asc365 Privacy Policy

asc365 collects personal data across several categories depending on how you interact with the platform. The following table summarises the principal data types collected and the context in which each arises.

1.1 asc365 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is strictly necessary to operate responsible gaming tools (e.g., recording a self-exclusion request).

1.2 Where you provide data about a third party (for example, a next-of-kin contact), you confirm that you have obtained that person's consent to share their data with asc365 for the stated purpose.

2.1 asc365 uses the personal data we collect for the following purposes:

• Account creation and management: To register your account, authenticate your identity at login, and maintain your account profile and preferences.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain a transaction history for your account.
• KYC and age verification: To verify that all players are aged 18 or above and to confirm that the identity provided at registration is accurate and genuine.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent transactions, account sharing, bonus abuse, money laundering, and other forms of prohibited conduct.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling and to enforce deposit limits, self-exclusion requests, and session reminders set by players.
• Customer support: To respond to enquiries, resolve disputes, and maintain a record of communications for quality assurance and training purposes.
• Regulatory compliance: To fulfil any reporting or record-keeping obligations imposed by applicable law or as required in the course of any legal investigation.
• Service improvement: To analyse aggregated, anonymised usage data to improve the platform's performance, game selection, and user experience.
• Marketing (where consented): To send promotional emails about asc365 bonuses, seasonal offers (Eid, BPL season, T20 World Cup), and platform updates where you have explicitly opted in to receive such communications.

2.2 asc365 will not use your personal data for any purpose materially different from those listed above without first notifying you and, where required, obtaining your consent.

3.1 Each category of personal data processing at asc365 is conducted on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between asc365 and the player — principally, to operate the player's account, accept deposits, settle withdrawals, and deliver game outcomes.
• Legal obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, age verification mandates, and financial record-keeping duties.
• Legitimate interests: Processing is necessary for the legitimate interests of asc365, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by the player's own data protection rights.
• Consent: Where processing is not covered by the above bases — primarily in relation to marketing communications — asc365 will ask for your explicit consent before processing your data for that purpose. You may withdraw consent at any time by contacting [email protected] or updating your account notification preferences.

4.1 asc365 does not sell personal data. We share personal data with third parties only in the following defined circumstances:

• Payment service providers: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to facilitate deposits and withdrawals. Each payment provider operates under its own data protection and regulatory framework.
• KYC and identity verification partners: Document data and identity information is shared with third-party verification service providers for the purpose of age and identity verification. These providers are contractually bound to process data only for the stated verification purpose.
• Game content providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as player session tokens) to deliver their game content within the asc365 platform. These providers do not receive personally identifiable information beyond what is operationally necessary.
• IT infrastructure and hosting providers: asc365 uses third-party cloud infrastructure providers to host the platform. These providers process data strictly as data processors under binding agreements and do not use player data for their own purposes.
• Legal and regulatory authorities: asc365 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by law or in response to a valid legal request.
• Professional advisers: Lawyers, auditors, and financial advisers engaged by asc365 may access personal data on a need-to-know basis and are bound by professional confidentiality obligations.

4.2 Any third party receiving personal data from asc365 is required to maintain the confidentiality of that data and to use it only for the specific purpose for which it was shared. asc365 takes reasonable contractual and technical steps to ensure compliance with this requirement.

5.1 asc365 uses cookies and similar tracking technologies to operate the platform, maintain session continuity, and gather anonymised usage analytics. The following categories of cookies are in use:

• Essential cookies: Required for the platform to function. These include session authentication cookies and security tokens. Essential cookies cannot be disabled without disrupting core platform functionality.
• Functional cookies: Used to remember your preferences — such as your preferred language, notification settings, and account display options — between sessions.
• Analytics cookies: Used to collect anonymised data about how players navigate and use the asc365 platform. This data is aggregated and used to improve site performance and user experience. No individually identifiable data is extracted from analytics cookies.
• Fraud detection cookies: Used alongside IP address data and device fingerprinting to identify suspicious access patterns, enforce geographic restrictions, and detect multiple accounts sharing a device.

5.2 asc365 does not use advertising or retargeting cookies. We do not share cookie data with advertising networks or social media platforms.

