Privacy Policy — 356ace

1 Introduction and Scope

356ace ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the services available at https://356ace.club. This Privacy Policy sets out in clear terms what personal information we collect, the purposes for which we use it, the legal grounds on which we rely, how long we retain it, with whom we may share it, and what rights you hold over your own data.

This Policy applies to all visitors to the 356ace website and to all registered account holders, regardless of how they access the platform — whether through a desktop browser, mobile browser, or any other device. It covers data collected directly from you during registration, during gameplay and betting activity, during financial transactions, and through your interactions with the 356ace support team.

By registering an account with 356ace or continuing to use the platform following any update to this Policy, you acknowledge that you have read and understood the practices described here. If you do not agree with this Policy in whole or in part, you should discontinue use of the platform and contact [email protected] to request account closure.

2 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the 356ace platform is the operating entity behind 356ace. The data controller is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data-related enquiries, subject access requests, correction requests, deletion requests, and complaints should be directed to the 356ace data team at the following contact address:

• Email: [email protected]
• Subject line for data requests: "Data Privacy Request — [Your Username]"
• Response target: Within 30 days of receipt of a valid request

3 Data We Collect

356ace collects personal data through several channels and across various categories. The following table summarises the main categories of personal data we collect and the primary source of each category:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where required by applicable law or regulation as part of our identity verification obligations. We do not collect data from or about individuals we know to be under 18 years of age; if we discover that data has been collected from a minor, we will delete it promptly.

4 How We Use Your Data

356ace uses personal data collected from players only for the purposes described in this Policy. We do not use your data for purposes that are incompatible with those for which it was originally collected without first obtaining your explicit consent. The primary purposes for which we process personal data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and administer your player profile across the 356ace platform.
• Service delivery: To provide access to casino games, sports betting markets, live dealer tables, crash games, and all other products available on the platform, and to process the results of your gameplay activity.
• Financial transactions: To process deposits in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, and supported bank channels, and to process withdrawal requests to your verified payment method.
• Identity and age verification: To verify that you are at least 18 years of age and to confirm that the identity and payment details you provide are accurate, in accordance with our Know Your Customer (KYC) obligations.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other forms of prohibited conduct on the platform.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling, to administer deposit limits and self-exclusion requests, and to provide responsible gaming support tools in your account settings.
• Customer support: To respond to your enquiries, complaints, and data requests submitted via email or live chat.
• Legal compliance: To comply with applicable legal obligations, including record-keeping requirements, responses to lawful authority requests, and dispute resolution.
• Platform improvement: To analyse aggregated, anonymised gameplay and usage data to improve the features, performance, and content of the platform. Individual player data is not used for this purpose without anonymisation.
• Marketing communications: Where you have provided explicit consent to receive marketing communications, to send you information about promotions, bonuses, and new games available at 356ace. You may withdraw this consent at any time by contacting [email protected].

5 Legal Basis for Processing

356ace processes personal data only where a valid legal basis exists for doing so. The legal bases on which we rely for different processing activities are summarised below:

• Performance of a contract: Processing is necessary to fulfil our obligations under the Terms & Conditions you agreed to when registering your 356ace account. This covers account management, game delivery, and transaction processing.
• Legal obligation: Processing is required to comply with applicable legal obligations, including identity verification, anti-money laundering checks, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing is necessary for the legitimate interests of 356ace or a third party, where those interests are not overridden by your data protection rights. This covers fraud prevention, platform security, and service improvement activities.
• Consent: Where processing is based on consent — primarily for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of marketing consent does not affect your ability to use the platform.

6 Data Sharing and Disclosure

356ace does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Game providers: Third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens and bet identifiers) necessary to deliver their games within the 356ace platform. These providers act as data processors operating under contractual data processing agreements with 356ace.
• Payment processors: Providers such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are subject to applicable financial sector regulations.
• Identity verification services: KYC and anti-fraud service providers may process your identity documents and personal data on our behalf to verify your age and identity. These providers are contractually bound to process data only for the purposes specified by 356ace.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity providers that support the operation of the 356ace platform may have access to personal data as part of delivering their services. All such providers are bound by data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or lawful request from a competent authority, 356ace may disclose personal data to regulators, law enforcement agencies, or other governmental bodies. We will notify you of such disclosures where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of 356ace's business, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and the privacy implications via your registered email address.

