Privacy Policy

1 Introduction

aec365 ("we", "us", "our", or "the Platform") is Bangladesh's premier online casino and sports betting service, accessible at aec365.biz. We are fully committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered player, a visitor browsing our pages, or a person who contacts our support team.

This Privacy Policy sets out, in transparent and accessible terms, the categories of personal data we collect from you, the purposes for which that data is processed, the lawful bases upon which we rely to process it, the parties with whom it may be shared, the period for which it is retained, and the rights you may exercise in relation to your personal data.

This Policy applies to all personal data collected through the aec365 website, mobile interface, live chat support system, email correspondence, and any other channel through which you interact with the aec365 platform. It should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, both of which form part of the agreement governing your use of the platform.

If you have any questions about how aec365 handles your personal data, or if you wish to exercise any of your data rights, please refer to Section 15 (Contact Us) of this Policy for the appropriate contact channels.

2 Data Controller

For the purposes of applicable data protection law, aec365 acts as the data controller in respect of the personal data it collects and processes in connection with the operation of the aec365 online casino and sports betting platform.

As data controller, aec365 is responsible for determining the purposes and means of processing your personal data. Where we engage third-party service providers to carry out specific processing activities on our behalf — such as payment processing, identity verification, or fraud detection — those providers act as data processors under our instruction and are bound by contractual obligations consistent with this Policy.

If you wish to contact aec365 in its capacity as data controller in respect of any privacy matter, you may do so through the channels set out in Section 15 of this Policy.

3 Personal Data We Collect

aec365 collects personal data from you through a number of different channels and at various stages of your interaction with the platform. The categories of personal data we collect are described below:

We do not collect any special category personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) beyond the document images required for KYC identity verification, which are processed solely for the purpose of age and identity confirmation.

4 How We Use Your Personal Data

aec365 processes your personal data for the following specific purposes, each of which is underpinned by a lawful basis described in Section 5:

• Account Creation & Management: To register your player account, maintain accurate account records, and manage your ongoing relationship with the platform, including handling account updates, password resets, and access control.
• Identity & Age Verification (KYC): To comply with our legal obligation to verify that all players are at least 18 years of age and to confirm that the identity provided during registration is genuine. This process also supports anti-money laundering (AML) compliance.
• Payment Processing: To process your deposit and withdrawal requests accurately and securely via your chosen approved payment method, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard.
• Platform Delivery & Personalisation: To operate the aec365 casino and sports betting services, deliver games and live betting markets, and tailor the platform experience to your demonstrated preferences and activity patterns.
• Fraud Detection & Security: To monitor account activity for unusual patterns indicative of fraudulent behaviour, unauthorised access attempts, multi-account abuse, bonus misuse, money laundering, or other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat, email, or any other supported communication channel, and to maintain records of support interactions for quality assurance.
• Responsible Gaming: To administer self-exclusion requests, deposit limits, cooling-off periods, and session reminders set by you, and to monitor for behavioural patterns that may indicate problem gambling in line with our Responsible Gaming obligations.
• Legal & Regulatory Compliance: To fulfil obligations imposed by applicable law, including the retention of transaction records, the reporting of suspicious financial activity to relevant authorities, and the response to lawfully issued information requests from competent authorities.
• Marketing & Promotions (with consent): Where you have expressly opted in, to send you information about aec365 promotions, bonuses, new game launches, and seasonal offers relevant to your interests. You may withdraw consent at any time without affecting your access to platform services.
• Platform Improvement & Analytics: To analyse aggregated and anonymised usage data for the purposes of improving platform performance, user experience, game selection, and the targeting of technical resources.

5 Legal Basis for Processing

aec365 processes your personal data on one or more of the following lawful bases, as applicable to the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and aec365 — including account registration, payment processing, game delivery, and customer support — is carried out on the basis that it is required to fulfil our contractual obligations to you as a registered player.
• Legal Obligation: Certain processing activities, including KYC identity verification, AML monitoring, transaction record retention, and responding to lawful authority requests, are carried out to comply with applicable legal and regulatory requirements binding upon aec365.
• Legitimate Interests: Processing activities necessary to protect the security and integrity of the platform — including fraud detection, abuse prevention, and analytics — are conducted on the basis of aec365's legitimate interests in maintaining a safe, fair, and commercially viable service. We have assessed that these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not required by contract or law, and cannot be justified by legitimate interests alone — specifically, the sending of direct marketing communications — aec365 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time by updating your account preferences or contacting support.