5.3 You may configure your browser to reject or delete cookies. However, disabling essential cookies will prevent you from logging in and using the platform. Disabling functional or analytics cookies will not affect your ability to play but may degrade your account experience.

6.1 asc365 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal obligations, and to resolve disputes or enforce agreements. The following retention guidelines apply:

• Active account data: Retained for the full duration of the player's account registration, plus a minimum of five years after account closure to satisfy financial record-keeping and AML obligations.
• KYC documents: Retained for a minimum of five years from the date of submission, consistent with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for two years from the date of the most recent communication in a support thread, unless the communication relates to a live dispute.
• Marketing preference data: Retained until you withdraw consent. Opt-out records are retained indefinitely to prevent inadvertent re-enrolment.
• Technical and usage data: Anonymised or deleted within 12 months of collection where no longer operationally required.

6.2 On expiry of the applicable retention period, personal data is securely deleted from asc365's systems or, where deletion is not technically feasible (e.g., in backup archives), anonymised so that it can no longer be linked to an identifiable individual.

7.1 asc365 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• SSL/TLS encryption for all data in transit between the player's device and the asc365 platform.
• Encryption at rest for all personally identifiable data stored on asc365's servers.
• Role-based access controls that restrict access to personal data to asc365 staff who have a legitimate operational need for that access.
• Regular security assessments and penetration testing of the asc365 platform and infrastructure.
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity for review.
• Two-factor authentication options for player accounts to provide an additional layer of login security.

7.2 While asc365 takes every reasonable precaution to protect personal data, no internet-based system can be guaranteed to be 100% secure. Players are advised to use strong, unique passwords for their asc365 accounts and to contact support immediately if they suspect unauthorised account access.

7.3 In the event of a data security incident that is likely to result in a high risk to the rights and freedoms of affected players, asc365 will notify affected individuals as promptly as practicable, describing the nature of the incident, the data affected, and the steps being taken to address it.

8.1 As a player whose personal data is processed by asc365, you hold the following rights in relation to that data:

• Right of access: You may request a copy of the personal data asc365 holds about you at any time. We will provide this information within 30 days of receiving a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. Updates to certain data fields (such as name or date of birth) may require supporting documentation.
• Right to erasure: In certain circumstances — such as where the data is no longer necessary for the purpose for which it was collected and no legal retention obligation applies — you may request deletion of your personal data.
• Right to restrict processing: You may request that asc365 limit its processing of your personal data in certain circumstances, for example while the accuracy of data is being disputed.
• Right to data portability: You may request a copy of personal data you have provided to asc365 in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to object: You may object to processing based on legitimate interests, including any profiling carried out for fraud detection or responsible gaming purposes, where you believe your rights and interests override those of asc365.

8.2 To exercise any of the above rights, please submit a written request to [email protected] with sufficient detail to identify your account and the specific right you wish to exercise. asc365 will respond within 30 calendar days. In complex cases, this period may be extended by a further 30 days with prior notification to you.

9.1 asc365 is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 18. Age verification is a mandatory step during the KYC process, and any account found to belong to a person under 18 will be immediately closed.

9.2 If asc365 discovers that personal data has been collected from a minor, that data will be deleted promptly and any funds deposited will be returned to the original payment source. Any winnings associated with an underage account are forfeit.

9.3 Parents and guardians who believe that a minor may have registered on asc365 using false age information are asked to contact asc365 support immediately at [email protected] so that the account can be reviewed and closed without delay.

10.1 asc365 reserves the right to update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the structure of our business. The effective date at the top of this document indicates when the current version came into force.

10.2 Where a change to this policy is material — for example, where we introduce a new purpose for processing or a new category of third-party data sharing — asc365 will notify registered players via email to the address held on their account at least 14 days before the change takes effect.

10.3 For non-material changes (such as editorial clarifications, corrections of typographical errors, or restructuring of content without changing its substance), the policy will be updated without prior notice. The current version is always available at asc365.club/privacy-policy.

10.4 Continued use of the asc365 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated policy, you should cease using the platform and may request account closure by contacting [email protected].

11.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which asc365 handles your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Response commitment: We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days.

11.2 asc365 takes all privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you are entitled to escalate the matter through whatever dispute resolution mechanism is available to you under applicable law in Bangladesh.