Privacy Policy — 356ace Platform

356ace ("we", "us", "our") is committed to protecting the privacy and personal data of all players who access our platform at https://356ace.bio. This Privacy Policy describes how we collect, use, store, share, and safeguard your information when you register an account, deposit funds, place wagers, or otherwise interact with the 356ace platform.

This policy applies to all users of the 356ace website and any related mobile-optimised pages. By creating a 356ace account or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy. Where there is any conflict between documents, the Terms & Conditions shall prevail. We reserve the right to update this Privacy Policy at any time. The "Last Updated" date at the top of this page will reflect any revisions. Continued use of the platform following a published update constitutes your acceptance of the revised policy.

We collect personal data from you in three main ways: information you provide to us directly, information we collect automatically when you use the platform, and information we receive from trusted third-party partners for verification and fraud-prevention purposes.

We do not collect or store full payment card numbers. All card payment processing is handled by our licensed payment gateway partners, who operate under their own PCI-DSS compliant security frameworks. 356ace only receives a tokenised reference that does not expose your full card details.

356ace processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes set out below:

• Account management: To create, verify, maintain, and close your player account, and to authenticate your identity each time you log in.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other supported payment channels in Bangladesh.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and responsible gaming mandates, including age verification for players who must be 21 years of age or older.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other security threats.
• Platform improvement: To analyse platform usage patterns, fix technical issues, and develop new features that improve the experience for all 356ace players.
• Customer support: To respond to your enquiries, resolve disputes, and process complaints in a timely and effective manner.
• Marketing communications: To send you promotional offers, bonus notifications, and updates about new games or features — but only where you have given your explicit consent to receive such communications. You may withdraw consent at any time.
• Responsible gaming: To monitor account activity for signs of problem gambling and to apply any player-requested tools such as deposit limits, time-outs, or self-exclusion restrictions.

Where data protection law requires us to identify a legal basis for processing your personal data, we rely on one or more of the following grounds:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration — for example, operating your account and processing your transactions.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC rules and age verification requirements.
• Legitimate interests: Processing carried out to pursue our legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — most notably for direct marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

356ace does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment partners: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum data required to process your financial transactions securely.
• Identity verification providers: Third-party KYC and age-verification services receive identity documents solely for the purpose of verifying your eligibility to use the platform.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may receive a pseudonymous player identifier necessary to deliver their games and calculate RTP outcomes. They do not receive your full name, contact details, or payment information.
• Fraud prevention services: Specialist third-party services receive limited technical data (e.g., IP address, device fingerprint) to help identify and block fraudulent activity.
• Law enforcement and regulators: We will disclose personal data to government authorities, law enforcement agencies, or regulators where we are legally compelled to do so, or where disclosure is necessary to protect the safety of our players or the public.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of the 356ace business, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any change to this Privacy Policy that results from it.

All third parties who receive your personal data are required to handle it securely, to use it only for the purposes for which it was shared, and to comply with applicable data protection obligations. We do not permit our service providers to use your data for their own marketing purposes.

The 356ace platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by your browser when you visit our site. We use the following categories of cookies:

• Essential cookies: Strictly necessary for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that prevent cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect anonymised information about how players navigate the platform, which pages are most visited, and where users encounter errors. This data is used exclusively to improve the platform.
• Preference cookies: Store your platform preferences, such as language or display settings, so they persist between sessions.
• Marketing cookies: Used only with your explicit consent to measure the effectiveness of promotional campaigns. These cookies help us understand which offers are most relevant to players in Bangladesh.

You can control and manage cookies through your browser settings at any time. Disabling non-essential cookies will not prevent you from using the core features of the 356ace platform, though some personalisation features may be affected.

356ace retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Specific retention periods include:

• Active account data: Retained for the full duration of your account's active status and for a period of at least five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of seven (7) years following the date of the transaction to satisfy tax and financial regulatory obligations.
• KYC documents: Identity verification documents are retained for at least five (5) years from the date of your most recent transaction or account closure, whichever is later.
• Support communications: Records of support interactions are retained for three (3) years following the closure of the relevant ticket or enquiry.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of the consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

As a 356ace player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within five (5) working days of receiving your request.

356ace employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or mobile device and our servers.
• Encrypted storage of sensitive account data at rest, using industry-standard encryption algorithms.
• Role-based access controls that limit employee access to personal data strictly to those whose job function requires it.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Mandatory security awareness training for all 356ace staff who handle personal data.
• Incident response procedures that ensure prompt detection, containment, and notification in the event of a data breach.

While we take every reasonable step to protect your data, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your 356ace account and to enable two-factor authentication (2FA) where available. If you suspect that your account has been compromised, contact us immediately at [email protected].

The 356ace platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. As part of our registration process, all new players are required to confirm that they meet the minimum age requirement. Where we have reason to believe that a registered player is under 21, the account will be suspended immediately pending age verification.

If you believe a minor has registered on the 356ace platform, please notify us immediately at [email protected]. We will investigate and take appropriate action without delay, including deletion of any personal data collected from the minor.

As an internationally operated platform, 356ace may transfer your personal data to servers or service providers located outside of Bangladesh. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. These safeguards may include contractual data protection clauses agreed with the receiving party, or transfers to jurisdictions that have been recognised as providing an adequate level of data protection.

By using the 356ace platform and accepting this Privacy Policy, you consent to your personal data being transferred to and processed in countries outside Bangladesh where necessary for the provision of our services.

If you have any questions, concerns, or complaints about this Privacy Policy or about how 356ace handles your personal data, please contact our Data Privacy team using the details below. We are committed to resolving all privacy-related enquiries fairly and promptly.

Email: [email protected]
Subject line: Privacy Enquiry or Data Rights Request
Response time: Within 5 working days (Bangladesh Standard Time, UTC+6)

If you are not satisfied with our response to your complaint, you may have the right to escalate the matter to the data protection authority or supervisory body applicable in your jurisdiction.