ase356 Privacy Policy

ase356 collects personal data from players in Bangladesh in order to provide a secure, compliant, and fully functional betting and casino platform. We collect only what is necessary and do not engage in excessive or unnecessary data gathering. The categories of personal data we collect are set out below.

Registration Data: When you create an ase356 account, we collect your full legal name, date of birth, residential address (including district, division, and postal code), mobile phone number, and a username and password of your choosing. This information is required to establish your identity and ensure you meet the minimum age requirement of 18 years.

Identity Verification (KYC) Data: As part of our Know Your Customer process, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also request a recent utility bill or bank statement as proof of address, and in some cases a short selfie photograph for liveness verification.

Financial Data: To process deposits and withdrawals, we collect transaction records including the mobile money number associated with your bKash, Nagad, Rocket, or Upay account, or the masked card number for Visa and Mastercard transactions. We do not store full card numbers or mobile banking PINs — payment processing is handled via secure, tokenised channels.

Gameplay and Betting Data: We record the details of every bet placed, game session played, bonus claimed, and transaction completed on your account. This data is used for account management, dispute resolution, fraud detection, and improving the overall platform experience.

Device and Technical Data: When you access ase356, our servers automatically log your IP address, browser type and version, operating system, device type (mobile or desktop), session timestamps, and referring URL. This information is used for security monitoring, fraud prevention, and platform optimisation.

Communications Data: If you contact ase356 support via email or any other channel, we retain a record of that correspondence, including your queries, our responses, and any attachments shared, for quality assurance and dispute resolution purposes.

ase356 processes your personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your personal data are as follows:

Account Management: Your registration data is used to create and maintain your ase356 account, authenticate your identity each time you log in, process account settings changes, and respond to account-related requests.

Payment Processing: Financial data is used exclusively to process your deposit and withdrawal requests via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard). Transaction records are also retained for accounting and audit purposes.

Regulatory Compliance and Fraud Prevention: ase356 is obligated to conduct anti-money laundering (AML) checks and Know Your Customer (KYC) verification on player accounts. Your identity and financial data are used to fulfil these obligations. We may also use automated systems to detect unusual betting patterns, duplicate account activity, or other indicators of fraud or abuse.

Customer Support: Communications data — including the details you provide when contacting our support team — is used to resolve your queries, investigate complaints, and maintain a record of interactions for quality assurance purposes.

Platform Improvement: Aggregated and anonymised gameplay and technical data is used to understand how players interact with ase356, identify performance issues, and develop new features. This analysis is performed at a statistical level and does not involve profiling of individual players for commercial targeting.

Security Monitoring: Technical data such as IP addresses, device identifiers, and session logs is used to detect and respond to security threats, prevent unauthorised access, and ensure the integrity of the platform.

Responsible Gaming: ase356 uses gameplay and account activity data to monitor for indicators of problem gambling behaviour — such as rapidly escalating bet sizes, frequent deposits following losses, or extended uninterrupted play sessions. Where such patterns are identified, our responsible gaming team may make contact with the player or apply account safeguards. This use of data is in the player's best interest and is never used for commercial targeting.

Legal Obligations: In certain circumstances, ase356 may be required to process and retain your personal data to comply with applicable laws, respond to lawful requests from government or regulatory authorities, or to establish, exercise, or defend legal claims.

ase356 does not sell your personal data. We share your data only in the limited circumstances described below, and always subject to contractual protections or legal obligations that govern how the recipient may use the information.

Payment Service Providers: To process your deposits and withdrawals, ase356 shares the necessary financial and identity information with the relevant payment service providers — bKash, Nagad, Rocket, Upay, and the card networks (Visa and Mastercard). These providers process your data solely to complete the requested transaction and are subject to their own privacy frameworks.

Identity Verification Partners: ase356 may use third-party KYC verification services to assist with the automated or manual review of identity documents. These partners receive only the specific data required to perform the verification check and are contractually prohibited from using it for any other purpose.

Game Technology Providers: ase356's casino and sportsbook products are powered by third-party game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe, among others. These providers may receive technical session data (such as anonymised player session tokens) that is necessary to deliver the game experience. They do not receive your full personal profile or financial data.

IT and Infrastructure Partners: ase356 uses third-party cloud hosting and infrastructure services to operate the platform. These providers process data on our behalf under strict data processing agreements and have no independent right to use your data for their own purposes.

Legal and Regulatory Authorities: ase356 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when legally compelled to do so, or when we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of persons, or comply with a lawful legal process.

Business Transfers: In the event that ase356 undergoes a merger, acquisition, or sale of some or all of its assets, your personal data may be transferred to the acquiring entity. We will notify players via their registered contact details if such a transfer occurs and will ensure the receiving party commits to honouring the privacy protections set out in this policy.

ase356 uses cookies and similar tracking technologies to ensure the platform operates correctly, to keep your session secure, and to gather anonymised performance data. This section explains what cookies we use, why we use them, and how you can manage them.

What Are Cookies? Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently and to provide session persistence — for example, keeping you logged into your ase356 account as you navigate between pages.

Strictly Necessary Cookies: These cookies are essential for the ase356 platform to function and cannot be disabled. They include session authentication cookies that keep you securely logged in, CSRF protection tokens that prevent cross-site request forgery attacks, and load-balancing cookies that ensure platform stability under high traffic.

Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and last-used payment method — so you do not need to reconfigure them on every visit. They are set only on your device and are not shared with third parties.

Analytics Cookies: ase356 uses anonymised analytics data to understand aggregate player behaviour on the platform — for example, which game categories are most popular, or how long typical account verification sessions take. This data is aggregated and cannot be used to identify individual players.

What We Do NOT Use: ase356 does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any other technology designed to track your activity across websites outside of ase356.net for commercial targeting purposes.

Managing Cookies: Most modern browsers allow you to view, block, or delete cookies through their privacy or security settings. Please note that disabling strictly necessary cookies will impair your ability to use the ase356 platform, including logging in and completing transactions. Disabling functional or analytics cookies will not prevent you from using the platform but may affect your user experience.

ase356 takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

Encryption in Transit: All data transmitted between your device and ase356 servers is encrypted using Transport Layer Security (TLS 1.2 or higher). This applies to every interaction on the platform — account login, deposit initiation, game sessions, and support communications alike.

Encryption at Rest: Sensitive personal data stored on ase356 servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption. This ensures that even in the event of unauthorised physical access to storage media, the data remains unreadable without the appropriate decryption keys.

Access Controls: Access to player data within ase356's internal systems is governed by role-based access controls (RBAC). Staff members are granted access only to the data categories they need to perform their specific job function. All access events are logged and subject to periodic audit.

Password Security: ase356 never stores your password in plain text. Passwords are hashed using a strong cryptographic hashing algorithm with per-user salting, meaning that even if our internal user database were ever exposed, your password could not be directly read from it.

Fraud and Intrusion Detection: ase356 operates automated monitoring systems that scan for anomalous login patterns, unusual transaction sequences, and other indicators of account compromise or fraudulent activity. Suspected security events trigger alerts to our security team for immediate investigation.

Security Incident Response: In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of affected players, ase356 will notify affected players via their registered contact details without undue delay and will take immediate steps to contain the breach, assess its impact, and prevent recurrence.

ase356 retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and legitimate business need. The following general retention periods apply:

• Active Account Data: Personal data associated with an active ase356 account is retained for the duration of the account's active status and for a minimum period following account closure.
• Transaction Records: Financial transaction records — including deposit and withdrawal histories — are retained for a minimum of five years from the date of the transaction. This period reflects standard financial record-keeping requirements.
• KYC / Identity Documents: Copies of identity documents submitted for account verification are retained for a period of five years following account closure, or longer if required by applicable anti-money laundering regulations.
• Support Communications: Records of customer support interactions are retained for three years following the resolution of the relevant query or complaint.
• Gameplay and Betting History: Detailed records of individual bets, game sessions, and bonus activity are retained for five years from the date of the relevant activity.
• Technical and Log Data: Server logs and technical access data are retained for up to 12 months for security and operational purposes, after which they are deleted or anonymised.

When data is no longer required under these retention periods and no legal hold applies, ase356 will securely delete or anonymise it so that it can no longer be attributed to an identifiable individual.

ase356 respects your rights in relation to your personal data. As a player, you hold the following rights with respect to the personal information we hold about you. To exercise any of these rights, contact us at [email protected] with your account details and a clear description of your request.

Right of Access: You have the right to request a copy of all personal data ase356 holds about you. We will respond to access requests within 30 days and provide your data in a readable format at no charge for standard requests.

Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For some data fields (such as your registered address or phone number), you may be able to update these directly via your account settings.

Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and no other legal basis for processing applies. Please note that this right is subject to our legal data retention obligations — for example, we cannot delete transaction records that we are required to retain for regulatory compliance purposes.

Right to Restrict Processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that ase356 restrict its processing of your data to storage only.

Right to Data Portability: Where data is processed on the basis of your consent or for the performance of a contract, you may request that ase356 provide your personal data in a structured, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.

Right to Object: You have the right to object to the processing of your personal data for purposes of direct marketing. You also have the right to object to other forms of processing in certain circumstances, subject to ase356's overriding legitimate interests or legal obligations.

Right to Withdraw Consent: Where ase356 processes your data on the basis of your consent (for example, for optional marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

ase356 reviews this Privacy Policy periodically to ensure it remains accurate, up to date, and reflective of our current data practices. We may update this policy from time to time in response to changes in the platform, applicable laws, or industry best practices.

Notification of Changes: When we make material changes to this Privacy Policy — changes that affect how we collect, use, or share your personal data in a meaningful way — we will notify registered players via their registered contact details before the changes take effect. Minor updates (such as corrections to wording, formatting improvements, or clarifications that do not change the substance of the policy) may be made without direct notification, but the updated version will always be published at ase356.net/privacy-policy with a revised effective date.

Continued Use as Acceptance: Your continued use of the ase356 platform following notification of a material policy change constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised policy, you should cease using the platform and contact support to arrange account closure and the return of any eligible balance.

Effective Date: This version of the ase356 Privacy Policy is effective from 1 January 2026. It supersedes all prior versions of the ase356 Privacy Policy.

Contact for Privacy Matters: If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how ase356 handles your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Enquiry" or "Data Rights Request"
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days and to data rights requests within 30 calendar days.

Related Policies: This Privacy Policy should be read alongside the Terms & Conditions and Responsible Gaming Policy, both of which are published on ase356.net. Together, these three documents form the complete framework governing your relationship with ase356.