ache365 Privacy
Policy

1. Data We Collect

ache365 collects personal data when you register an account, use the platform, make financial transactions, contact our support team, or interact with our website in any way. The categories of personal data we collect are described in the table below.

Where we request personal data from you and that data is marked as mandatory, failing to provide it may prevent us from creating your account, processing your transactions, or providing specific services. Optional data fields are clearly indicated as such.

2. How We Use Your Data

ache365 uses the personal data we collect for specific, legitimate purposes only. We do not process your data in any manner that is incompatible with the purposes described at the time of collection. The legal bases and corresponding purposes for our data processing activities are outlined below.

1. Account creation and management: To register your account, verify your identity and age, and manage your account settings and preferences throughout your relationship with ache365.
2. Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, and to maintain accurate financial records for each account.
3. Service delivery: To provide access to casino games, sports betting markets, live dealer tables, and all other features available on the ache365 platform.
4. Security and fraud prevention: To verify your identity, detect and prevent fraudulent transactions, identify suspicious account activity, and protect both you and ache365 from financial crime.
5. Legal and regulatory compliance: To fulfil our anti-money-laundering (AML) obligations, maintain records as required by applicable law, and respond to lawful requests from regulatory or law enforcement authorities.
6. Customer support: To respond to your enquiries, resolve disputes, and improve the overall quality of our support services based on interaction history.
7. Responsible gaming: To monitor playing patterns, apply account limits you have set, enforce self-exclusion periods, and proactively identify players who may benefit from responsible gaming support.
8. Platform improvement: To analyse aggregate usage data, identify technical issues, and improve the functionality, reliability, and user experience of the ache365 platform.
9. Promotional communications: To send you relevant promotional offers and platform updates by email or in-app notification, where you have opted in to receive such communications. You may opt out at any time.

3. Data Sharing & Disclosure

ache365 does not sell your personal data to third parties. We share your data only where it is strictly necessary to deliver our services, comply with legal obligations, or protect the integrity of the platform. The categories of third parties with whom we may share your data are listed below.

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, for the sole purpose of processing your financial transactions. Each payment partner operates under its own privacy policy and data security standards.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other regulated studio partners may receive limited technical session data necessary to deliver game content. No financial or identity data is shared with game providers beyond what is technically required.
• Identity verification services: Third-party KYC providers may process copies of your identity documents for the purpose of verifying your identity and age. These providers are contractually bound to use your data only for this purpose.
• Analytics providers: Aggregate, anonymised usage data may be shared with analytics platforms to help us understand overall platform performance. No individually identifiable data is included in these reports.
• Legal and regulatory authorities: We may disclose your personal data to regulatory bodies, law enforcement agencies, or courts where we are required to do so by applicable law, a binding court order, or where disclosure is necessary to protect the legal rights of ache365 or any third party.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the ache365 business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the new privacy terms that apply.

All third-party service providers who process data on our behalf are required to enter into data processing agreements with ache365, committing them to process your data only on our documented instructions and to maintain appropriate security measures at all times.

4. Cookies & Tracking Technologies

ache365 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session security, and to gather aggregate data about how visitors use our website. A cookie is a small text file placed on your device when you visit a website. The types of cookies used on ache365 are described in the table below.

ache365 does not use third-party advertising cookies, retargeting cookies, or cross-site tracking technologies. You are not tracked across the web when you leave the ache365 platform.

You may control cookie settings through your browser preferences at any time. Please note that disabling essential cookies will impair the functionality of the ache365 platform and may prevent you from logging in or completing financial transactions. Disabling functional or analytics cookies will not affect your ability to use the core platform.

5. Data Retention

ache365 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply to the main categories of data we hold.

• Account and identity data: Retained for the lifetime of your active account plus five years following account closure, to satisfy AML record-keeping obligations.
• Financial transaction records: Retained for seven years from the date of each transaction, in accordance with financial compliance requirements.
• KYC and verification documents: Retained for five years from the date of submission or from the date of account closure, whichever is later.
• Customer support records: Live chat transcripts and email correspondence are retained for three years from the date of interaction.
• Technical and usage data: Retained in anonymised or aggregated form for up to 24 months for platform analysis purposes. Raw identifiable technical data is deleted after 90 days.
• Responsible gaming records: Self-exclusion and deposit limit records are retained for a minimum of five years to prevent re-registration and to support responsible gaming obligations.
• Marketing consent records: Retained for three years from the date of last consent confirmation or opt-out, to demonstrate compliance with consent obligations.

Once the applicable retention period has elapsed, your personal data is securely deleted or anonymised so that it can no longer be linked to your identity. Anonymised aggregate data may be retained indefinitely for statistical purposes. Upon receiving a valid data deletion request from you, we will assess the request against our legal retention obligations and communicate the outcome within 30 calendar days.

6. Your Privacy Rights

As a player registered with ache365, you have a number of rights in relation to the personal data we hold about you. We are committed to facilitating the exercise of these rights in a straightforward and timely manner. Your rights are summarised below.

To exercise any of these rights, please contact our support team via live chat from within your account dashboard, or send a written request to support@ache365.net. We will acknowledge all rights requests within five business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, and you will be notified of the extension along with the reason for it.

7. Data Security

ache365 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, destruction, alteration, or disclosure. Our security framework includes the following measures.

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or app and the ache365 servers is encrypted using 256-bit TLS encryption. This protects your login credentials, payment information, and personal data in transit.
• Data encryption at rest: Sensitive data fields stored in our databases, including passwords, payment account identifiers, and identity document references, are encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to production systems and personal data is restricted on a strict need-to-know basis. All staff with data access use multi-factor authentication and are subject to role-based access control policies.
• Penetration testing: Our platform undergoes regular third-party penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.
• Incident response: ache365 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, we will notify affected players within 72 hours of becoming aware of the breach.
• Password security: Player passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text. We strongly recommend using a unique, strong password for your ache365 account and enabling two-factor authentication.

While ache365 implements robust security measures, no internet-based platform can guarantee absolute security against all possible threats. You play an important role in protecting your account by keeping your login credentials confidential, logging out after each session when using shared devices, and notifying us immediately if you suspect any unauthorised access to your account.

8. Contact & Data Controller

ache365 is the data controller responsible for the personal data of all registered players and website visitors. If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data we hold about you, please contact us using any of the following methods.

• Live chat: 24/7 English-language live chat is available from within your account dashboard. This is the fastest way to reach our team, with typical response times of under five minutes. Support operates on Bangladesh Standard Time (BST, UTC+6).
• Email: Written privacy enquiries and data rights requests may be submitted to support@ache365.net. We aim to acknowledge all email enquiries within one business day and to provide a full response within 30 calendar days.

When submitting a privacy enquiry or rights request by email, please include the subject line "Privacy Request" and provide your registered username or email address so that our team can locate your account and process your request efficiently. Do not include your password or full payment details in any email communication.

ache365 will review and update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to our service. The date at the top of this document indicates when the policy was last updated. Material changes will be communicated to registered players via email or a prominent notice on the platform prior to the changes taking effect. We encourage you to review this policy periodically to stay informed about how your data is being handled.