ase67 Privacy Policy

1 Who We Are

ase67 is an online casino and sports betting platform operating at https://ase67.io, offering a library of 500+ certified games and live cricket betting markets to players in Bangladesh. For the purposes of this Privacy Policy, ase67 acts as the data controller in respect of all personal data collected through the platform.

If you have any questions about how ase67 processes your personal data, or if you wish to exercise any of your data subject rights, you may contact our dedicated privacy team at [email protected] with the subject line "Privacy Enquiry". All privacy-related communications are handled within 4 business hours during Bangladesh Standard Time (BST, UTC+6) working hours.

2 Data We Collect

ase67 collects personal data across several categories. The table below summarises the categories of data we collect and the primary purpose for which each category is collected.

We do not intentionally collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If the submission of any document during the KYC process incidentally reveals such information, it will be processed only to the extent necessary for identity verification and will not be used for any other purpose.

3 How We Collect Your Data

ase67 collects personal data through the following means:

3.1 Directly From You

The majority of personal data ase67 holds is provided directly by you during the account registration process, KYC submission, deposit and withdrawal requests, customer support interactions, and voluntary responses to promotions or surveys. You are under no legal obligation to provide this data; however, failure to provide certain information (such as KYC documents) will prevent you from accessing specific platform features, including withdrawals.

3.2 Automatically Through Platform Use

When you access and interact with ase67, we automatically collect Technical Data and Usage Data using cookies, server logs, and similar tracking technologies. This data is collected for platform security, fraud prevention, and analytical purposes. Please refer to Section 7 (Cookies and Tracking) for full details.

3.3 From Third Parties

ase67 may receive personal data about you from third parties in specific circumstances, including:

• Identity verification providers engaged to cross-reference KYC documents against official records.
• Payment processors (such as bKash and Nagad gateway operators) confirming transaction completion and source-of-funds details.
• Fraud prevention databases flagging accounts associated with known fraudulent activity.
• Analytics partners providing aggregated, anonymised insights about platform usage patterns.

4 Legal Bases for Processing

ase67 processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your account, process deposits and withdrawals, and deliver games and betting services.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and financial reporting obligations.
• Legitimate Interests: Processing carried out for ase67's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and product improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit, freely given, and informed consent — primarily in relation to optional marketing communications. You may withdraw consent at any time via Account Settings or by contacting [email protected].

5 How We Use Your Data

ase67 uses the personal data we collect for the following specific purposes:

• Creating and managing your ase67 account, including verifying your identity and age (21+ requirement).
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard, and partner banks including Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank.
• Delivering and personalising your gaming experience, including recommending games relevant to your playing history.
• Monitoring your gaming activity to identify signs of problem gambling and enabling responsible gaming tools such as deposit limits, loss limits, and self-exclusion.
• Detecting, investigating, and preventing fraudulent activity, cheating, bonus abuse, and other forms of prohibited conduct as defined in the Terms & Conditions.
• Fulfilling anti-money laundering (AML) obligations, including source-of-funds checks and suspicious activity reporting.
• Communicating with you about your account, including transaction confirmations, security alerts, and support responses.
• Sending promotional communications about ase67 offers, bonuses, and new game releases — only where you have given explicit consent or where permitted under applicable law. You may opt out at any time.
• Analysing aggregate usage patterns to improve platform performance, game library selection, and customer experience.
• Complying with any legal obligations, court orders, or requests from law enforcement or regulatory authorities in Bangladesh.

6 Sharing Your Data

ase67 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

6.1 Service Providers and Processors

We engage carefully selected third-party service providers to help deliver the ase67 platform. These providers act as data processors on our behalf and are contractually bound to process personal data only on ase67's documented instructions, to maintain appropriate security standards, and not to use the data for their own purposes. Categories of service providers include: cloud hosting providers, identity verification vendors, payment gateway operators, customer support platform providers, and cybersecurity firms.

6.2 Game Providers

Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens and anonymised player identifiers) necessary to deliver their games within the ase67 platform. These providers do not receive your full identity or financial data and are bound by their own data protection commitments as certified game suppliers.

6.3 Legal and Regulatory Disclosure

ase67 may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other public authorities in Bangladesh where required by law, court order, or regulatory demand. We will notify you of such disclosure where legally permissible to do so. Where disclosure relates to suspected criminal activity (including fraud or money laundering), no prior notice to the account holder will be given.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ase67's business, personal data held by ase67 may be transferred to the acquiring entity as part of the transaction. In such circumstances, ase67 will take reasonable steps to ensure that your personal data continues to be protected in accordance with this Privacy Policy, and will provide advance notice of any material changes to data handling practices.