7 Cookies and Tracking

356ace uses cookies and similar tracking technologies on the platform to ensure correct functionality, maintain login sessions, detect fraudulent activity, and analyse aggregate usage patterns. The categories of cookies we use are as follows:

• Strictly necessary cookies: These cookies are essential for the platform to function correctly. They enable core features such as secure login sessions, account authentication, and session state management. These cookies cannot be disabled without impacting your ability to use the platform.
• Functional cookies: These cookies remember your preferences and settings — such as your preferred language, responsible gaming settings, and display preferences — so that you do not need to re-enter them on each visit.
• Analytics cookies: Aggregated, anonymised analytics cookies help us understand how players navigate the platform, which games are most popular, and where technical issues occur. This data is used solely to improve the platform and is not linked to individual player profiles.
• Security cookies: These cookies assist in detecting and preventing fraudulent activity, including bot traffic, credential stuffing, and unusual session behaviour patterns.

You may adjust cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the platform. For a full list of cookies in use and their individual retention periods, please contact [email protected].

8 Data Retention

356ace retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active accounts: Personal data associated with an active 356ace account is retained for the duration of the account relationship and for a period of at least five (5) years following account closure, in order to comply with anti-money laundering record-keeping requirements and to resolve any post-closure disputes.
• Transaction records: Financial transaction records, including deposit and withdrawal histories denominated in Bangladeshi Taka (৳), are retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: Identity verification documents submitted during the KYC process are retained for the duration of the account relationship and for a minimum of five (5) years after account closure.
• Support communications: Customer support correspondence is retained for a period of three (3) years from the date of the most recent interaction in the relevant thread.
• Marketing data: Where you have consented to marketing communications, your marketing preferences and related data are retained until you withdraw consent, after which they are deleted within 30 days.
• Technical and log data: Server log data and session data are retained for a maximum of 12 months, after which they are deleted or anonymised.

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to a specific individual. Where anonymised data is retained for analytics purposes, it is no longer considered personal data under this Policy.

9 Data Security

356ace employs a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• SSL/TLS encryption: All data transmitted between your device and the 356ace platform is encrypted in transit using industry-standard SSL/TLS protocols. Look for the padlock indicator in your browser's address bar when using the platform.
• Password hashing: Account passwords are never stored in plaintext. All passwords are processed through a strong cryptographic hashing algorithm before storage, meaning that even internal staff cannot read your password.
• Access controls: Access to systems containing personal data is restricted to authorised personnel on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-factor authentication: 356ace supports and encourages the use of two-factor authentication (2FA) on all player accounts to provide an additional layer of protection beyond the username and password.
• Regular security assessments: The platform undergoes periodic security reviews and vulnerability assessments to identify and remediate potential weaknesses before they can be exploited.
• Incident response: In the event of a personal data breach that is likely to result in a risk to players' rights and freedoms, 356ace will notify affected players via their registered email address without undue delay and will take all necessary steps to contain and remediate the breach.

While 356ace takes data security very seriously and applies industry-standard protections, no digital platform can guarantee absolute security. You are encouraged to use a strong, unique password for your 356ace account, to enable 2FA, and to log out of your account when using shared or public devices.

10 Your Rights

As a player whose personal data is processed by 356ace, you hold the following rights in relation to your data. To exercise any of these rights, please contact [email protected] with the subject line "Data Privacy Request — [Your Username]":

• Right of access: You have the right to request a copy of the personal data that 356ace holds about you, together with information about how it is being used.
• Right to rectification: If any personal data 356ace holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to erasure: You may request that 356ace delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent on which processing was based, or where processing is unlawful. This right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to restriction of processing: You may request that 356ace temporarily restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. 356ace will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

356ace will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further two months, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.

11 Children's Privacy

The 356ace platform is strictly for adults aged 18 and above. We do not knowingly collect, solicit, or process personal data from any individual under the age of 18. Account registration requires confirmation that the applicant is at least 18 years old, and identity verification procedures are in place to enforce this requirement.

If 356ace becomes aware that personal data has been collected from an individual under the age of 18, we will take immediate steps to delete that data and permanently close the associated account. If you are a parent or guardian and you believe that a minor has registered an account with 356ace using your personal details or without your knowledge, please contact [email protected] immediately so that appropriate action can be taken.

12 Changes to This Policy

356ace reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, business practices, or platform functionality. The effective date and last-updated date shown in the hero section of this page will be revised to reflect any update.

Where a material change is made to this Policy — meaning a change that significantly affects how your data is used or your rights in relation to it — 356ace will notify active players via their registered email address prior to the change taking effect. For minor or administrative changes, an updated version of the Policy will be posted on this page and the last-updated date will be revised accordingly.

Continued use of the 356ace platform following the publication of any revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you should discontinue use of the platform and contact [email protected] to request account closure and deletion of your personal data, subject to applicable legal retention obligations.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 356ace handles your personal data, please reach out to us using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject line for privacy requests: "Data Privacy Request — [Your Username]"
• Support availability: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response target: Within 30 days for data rights requests; within 24 hours for general privacy enquiries

This Privacy Policy is written and published in English. In the event of any inconsistency between the English-language version and any translation, the English-language version shall prevail in all circumstances.