Privacy Policy — How 67ace Handles Your Data

This Privacy Policy (the "Policy") sets out how 67ace ("67ace", "we", "us", or "our"), the operator of the online betting and casino platform at https://67ace.io (the "Platform"), collects, uses, stores, shares, and protects the personal information of individuals who register accounts, place wagers, or otherwise interact with the Platform ("Players", "you", or "your"). By registering an account on the Platform, you confirm that you have read and understood this Policy and consent to the collection and use of your information as described herein.

1 About This Policy

67ace operates as an offshore international betting and casino platform. This Policy applies to all personal data collected in connection with the operation of the Platform, regardless of the device or location from which a Player accesses the service. It covers data collected via the 67ace website, mobile browsers, and any promotional or support communications channels operated by 67ace.

We are committed to handling personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy is written in plain English so that every Player understands how their information is being used.

2 Data We Collect

2.1 Identity and Contact Data

When you register a 67ace account, we collect the following identity and contact information:

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the mandatory 21+ age requirement)
• Residential address, including city, district, and postcode
• Email address
• Mobile phone number linked to your bKash, Nagad, Rocket, or Upay payment account

2.2 Verification Documents

As part of our Know Your Customer (KYC) process, we may collect copies of:

• Government-issued photo identification (National ID, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official letter dated within three months)
• Payment method verification documentation confirming ownership of your bKash, Nagad, or Rocket account

2.3 Financial Transaction Data

We record all deposit and withdrawal transactions processed through the Platform, including the transaction amount in BDT, the payment method used, the timestamp, and a unique transaction reference number. We do not store full payment account credentials; only the anonymised account identifiers provided by your payment service provider are retained.

2.4 Gaming Activity Data

We collect data relating to your activity on the Platform, including:

• Bet history, wager amounts, game selections, and settlement outcomes
• Session durations, login timestamps, and last active dates
• Bonus claims, wagering progress, and promotional activity
• Responsible gaming tool settings, including any deposit limits or self-exclusion elections

2.5 Technical and Device Data

We automatically collect certain technical data when you access the Platform:

• IP address and approximate geolocation (city-level)
• Device type, operating system, and browser version
• Referring URL and pages visited within the Platform
• Cookie identifiers and session tokens (see Section 7 for details)

2.6 Communications Data

If you contact 67ace via email or live chat, we retain records of that correspondence, including the content of messages, timestamps, and any resolution actions taken by support staff. This data is used for quality assurance and dispute resolution purposes.

3 How We Collect Your Data

67ace collects personal data through the following channels:

• Direct provision: Information you submit when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting support
• Automated collection: Technical and device data collected automatically via server logs, cookies, and session tracking technologies as you use the Platform
• Third-party providers: Identity verification data received from KYC service providers and fraud screening partners who process documents you submit; payment confirmation data received from bKash, Nagad, Rocket, and Upay
• Publicly available sources: In limited fraud prevention circumstances, we may cross-reference information against publicly available databases to verify identity claims

4 How We Use Your Data

The table below summarises the primary purposes for which 67ace processes your personal data and the corresponding data categories involved:

5 Legal Basis for Processing

67ace processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 67ace — including account creation, payment processing, and game delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you
• Legal obligation: Certain processing activities — including KYC verification, AML screening, and data retention for regulatory purposes — are carried out to comply with applicable legal requirements
• Legitimate interests: Fraud prevention, platform security monitoring, and anonymised analytics are carried out on the basis of our legitimate interest in operating a secure and well-functioning platform, provided those interests are not overridden by your fundamental rights
• Consent: Marketing communications and optional personalisation features are delivered only where you have provided explicit, informed consent. You may withdraw consent at any time by contacting support or updating your account preferences

6 Data Sharing and Disclosure

6.1 Service Providers

67ace engages a limited number of trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These providers include:

• KYC and identity verification partners: Who verify government-issued identification documents submitted during account registration
• Payment processors: Including the technical infrastructure providers that facilitate bKash, Nagad, Rocket, and Upay transaction routing
• Fraud screening and risk management services: Who analyse transaction patterns and device fingerprints to identify potentially fraudulent activity
• Game content providers: Including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe — who may receive anonymised session identifiers necessary to deliver their game software
• Cloud infrastructure and hosting providers: Who provide the servers and database infrastructure on which the Platform operates

6.2 Legal and Regulatory Disclosure

67ace may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by applicable law, court order, or regulatory direction. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and will notify the affected Player where we are legally permitted to do so.