7 Cookies and Tracking

7.1 What Cookies We Use

ase67 uses the following categories of cookies and similar technologies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and game display preferences, to enhance your experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how players interact with the platform — such as which game categories are most popular and where users experience technical friction. This data is used exclusively to improve the platform.
• Fraud Prevention Cookies: Detect unusual patterns of behaviour consistent with bot activity, account sharing, or multi-accounting. These are essential for platform integrity.

7.2 What We Do Not Use

ase67 does not deploy third-party advertising cookies, retargeting pixels, social media tracking widgets, or any cookie technology that shares your behavioural data with advertising networks. Your browsing activity on ase67 is not used to serve you targeted advertisements on other websites.

7.3 Managing Cookies

You may manage non-essential cookies via your browser settings. Please note that disabling cookies may affect the performance of certain ase67 features. Strictly necessary and fraud-prevention cookies cannot be disabled via browser settings as they are integral to platform security and session management.

8 Data Retention

ase67 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our general data retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active account plus 5 years following account closure, in line with standard financial record-keeping requirements under Bangladeshi law.
• Financial Transaction Data: Retained for 7 years from the date of each transaction, in accordance with AML and tax record-keeping obligations.
• KYC Verification Documents: Retained for 5 years following account closure or the date of the last transaction, whichever is later.
• Customer Support Records: Retained for 2 years from the date of the final interaction, unless the record relates to a dispute that remains unresolved.
• Technical and Usage Data (logs): Retained for 12 months on a rolling basis, after which logs are anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your marketing consent plus 2 years, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard data destruction methods, or permanently anonymised so that it can no longer be associated with an identifiable individual.

9 Your Rights

As a data subject, you hold the following rights in relation to your personal data held by ase67. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond within 30 days of receiving a verified request. We may ask you to verify your identity before processing a data rights request to prevent unauthorised access to another person's data.

• Right of Access (Subject Access Request): You may request a copy of all personal data ase67 holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. Some corrections (e.g., to legal name or date of birth) will require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to legal retention obligations — for example, we cannot delete financial records during the mandatory 7-year retention period.
• Right to Restriction of Processing: You may request that ase67 restrict processing of your personal data in specific circumstances, such as while an accuracy dispute is being resolved.
• Right to Data Portability: You may request that ase67 provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) to enable transfer to another service.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Upon receipt of a valid objection to marketing, we will cease marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

ase67 will not charge a fee for processing data rights requests except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

10 Data Security

ase67 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ase67 servers.
• AES-256 encryption for sensitive data at rest, including financial and identity records.
• Multi-factor authentication (MFA) for all internal ase67 staff access to systems containing personal data.
• Role-based access controls (RBAC) ensuring staff can only access data required for their specific job function.
• Regular penetration testing and vulnerability scanning of platform infrastructure.
• 24/7 automated intrusion detection and security event monitoring.
• Physical access controls at data centre facilities, operated by ISO 27001-certified hosting partners.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ase67 will notify affected players promptly and take immediate remediation steps. If you suspect your account has been compromised, please contact ase67 Support immediately via live chat.

11 Children and Minors

ase67 is strictly an adult platform. Access is limited to individuals aged 21 years and above. ase67 does not knowingly collect personal data from individuals under the age of 21. If ase67 becomes aware that personal data has been collected from a person below the minimum age threshold, we will immediately suspend the associated account, delete the data without retention, and where applicable refer the matter to the appropriate authorities.

Parents and guardians who believe a minor may have accessed ase67 are encouraged to contact us immediately at [email protected] so that we can investigate and take appropriate action. We take our obligations regarding the protection of minors extremely seriously and maintain age verification procedures at both registration and KYC stages to enforce this requirement.

12 Changes to This Policy

ase67 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will notify registered players via email and/or an in-platform notification at least 14 days before the updated policy takes effect. The effective date at the top of this policy will be updated accordingly.

Your continued use of ase67 following the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept the updated policy, you must discontinue use of the platform and contact us to close your account before the effective date. Historical versions of this Privacy Policy are available upon request from [email protected].

13 Contact Us

For any privacy-related queries, data subject rights requests, or concerns about how ase67 handles your personal data, please reach out to us through the following channels:

• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Rights Request — [Your Username]".
• Live Chat: Available 24 hours a day, 7 days a week via the Support widget on the ase67 platform.
• WhatsApp: Available 09:00–23:00 BST (UTC+6), Monday to Sunday.

All privacy enquiries are handled by our dedicated privacy team and will receive an acknowledgement within 4 business hours (BST). Full responses to data subject rights requests are provided within 30 calendar days of identity verification. If you are not satisfied with ase67's response to a privacy complaint, you are entitled to seek independent legal advice under Bangladeshi law.