aec356 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how aec356 ("aec356", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("Players", "Users", "you") who register for, access, or use the aec356 platform at aec356.net and any associated services.

aec356 is committed to handling your personal data with integrity, transparency, and care. This Policy is intended to give you a clear and complete picture of our data practices so that you can make informed decisions about your use of the platform. Please read this Policy carefully alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

By creating an account on aec356 or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the aec356 platform.

2. Personal Data We Collect

aec356 collects personal data in several ways: directly from you when you register and use the platform, automatically through technical means as you browse the site, and from trusted third-party verification and payment partners. The categories of data we collect are set out below.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, gender, email address, mobile phone number, and residential address (including city, district, and postal code) provided when you create your aec356 account.
• Identity verification (KYC) data: Copies of government-issued identity documents (e.g., National Identity Card, passport, driving licence), utility bills or bank statements as proof of address, and selfie photographs submitted to complete our Know Your Customer verification process.
• Payment data: Mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details, or card numbers (Visa, Mastercard) required to process deposits and withdrawals. Full card numbers are never stored on aec356 servers; payment card data is handled exclusively by our PCI-DSS-compliant payment processing partners.
• Communications data: Messages, complaints, support requests, and feedback you submit via email, live chat, or any other communication channel directed to aec356.
• Responsible gaming data: Deposit limits, session limits, cooling-off requests, and self-exclusion preferences you set within the responsible gaming tools on the platform.

2.2 Data Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and language settings collected automatically when you access the aec356 platform.
• Usage data: Pages visited, time spent on each page, games played, bets placed, session start and end times, clickstream data, and search queries entered within the platform.
• Cookie and tracking data: Session identifiers, preference cookies, and analytical data collected via first-party cookies as described in Section 6 of this Policy.
• Transaction logs: A complete record of all financial transactions — deposits, withdrawals, bonuses credited, bets placed, and game outcomes — associated with your aec356 account, timestamped in Bangladesh Standard Time (BST, UTC+6).

2.3 Data from Third Parties

• KYC verification partners: Identity verification service providers may return a verification status, risk score, and document authenticity assessment to aec356 following submission of your KYC documents.
• Payment processors: Payment partners such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard may share transaction confirmation data, account status information, and fraud-screening results with aec356 to facilitate payment processing.
• Fraud prevention partners: Third-party fraud detection services may provide risk signals and device fingerprint data to help aec356 identify and prevent fraudulent account activity.

3. How We Use Your Personal Data

aec356 uses the personal data described above for the following purposes:

Purpose	Data Categories Used
Creating and managing your Player account	Registration data, KYC data
Processing deposits and withdrawals	Payment data, transaction logs
Verifying your identity and age (18+)	KYC data, registration data
Providing customer support	Communications data, account data
Detecting and preventing fraud and money laundering	Technical data, transaction logs, fraud partner data
Personalising your gaming experience	Usage data, cookie data
Sending account-related notifications	Registration data, communications data
Responsible gaming monitoring and intervention	Responsible gaming data, usage data, transaction logs
Improving platform performance and user experience	Usage data, technical data, cookie data
Complying with legal and regulatory obligations	All applicable categories

aec356 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

4. Legal Basis for Processing

aec356 processes your personal data on the following legal bases, applied according to the specific purpose for which the data is used:

• Contractual necessity: Processing required to perform the agreement between you and aec356 — including account creation, payment processing, and game delivery — is conducted on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable laws and regulations — including anti-money-laundering (AML) obligations, age verification requirements, and fraud reporting duties — is conducted on the basis of legal obligation.
• Legitimate interests: Processing conducted for the purposes of fraud detection, platform security, responsible gaming monitoring, and improving aec356 services is conducted on the basis of our legitimate interests, balanced against your rights and interests.
• Consent: Where we send you optional promotional communications or deploy non-essential analytical cookies, we do so on the basis of your consent, which you may withdraw at any time by contacting support or adjusting your account settings.

5. Data Sharing and Disclosure

aec356 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited and controlled circumstances:

5.1 Essential Service Providers

We share personal data with third-party service providers who assist in operating the aec356 platform, including: payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard network operators), KYC and identity verification providers, fraud prevention and risk management services, cloud infrastructure and hosting providers, and customer support platform providers. All such providers are contractually required to process your data solely for the purposes specified by aec356 and to maintain appropriate data security standards.

5.2 Game Technology Providers

Certain game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited technical session data (such as a pseudonymous player session token) to deliver their game products within the aec356 platform. These providers do not receive your full name, payment details, or KYC documents.

5.3 Legal and Regulatory Disclosure

aec356 may disclose personal data to government authorities, law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or binding regulatory direction. Where legally permissible, aec356 will notify you of such disclosure.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of aec356's business, personal data held by aec356 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any resulting changes to this Privacy Policy via a platform notification or email.