6.3 Business Transfers

In the event that 67ace undergoes a merger, acquisition, corporate restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any material change to this Policy that results from it.

7 Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by the Platform when you visit. They allow the Platform to recognise your device, maintain your session state across page loads, and collect analytical data about how you use the site. 67ace uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

7.2 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function — including authentication tokens, session management cookies, and security cookies. These cannot be disabled without impairing Platform functionality.
• Analytical cookies: Used to collect anonymised, aggregated data about how Players navigate the Platform. This data is used to identify usability improvements and technical errors.
• Preference cookies: Store your Platform preferences such as language settings and responsible gaming tool configurations.
• Marketing cookies: Used only where you have explicitly consented, to deliver relevant promotional content and measure the effectiveness of marketing campaigns. You may opt out at any time.

7.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your 67ace account and using core Platform features. For marketing cookies specifically, you may also withdraw consent via your account settings panel.

8 Data Retention

67ace retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements
• Support communications: Retained for three (3) years from the date of the interaction, unless the matter is subject to ongoing dispute or legal proceedings
• Marketing consent records: Retained for the duration of your account plus two (2) years following account closure as evidence of consent management
• Anonymised analytics data: Retained indefinitely, as it cannot be used to identify any individual

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction procedures.

9 Your Data Rights

As a 67ace account holder, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and respond fully within 30 days.

10 Children's Privacy

If you are a parent or guardian and believe that a minor in your care has registered a 67ace account or submitted personal data to the Platform, please contact us immediately at [email protected]. We will act on such reports promptly and remove any data associated with under-age users.

11 Security Measures

67ace employs a layered security framework to protect the personal data of all Platform users. Our technical and organisational security measures include:

• Transport Layer Security (TLS): All data in transit is encrypted using TLS 1.2 or higher. The Platform does not accept connections over unencrypted HTTP.
• Password hashing: Account passwords are stored using a modern one-way cryptographic hashing algorithm with salt. Passwords are never stored or transmitted in plain text.
• Access controls: Access to personal data within 67ace's internal systems is restricted on a strict need-to-know basis. Staff access is logged and monitored.
• Penetration testing: The Platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 67ace maintains a documented incident response procedure. In the event of a data breach that poses a risk to Players, affected individuals will be notified without undue delay.

While 67ace takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for using the Platform over secure network connections.

12 Cross-Border Data Transfers

67ace operates as an offshore international platform. Your personal data may be transferred to and processed in jurisdictions outside Bangladesh, including the jurisdiction in which 67ace is incorporated and the locations of our service providers' data centres. We ensure that any cross-border transfer of personal data is subject to appropriate safeguards, including:

• Contractual data processing agreements with service providers that impose data protection obligations equivalent to those set out in this Policy
• Processing only by service providers who maintain internationally recognised security certifications
• Transfer only of the minimum data necessary for the service provider to perform their specific function

By using the Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh for the purposes described in this Policy.

13 Amendments to This Policy

67ace reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing activities, or our service offerings. When material changes are made, we will update the "Last Revised" date at the top of this document and, where the changes are significant, provide notice to affected Players via email or an in-platform notification. Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the updated terms. We recommend reviewing this Policy periodically to stay informed of how we handle your personal data.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 67ace, please contact our Data Support team using the details below:

• Email: [email protected]
• Subject line for data requests: "Privacy Policy Enquiry" or "Data Rights Request"
• Response time: Acknowledgement within 48 hours; full response within 30 calendar days
• Support hours: 24 hours a day, 7 days a week, including Bangladesh public holidays

The email address above is displayed as plain text only and is not a clickable link. Please copy and paste it into your email client to get in touch with our team.