ace8 Privacy Policy
This Privacy Policy explains exactly what personal data ace8 collects from players in Bangladesh, how that data is used, who it may be shared with, how long it is retained, and what rights you hold over your own information. We are committed to handling your data with transparency, security, and respect.
Six Privacy Principles We Live By
These principles underpin every data-handling decision at ace8. They are not aspirational statements — they are operational standards applied to every system, process, and team member that touches player data.
Data Minimisation
ace8 collects only the personal data strictly necessary to operate your account, process transactions, verify your identity, and meet our legal obligations. We do not collect data speculatively or without a defined, lawful purpose for each data point gathered.
Security by Design
All data transmitted between your device and ace8 is protected by industry-standard SSL/TLS encryption. Data at rest is stored on secured infrastructure with access controls, audit logging, and encryption at the storage layer. Security reviews are conducted regularly.
Your Rights First
You have the right to access, correct, delete, and port your personal data at any time. ace8 provides clear, accessible mechanisms to exercise these rights without unnecessary friction. Requests are acknowledged within 24 hours and fulfilled within the timeframes stated in this Policy.
Defined Retention
Personal data is retained only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Once the retention period expires, data is securely deleted or anonymised in accordance with our internal data lifecycle policy.
No Unauthorised Sharing
ace8 does not sell, rent, or trade your personal data to third parties for marketing purposes. Data is shared only with trusted service providers operating under strict data processing agreements, or where required by law. Every third-party data share is documented and reviewed.
Full Transparency
This Policy is written in plain, accessible English so you know precisely what data we hold and why. Any material change to our data practices will be communicated to you directly before it takes effect, giving you the opportunity to review and act on the change.
1 Introduction
ace8 ("ace8", "we", "us", "our") operates the online casino and sports betting platform accessible at https://ace8.pro, serving players across Bangladesh. This Privacy Policy sets out in full detail how ace8 collects, uses, stores, shares, and protects the personal data of visitors to the website and registered account holders ("you", "your", "Player").
ace8 is committed to protecting the privacy and security of all personal data we process. This Policy has been prepared in plain English to ensure that players in Bangladesh can clearly understand their rights and our obligations. We encourage you to read this document in its entirety and to contact us if you have any questions about any of its provisions.
This Policy applies to all personal data collected through the ace8 website, mobile-optimised browser interface, customer support channels (including email), and any other touchpoint through which you interact with the ace8 brand.
2 Data Controller
ace8 acts as the data controller in respect of personal data collected from players using the ace8 platform. As data controller, ace8 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact our dedicated privacy team at the email address set out in Section 13 of this Policy. All privacy-related correspondence is handled by our support team, who are available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).
3 Personal Data We Collect
3.1 Registration Data
When you create an ace8 account, we collect the information you provide during the registration process, which includes your full name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other), email address, and chosen username.
3.2 Identity Verification (KYC) Data
To comply with our anti-money-laundering and fraud-prevention obligations, we collect and process the following identity documents when you complete the KYC (Know Your Customer) verification process:
- Government-issued photo identification (National ID card, passport, or driving licence)
- Proof of residential address (utility bill, bank statement, or equivalent document)
- Proof of ownership of the payment method used for deposits (e.g., screenshot of bKash or Nagad account showing your name and mobile number)
3.3 Financial Transaction Data
We record details of all deposits and withdrawals made on your ace8 account, including transaction amounts in BDT, payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), transaction timestamps, and transaction reference numbers. We do not store full card numbers or full mobile banking PINs — payment processing is handled by certified third-party payment processors.
3.4 Gameplay & Betting Data
We maintain records of all gaming activity on your account, including game sessions, bet amounts, outcomes, sports markets wagered on, and bonus utilisation. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory compliance.
3.5 Technical & Device Data
When you access the ace8 platform, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and clickstream data. This information is used for security purposes, fraud detection, and platform optimisation.
3.6 Communications Data
When you contact our support team via email or any other channel, we retain records of that correspondence, including the content of messages, timestamps, and the nature of any issue raised or resolved. This data is used for quality assurance, dispute resolution, and training purposes.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration | Name, DOB, email, address | Account creation & identity |
| KYC Documents | National ID, passport, address proof | Verification & compliance |
| Financial | Transaction records, payment methods | Payment processing & AML |
| Gameplay | Bets, game history, bonuses | Account management & RG |
| Technical | IP address, browser, device info | Security & fraud prevention |
| Communications | Support emails, chat logs | Support & dispute resolution |
4 How We Use Your Personal Data
ace8 uses the personal data described in Section 3 for the following purposes:
- Account administration: Creating, maintaining, and managing your ace8 account, including processing logins, password resets, and account updates.
- Transaction processing: Facilitating deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, bank transfer, and card payment methods.
- Identity verification: Conducting KYC checks to verify your age (21+), identity, and place of residence prior to processing withdrawals or in response to compliance obligations.
- Fraud and security monitoring: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
- Responsible gaming: Monitoring gameplay patterns to identify indicators of problem gambling behaviour and reaching out to players where welfare concerns are detected.
- Customer support: Responding to queries, resolving complaints, and providing assistance through our 24/7 English-language support channel.
- Legal and regulatory compliance: Meeting our obligations under applicable anti-money-laundering regulations, financial crime prevention requirements, and any lawful requests from competent authorities.
- Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, reliability, and user experience of the ace8 platform.
- Promotional communications: Sending you information about bonuses, promotions, and platform updates where you have opted in to receive such communications. You may opt out at any time.
5 Legal Basis for Processing
ace8 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to fulfil the contract between you and ace8, including account management, payment processing, and customer support.
- Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, financial crime prevention requirements, and age verification obligations.
- Legitimate interests: Processing for purposes such as fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where those interests are not overridden by your privacy rights.
- Consent: Processing for optional purposes such as marketing communications, where you have given explicit consent. You may withdraw consent at any time by contacting support or updating your communication preferences in your account settings.
6 Cookies & Tracking Technologies
6.1 What We Use
The ace8 platform uses cookies and similar tracking technologies (including local storage and session storage) to ensure the proper functioning of the website, remember your preferences, maintain your login session, and collect anonymised analytics data about how players navigate and use the platform.
6.2 Types of Cookies
- Essential cookies: Strictly necessary for the platform to function. These include session cookies that keep you logged in during an active browsing session. These cannot be disabled without breaking core platform functionality.
- Functional cookies: Remember your preferences such as language settings, display options, and recently played games. These improve your experience but are not essential.
- Analytics cookies: Collect anonymised data on page views, session duration, and navigation paths to help us understand how the platform is used and where improvements can be made.
- Security cookies: Used to detect and prevent fraudulent activity, including bot detection, CSRF protection, and login anomaly identification.
6.3 Managing Cookies
You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please be aware that disabling essential cookies will impair the functionality of the ace8 platform and may prevent you from logging in or completing transactions.
7 Sharing Your Personal Data
ace8 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We may share your personal data only in the following limited and documented circumstances:
- Payment processors: We share transaction data with certified third-party payment processors (including bKash, Nagad, Rocket, Upay, and card payment gateways) solely to facilitate the processing of deposits and withdrawals. These processors are contractually bound to handle your data securely and only for the specific transaction purpose.
- Game providers: When you play a game supplied by a third-party provider such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, or Spribe, certain technical data (such as a pseudonymous player identifier, session token, and bet data) is transmitted to that provider's platform to enable the game session. Game providers operate under their own privacy policies and data processing agreements with ace8.
- Identity verification services: We may use trusted third-party KYC service providers to assist with document verification. These providers act as data processors under our instructions and are not permitted to use your documents for any purpose other than the verification task we have commissioned.
- Regulatory and law enforcement authorities: We may disclose personal data to competent authorities, regulators, or law enforcement agencies where required by law, court order, or lawful request. Where permitted, ace8 will notify you of such a request before disclosing your data.
- Professional advisers: We may share data with our legal, financial, and security advisers under strict confidentiality obligations where necessary to obtain professional advice or to defend or pursue legal claims.
8 Data Retention
ace8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following retention periods apply as a general guide:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & registration data | Duration of account + 5 years post-closure | Legal & contractual compliance |
| KYC documents | 5 years from submission | Anti-money-laundering regulations |
| Financial transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Gameplay & betting history | 5 years from each activity date | Dispute resolution & responsible gaming |
| Support communications | 3 years from last interaction | Quality assurance & dispute resolution |
| Technical / device data | 13 months from collection | Security & analytics |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (which cannot be linked back to any individual) may be retained for statistical and analytical purposes indefinitely.
9 Your Data Rights
As a player on the ace8 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected]. We will acknowledge your request within 24 hours and respond substantively within 30 days.
Right of Access
You may request a copy of all personal data ace8 holds about you, together with information about how it is being used. We will provide this in a clear, structured format free of charge.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. You may also update certain account details directly through your account settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to our legal retention obligations — data we are required by law to retain cannot be deleted before the applicable retention period expires.
Right to Restriction
You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing and a determination is pending.
Right to Data Portability
Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format, or that we transmit it directly to another controller where technically feasible.
Right to Object
You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease such processing immediately. Where you object to processing on legitimate interest grounds, we will cease unless we can demonstrate compelling legitimate grounds that override your interests.
10 Data Security
ace8 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- SSL/TLS encryption on all data transmissions between your device and our servers
- Encryption of sensitive data fields at rest within our database infrastructure
- Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role
- Comprehensive audit logging of all access to personal data, with automated alerts for anomalous access patterns
- Regular penetration testing and vulnerability assessments conducted by independent security professionals
- Multi-factor authentication requirements for all internal systems handling personal data
- Staff training on data protection obligations and secure data handling practices
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ace8 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.
11 Children's Privacy
The ace8 platform is strictly for adults aged 21 years and above. ace8 does not knowingly collect or process personal data from individuals under the age of 21. The registration process includes mandatory age declaration, and ace8 reserves the right to request documentary proof of age from any account holder at any time.
If ace8 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be reviewed, and the account will be permanently closed with any balance handled in accordance with our Terms & Conditions. If you believe that a minor has accessed the ace8 platform, please notify us immediately at [email protected].
12 Changes to This Privacy Policy
ace8 reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they alter the way we collect, use, or share your personal data in a manner that could affect your rights or expectations — we will notify you by email at least 7 days before the changes take effect.
The effective date at the top of this Policy will be updated whenever changes are made. We encourage you to review this Policy periodically. Your continued use of the ace8 platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using the platform and may request account closure.
13 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ace8, please contact our privacy team using the details below:
Email: [email protected] (plain text — not a clickable link)
Subject line: Privacy Request — [Your Account Username]
Support hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
All privacy-related requests will receive an acknowledgement within 24 hours of receipt. We are committed to resolving all data-related queries promptly and transparently. If you are unsatisfied with our response to a privacy concern, you have the right to escalate the matter through appropriate legal channels in your jurisdiction.
Questions About Your Data? We Are Here
Our support team is available 24/7 to answer any privacy-related questions. Or explore the ace8 platform — 500+ games, live cricket betting, and instant BDT payments await.