6 Data Sharing & Disclosure

aec365 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We may, however, share your personal data with the following categories of recipients where it is necessary and lawful to do so:

• Payment Processing Partners: Your financial data is shared with the payment service providers you select to process your deposits and withdrawals, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard. Each of these providers operates under their own privacy policy and applicable financial services regulations.
• Identity Verification Services: Where automated or manual KYC verification is conducted, your identity documents and associated data may be shared with contracted identity verification service providers who process that data solely on our instruction.
• Fraud Prevention & Security Providers: Technical data and account activity information may be shared with fraud detection service providers to support our security obligations. These providers act as data processors under contractual data processing agreements.
• Game Content Providers: Certain usage data, including game session identifiers and bet settlement data, is shared with licensed game studios and platform providers — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to facilitate game delivery, technical support, and RNG auditing. No personal identity data is shared with game providers beyond what is technically required for session management.
• Legal & Regulatory Authorities: aec365 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required or permitted by law — for example, in response to a lawfully issued warrant, court order, or regulatory investigation. We will, where legally permissible, notify you of such a disclosure request.
• Professional Advisers: Legal counsel, auditors, and accountants engaged by aec365 may have access to personal data on a strictly need-to-know basis for the purposes of providing professional services. All such advisers are bound by confidentiality obligations.

7 Cookies & Tracking Technologies

The aec365 platform uses cookies and similar tracking technologies to operate core platform functions, enhance your user experience, and gather analytical data about how the platform is used. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the platform to function and cannot be disabled. They include session management cookies that keep you logged in during an active session, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure platform performance. No consent is required for these cookies as they are technically indispensable.
• Performance & Analytics Cookies: These cookies collect information about how visitors interact with the platform — which pages are most visited, how long sessions last, and where errors occur. Data collected is aggregated and anonymised. These cookies help us identify areas for technical improvement and optimise platform performance.
• Functional Cookies: These cookies remember your account preferences, such as language settings, preferred game categories, and responsible gaming tool configurations, so that they are applied consistently across sessions.
• Marketing & Targeting Cookies (consent-based): Where you have provided consent, these cookies may be used to deliver promotional content relevant to your demonstrated interests on the aec365 platform. They do not track your activity across external websites unaffiliated with aec365.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the platform and may prevent login. Disabling analytics or functional cookies will not prevent you from accessing the platform's core features but may reduce the quality of your personalised experience.

8 Data Retention

aec365 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is applied, the resulting dataset may be retained indefinitely for aggregated analytical purposes.

9 Data Security

aec365 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes, but is not limited to, the following measures:

• Encryption in Transit: All data transmitted between your device and aec365 servers is encrypted using 256-bit SSL/TLS protocols. This applies to account login, payment transactions, KYC document uploads, and live chat communications.
• Encryption at Rest: Sensitive personal data stored on our servers, including KYC documents and financial records, is encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to personal data held on aec365 systems is restricted on a strict need-to-know basis. Staff access is managed through role-based access control (RBAC) systems, and all access events are logged and subject to periodic audit.
• Two-Factor Authentication: Internal system access for aec365 personnel requires multi-factor authentication, reducing the risk of unauthorised access through compromised credentials.
• Penetration Testing & Vulnerability Management: The aec365 platform undergoes regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: aec365 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, we will notify affected players promptly and take immediate steps to contain and investigate the incident.

While aec365 implements rigorous security measures, no online system can guarantee absolute security. You also have a responsibility to protect your own account by using a strong, unique password, enabling any available two-factor authentication, and not sharing your credentials with any third party. If you suspect unauthorised access to your account, contact our support team immediately via live chat.

10 International Data Transfers

aec365 primarily processes and stores personal data within the jurisdiction in which it operates. However, certain technical service providers and game content partners may be located in, or operate infrastructure situated in, countries outside Bangladesh. Where personal data is transferred to a third country, aec365 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to, or greater than, the protections afforded under applicable data protection principles.