6. Cookies and Tracking Technologies

The aec356 platform uses cookies — small text files stored on your device — to operate correctly, remember your preferences, and understand how the platform is used. The cookies deployed on aec356 fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens that keep you logged into your account, security cookies that protect against cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without rendering the platform non-functional.
• Functional cookies: Used to remember your in-platform preferences such as language settings, last-visited game category, and responsible gaming limit configurations. Disabling functional cookies may limit your experience on the platform.
• Analytical cookies: First-party cookies that collect anonymised, aggregated data about how Players navigate the aec356 platform — which pages are most visited, where errors occur, and how the registration flow performs. This data is used exclusively to improve the platform and is not shared with third-party analytics vendors.

aec356 does not deploy third-party advertising cookies, social media tracking pixels, or cross-site behavioural tracking technologies on its platform. You may manage cookie preferences through your browser settings at any time; however, disabling strictly necessary cookies will prevent you from accessing your account.

7. Data Security

aec356 applies a layered approach to data security designed to protect your personal information against unauthorised access, alteration, disclosure, loss, or destruction. Key security measures in place include:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and aec356 servers.
• Encryption of sensitive data fields (including payment details and KYC document references) at rest on aec356 infrastructure.
• Role-based access controls that restrict aec356 staff access to personal data to those with a legitimate operational need.
• Multi-factor authentication required for all aec356 administrative system access.
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals.
• Automated monitoring and alerting for unusual data access patterns, failed login attempts, and potential account takeover activity.

While aec356 takes all reasonable precautions to protect your personal data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying aec356 immediately at [email protected] if you suspect any unauthorised access to your account.

8. Data Retention Periods

aec356 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, in accordance with financial compliance obligations.
• Transaction and betting records: Retained for a minimum of five (5) years to support dispute resolution, fraud investigation, and regulatory audit requirements.
• Customer support communications: Retained for three (3) years from the date of the last communication, to support ongoing complaint management and quality assurance.
• Analytical and usage data: Retained in anonymised, aggregated form for up to two (2) years for platform improvement purposes. Raw session data is deleted within ninety (90) days.
• Marketing consent records: Retained for the duration of your account plus three (3) years following account closure, to demonstrate compliance with consent-based marketing obligations.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

9. Your Data Rights

As a Player on the aec356 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the aec356 data team at [email protected] with the subject line "Data Rights Request":

• Right of access: You have the right to request a copy of all personal data aec356 holds about you, together with information about how that data is used and with whom it is shared.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your aec356 account. Minor corrections (such as updating your phone number) can be made directly within your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations (see Section 8).
• Right to restriction: You have the right to request that aec356 restrict the processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to aec356 in a structured, machine-readable format, where processing is based on your consent or a contractual relationship.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on aec356's legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on your consent (e.g., optional promotional emails), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

aec356 will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with notification provided to you of the extension and the reasons for it.

10. Children's Privacy

The aec356 platform is strictly intended for adults aged 18 years and above. aec356 does not knowingly collect, process, or store personal data relating to individuals under the age of 18. 18+ Only

If aec356 becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately, the associated account will be closed, and any funds deposited will be returned to the originating payment source where technically feasible.

If you believe that a minor has registered on the aec356 platform, please notify us immediately at [email protected] so that we can take prompt action.

11. International Data Transfers

aec356 operates as a platform designed for the Bangladesh market, and the majority of data processing activities take place on infrastructure located in or near Bangladesh. However, certain third-party service providers engaged by aec356 — including cloud hosting providers, KYC verification partners, and game technology suppliers — may process data on infrastructure located outside Bangladesh.

Where personal data is transferred outside Bangladesh, aec356 takes steps to ensure that such transfers are subject to appropriate safeguards, including contractual data protection obligations with the receiving party that are equivalent in standard to those applied within Bangladesh. By using the aec356 platform, you acknowledge and consent to such international data transfers where they are necessary to deliver the services described in these policies.

12. Changes to This Privacy Policy

aec356 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, aec356 will notify active Players via a prominent notice on the platform or by email to your registered address at least seven (7) days prior to the changes taking effect.

The "Last Updated" date at the top of this document reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how aec356 protects your personal data. Your continued use of the aec356 platform following any update to this Policy constitutes your acceptance of the revised terms.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way aec356 handles your personal data, please contact our data team using the details below:

• Email: [email protected] (Subject: "Privacy Policy Enquiry" or "Data Rights Request")
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Response Time: All privacy-related enquiries are acknowledged within 48 hours and fully responded to within 30 calendar days.

aec356 is committed to resolving all privacy-related concerns fairly and transparently. If you remain dissatisfied with our response to a data rights request or privacy complaint, you may seek further guidance from the relevant data protection authority in your jurisdiction.