fulfil the contract between you and ace97 — for example, creating your account, processing payments, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including Know Your Customer (KYC) checks and anti-money laundering monitoring.
• Legitimate interest: Processing necessary for ace97's legitimate business interests, such as fraud prevention, platform security, and improving our services, provided those interests are not overridden by your privacy rights.
• Consent: Where ace97 relies on your consent as the legal basis for processing — for example, sending you optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Information

ace97 does not sell your personal data to third parties. We do share data with carefully selected service providers and partners where necessary to deliver our services, but only to the extent required for the specific purpose and subject to appropriate data protection obligations. Categories of recipients include:

• Payment processors: Providers such as bKash, Nagad, Rocket, Upay, and card payment gateways receive the transaction data necessary to execute deposits and withdrawals. These providers operate their own privacy policies and security frameworks.
• Identity verification providers: Third-party KYC service providers process the identity documents and verification data you submit to confirm your identity and age.
• Game content providers: Game studios and platform providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data necessary to deliver their games on the ace97 platform. These providers do not receive your personally identifiable financial data.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity providers who support the technical operation of the ace97 platform. All such providers are bound by data processing agreements.
• Fraud prevention and risk management services: Specialist providers who assist ace97 in detecting fraudulent activity, unusual betting patterns, and other security risks.
• Legal and regulatory authorities: ace97 may disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by law, court order, or in connection with legal proceedings.

6. Cookies & Tracking

ace97 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform efficiently and provide you with a consistent experience. A cookie is a small text file placed on your device by a website. Cookies cannot run programs or deliver viruses to your device.

The following types of cookies are used on the ace97 platform:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your logged-in session, remember your language and currency preferences, and keep your bet slip intact during a session. These cookies cannot be disabled without disrupting core functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how users interact with the ace97 platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data helps us improve the platform. No personally identifiable information is collected via analytics cookies.
• Functional cookies: These cookies remember choices you have made on the platform, such as your preferred game lobby layout, notification settings, and responsible gaming tool configurations.
• Security cookies: Used to detect fraudulent activity, prevent account takeover attempts, and support the integrity of the platform's authentication system.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use core platform features. ace97 does not use third-party advertising or retargeting cookies.

7. Data Retention

ace97 retains personal data for as long as is necessary to fulfil the purposes outlined in this Policy, to comply with legal obligations, and to resolve any disputes or enforce our agreements. The following retention principles apply:

• Active accounts: Personal data associated with an active player account is retained for the lifetime of the account and for a period of at least five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of five (5) years after the transaction date for compliance and audit purposes.
• KYC documents: Identity verification documents are retained for the period required by applicable law, which is generally five (5) years following the end of the business relationship.
• Support communications: Live chat transcripts and email correspondence are retained for up to two (2) years after the interaction, or longer if related to an unresolved dispute or legal matter.
• Marketing data: If you have opted into marketing communications, your contact details and preferences for this purpose are retained until you withdraw consent or request deletion.
• Inactive accounts: Accounts with no activity for 12 consecutive months are classified as dormant. Dormant account data is retained for the minimum legally required period, after which it may be anonymised or deleted in accordance with our data minimisation principles.

8. Data Security

ace97 takes the security of your personal data seriously and maintains a range of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• SSL/TLS encryption: All data transmitted between your device and the ace97 platform is encrypted using industry-standard SSL/TLS protocols. You can confirm a secure connection via the padlock icon in your browser's address bar.
• Encrypted data storage: Sensitive personal and financial data stored on ace97 servers is encrypted at rest using strong encryption standards. Database access is restricted to authorised personnel only.
• Access controls: Internal access to personal data is governed by a strict need-to-know principle. Staff members are granted only the minimum level of access required to perform their role and are bound by confidentiality obligations.
• Two-factor authentication: ace97 supports two-factor authentication (2FA) on player accounts and enforces it for internal administrative access to systems containing personal data.
• Intrusion detection and monitoring: The ace97 platform is monitored continuously for unusual activity, attempted breaches, and security incidents. Automated alerts are configured to flag anomalies in real time.
• Third-party security audits: ace97 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the platform.

While ace97 uses commercially reasonable security measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ace97 will notify affected users in accordance with applicable legal requirements.

9. Your Rights

As a user of the ace97 platform, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] or via the live chat support function. ace97 will respond to all verified requests within a reasonable timeframe.

• Right of access: You have the right to request a copy of the personal data ace97 holds about you, together with information about the purposes for which it is processed and the categories of recipients to whom it has been disclosed.
• Right to rectification: If any personal data ace97 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your phone number or residential address) can be made directly from your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where the data has been unlawfully processed. Please note that ace97 may be required to retain certain data for legal compliance reasons even following an erasure request.
• Right to restriction of processing: In certain circumstances (for example, where you contest the accuracy of your data or have objected to processing), you may request that ace97 restrict the processing of your data while the matter is resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where ace97 processes your data on the basis of consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to the processing of your personal data where ace97 relies on legitimate interests as the legal basis, unless ace97 can demonstrate compelling legitimate grounds that override your interests.

10. Policy Updates & Contact

ace97 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made to this Policy, ace97 will notify registered players via email or via a prominent notice on the platform. The updated Policy will take effect from the date indicated at the top of the page under "Effective Date".

We encourage you to review this Privacy Policy periodically to stay informed about how ace97 protects your personal data. Your continued use of the ace97 platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ace97 holds about you, please contact our support team using the details below. Our team is available 24 hours a day, 7 days a week, and will do their best to address your enquiry promptly and professionally.

ace97 is committed to handling all privacy enquiries with care, transparency, and respect for your rights as a player. We treat your personal information with the same level of trust and responsibility that we apply to the security of your funds on the platform.