Safeguards employed for international transfers include contractual data processing agreements incorporating standard data protection clauses, and selection of service providers that maintain recognised security certifications and comply with internationally accepted data protection frameworks.

If you wish to obtain further information about the specific safeguards in place for any particular international transfer of your personal data, please contact aec365 through the channels described in Section 15.

11 Your Data Rights

As a data subject, you hold a number of rights in relation to the personal data that aec365 processes about you. These rights may be exercised by contacting us through the channels described in Section 15, subject to applicable legal exemptions:

• Right of Access: You have the right to request confirmation of whether aec365 holds personal data about you, and to receive a copy of that data together with information about how it is processed. We will respond to access requests within 30 days of receipt.
• Right to Rectification: You have the right to request correction of any personal data we hold about you that is inaccurate or incomplete. Where possible, corrections may also be made directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where you object to processing and no overriding legitimate grounds exist. Please note that certain data must be retained to comply with our legal obligations and cannot be erased during mandatory retention periods.
• Right to Restrict Processing: You may request that aec365 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where you have objected to processing pending a determination of our legitimate grounds.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract with you, you have the right to receive the personal data you provided to aec365 in a structured, commonly used, machine-readable format, and to transmit that data to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. If you object, aec365 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Rights Related to Automated Decision-Making: aec365 may use automated processes for certain fraud detection and risk assessments. Where a decision is made solely by automated means and produces a significant effect on you, you have the right to request human review of that decision.
• Right to Withdraw Consent: Where processing is based on your consent (in particular, direct marketing communications), you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of any processing carried out prior to withdrawal.

12 Children's Privacy

aec365 is an adult entertainment platform. Access to our services is strictly restricted to individuals who are 18 years of age or older. We do not knowingly collect, process, or retain personal data from any individual under the age of 18.

Our registration process includes mandatory age declaration and is supported by our KYC verification procedure, which requires documentary proof of age before withdrawal privileges are granted. In the event that aec365 becomes aware that personal data has been collected from an individual who has misrepresented their age and is in fact under 18, we will immediately suspend the associated account, delete or anonymise all personal data relating to that individual to the extent permitted by our legal retention obligations, and forfeit any balance in the account.

If you are a parent or guardian and believe that your child may have registered an account on the aec365 platform, please contact our support team immediately via live chat or by emailing [email protected]. We will investigate and take appropriate action as a matter of priority.

18+ Only

13 Third-Party Links

The aec365 platform may, from time to time, contain references or links to game provider content, payment partner interfaces, or other third-party services. Where you navigate from the aec365 platform to a third-party site or service, please be aware that aec365's Privacy Policy does not extend to that third-party environment.

aec365 has no control over, and accepts no responsibility for, the privacy practices, content, or security measures of any third-party website or service that you access from our platform. We strongly encourage you to read the privacy policy of any third-party site before providing your personal data to that site.

The inclusion of a reference to a third-party service on the aec365 platform does not constitute an endorsement of that third party's privacy practices or data protection standards.

14 Updates to This Privacy Policy

aec365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. When we make material changes to this Policy, we will publish the revised version on this page with an updated effective date and, where appropriate, notify registered players via the email address or notification system associated with their account.

Your continued use of the aec365 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes and your agreement to the updated terms. If you do not agree with the revised Policy, you should discontinue your use of the platform and may request account closure in accordance with our Terms & Conditions.

We recommend that you review this Privacy Policy periodically to remain informed about how aec365 is protecting your personal data. The current version will always be accessible at aec365.biz/privacy-policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which aec365 processes your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the aec365 platform. This is the fastest channel for privacy-related queries and data rights requests.
• Email (plain text — not a clickable link): [email protected] — please use the subject line "Privacy Query — [Your Username]" or "Data Rights Request — [Your Username]" as appropriate.
• Response Times: Live chat queries are typically acknowledged within minutes. Email queries relating to data rights are acknowledged within 2 business days and resolved within 30 calendar days, all times in Bangladesh Standard Time (BST, UTC+6).

We are committed to handling all privacy-related communications with the utmost confidentiality, professionalism, and diligence. If you are not satisfied with the response you receive, you retain the right to escalate the matter through the formal dispute process described in our Terms & Conditions.