aes365 Privacy Policy

How aes365 Protects Your Data

Six key commitments that define how aes365 handles the personal information of every registered player.

Complete Privacy Policy

This policy applies to all personal data collected by aes365 from players based in Bangladesh and internationally.

1. Data Controller

aes365 (referred to in this policy as "aes365", "we", "us", or "our") is the data controller responsible for the personal information collected through the aes365 platform at aes365.pro. aes365 operates as an internationally licensed offshore platform. All data-related queries and rights requests should be directed to [email protected].

2. Personal Data We Collect

When you register, use, or interact with the aes365 platform, we may collect the following categories of personal data:

• Registration data: Full name, date of birth, email address, mobile phone number, and country of residence provided when you create an aes365 account.
• Identity verification documents: Government-issued photo ID (National ID card, passport, or driving licence) and proof of address (utility bill or bank statement) collected during the Know Your Customer (KYC) verification process.
• Financial data: bKash wallet number, Nagad number, Rocket number, bank account details (for withdrawals), and transaction records including deposit and withdrawal amounts in BDT.
• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and referral URL collected automatically when you access the platform.
• Usage data: Pages visited, game sessions initiated, bets placed, session duration, and navigation paths within the platform.
• Communications data: The content of messages you send to aes365 via email or live chat support, including any attachments you provide.
• Responsible gaming data: Self-exclusion requests, deposit and loss limit settings, and any information you voluntarily provide in the context of problem gambling support.

3. How We Use Your Personal Data

aes365 processes your personal data for the following lawful purposes:

• Account management: To create, maintain, and administer your player account, including identity verification and age confirmation (21+ requirement).
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records for each account.
• Platform security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other violations of the aes365 Terms & Conditions.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling and to apply self-exclusion, deposit limit, and loss limit settings that you request.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of support services.
• Legal compliance: To fulfil obligations under the laws of the jurisdiction in which aes365 holds its international gaming licence, including record-keeping and reporting obligations.
• Platform improvement: To analyse aggregated usage patterns, game performance data, and player feedback in order to improve the aes365 platform and expand game and payment offerings relevant to Bangladesh players.
• Marketing communications: To send promotional offers, bonus notifications, and tournament announcements to players who have opted in to receive such communications. You may opt out at any time by contacting [email protected].

4. Legal Basis for Processing

aes365 relies on the following legal bases for processing your personal data:

• Contract performance: Processing that is necessary to operate your account and deliver the services you have requested, including payment processing and game access.
• Legitimate interests: Processing carried out to protect the security of the platform, prevent fraud, enforce platform rules, and improve services, where these interests are not overridden by your data protection rights.
• Legal obligation: Processing required to comply with the licensing conditions of aes365's international gaming licence and applicable anti-money-laundering obligations.
• Consent: Processing for marketing communications and optional cookies, where we have obtained your prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Cookies and Tracking Technologies

The aes365 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure player experience. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without breaking platform functionality.
• Performance cookies: Collect anonymised data about how players navigate the platform (pages visited, errors encountered, load times). This data is used solely to improve platform performance.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and last-used payment method to streamline your experience on return visits.
• Analytics cookies: Used by aes365's internal analytics tools to understand aggregate player behaviour patterns. No individual player is identified in analytics reports.

You can manage cookie preferences through your device browser settings. Disabling strictly necessary cookies may impair the functionality of certain platform features, including login persistence and game session continuity.

6. Sharing Your Data with Third Parties

aes365 does not sell your personal data to any third party. We share data only in the following limited, controlled circumstances:

• Payment processors: Your MFS wallet details and transaction amounts are shared with bKash, Nagad, Rocket, Upay, and relevant bank partners solely to process deposits and withdrawals. These processors are bound by their own privacy obligations.
• Game providers: Limited technical data (such as a pseudonymous player ID and bet amounts) is shared with certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to enable game functionality, RNG certification, and dispute resolution.
• Identity verification services: Where aes365 uses a third-party KYC service to verify your identity documents, your identification data is shared with that provider under a strict data processing agreement.
• Legal and regulatory authorities: aes365 may disclose personal data to relevant authorities where required to do so by law, court order, or the conditions of its international gaming licence. We will notify you of such disclosure where legally permitted to do so.
• Professional advisers: Legal counsel, auditors, and compliance consultants may access personal data on a confidential, need-to-know basis to provide services to aes365.

7. International Data Transfers

As an internationally licensed offshore platform serving players in Bangladesh, aes365 may transfer personal data to servers located outside Bangladesh. Where such transfers occur, aes365 ensures that appropriate safeguards are in place — including contractual data transfer agreements with service providers — to maintain a standard of data protection consistent with this Privacy Policy. By using the aes365 platform, you acknowledge and consent to the transfer of your personal data to international servers for the purposes described in this policy.

8. Data Retention

aes365 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by the licensing conditions and legal obligations applicable to the platform. Specific retention periods are as follows:

• Active account data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• Transaction records: All deposit, withdrawal, and wagering transaction records are retained for a minimum of 5 years from the date of each transaction.
• Identity verification documents: Retained for the period required by aes365's licensing jurisdiction, typically 5 years following the end of the player relationship.
• Support communications: Email and chat records are retained for 2 years from the date of the last message in a support thread, unless the subject matter relates to an ongoing dispute or legal proceeding.
• Marketing consent records: Retained for the duration of your opt-in consent plus 1 year following opt-out, as evidence of lawful marketing processing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player.

9. Security Measures

aes365 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and aes365 servers.
• Encrypted storage of all personal data at rest on aes365-managed servers.
• Bcrypt password hashing with salt; plain-text passwords are never stored or transmitted internally.
• Role-based access controls limiting staff access to personal data to only what is required for their specific function.
• Regular penetration testing and vulnerability assessments of platform infrastructure.
• Automated anomaly detection systems that flag unusual login patterns, payment activity, or account behaviour for manual review.
• Mandatory data security training for all aes365 personnel with access to player data.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights, aes365 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

10. Protection of Minors

aes365 is strictly an adults-only platform. Players must be 21 years of age or older to register and use the platform. aes365 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21 without parental consent, we will delete that data immediately and close the associated account. If you believe a minor has registered an aes365 account, please contact us immediately at [email protected].

11. Changes to This Privacy Policy

aes365 reserves the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page and, where practicable, notify registered players by email. Your continued use of the aes365 platform after a policy update constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

12. Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the aes365 data team at [email protected]. Please use the subject line "Privacy Enquiry" so your message is routed to the appropriate team. aes365 will acknowledge all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and provide a full response within 30 calendar days.