Privacy Policy — aeh365

aeh365 operates the online gambling and sports betting platform accessible at aeh365.app. For the purposes of this Policy, aeh365 is the data controller responsible for your personal information. We process personal data in order to provide our services to registered players across Bangladesh.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our dedicated data support team:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Time: Within 24 hours for standard data enquiries; within 4 hours for urgent data security matters
• Language: English

All data-related correspondence must reference your registered account username and the specific nature of your request to allow us to locate your records promptly.

aeh365 processes your personal data on one or more of the following legal bases, depending on the specific type of processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and aeh365 — specifically, to operate your account, process deposits and withdrawals, settle bets, and deliver Platform services.
• Legal Obligation: Processing is necessary for aeh365 to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, know-your-customer (KYC) verification requirements, and financial record-keeping mandates.
• Legitimate Interests: Processing is necessary for aeh365's legitimate interests, including fraud prevention, Platform security, responsible gaming monitoring, and service improvement, provided that these interests are not overridden by your data protection rights.
• Consent: Where aeh365 sends you promotional communications or processes optional data for personalisation, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time by contacting [email protected].

aeh365 collects personal data through the following channels and interactions:

• Account Registration: When you create an aeh365 account, you provide identity data, contact data, and date of birth directly to the Platform.
• Identity Verification (KYC): When you submit verification documents to unlock withdrawal functionality, you provide government-issued identification and proof of address documents.
• Financial Transactions: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, our payment processing partners transmit transaction metadata to aeh365 for record-keeping purposes.
• Platform Usage: When you use the Platform — browsing games, placing bets, navigating pages — our servers automatically collect technical data and usage data as described above.
• Customer Support: When you contact our support team, we collect and retain the content of your communications for service delivery and dispute resolution.
• Cookies and Tracking Technologies: When you visit the Platform, session cookies and analytical tools collect technical data about your device and browsing behaviour as described in Section 7 of this Policy.

aeh365 does not collect personal data from third-party data brokers, social media platforms, or publicly available databases for the purpose of targeting or profiling individual players.

aeh365 uses the personal data we collect for the following purposes:

• To create, manage, and maintain your aeh365 player account.
• To verify your identity and age eligibility (21+ requirement) in accordance with our responsible gaming commitments.
• To process financial transactions including deposits and withdrawals via your chosen payment method.
• To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct on the Platform.
• To deliver customer support, investigate complaints, and resolve disputes relating to bets, transactions, or account matters.
• To monitor your gaming activity for responsible gaming purposes and to apply any self-imposed limits, cooling-off periods, or self-exclusion requests you have submitted.
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.
• To send you promotional communications about bonuses, offers, and Platform updates, where you have provided your explicit consent to receive such communications.
• To analyse aggregate, anonymised usage patterns for the purpose of improving Platform performance, game selection, and user experience.
• To comply with all applicable legal and regulatory obligations, including the retention of financial records for the legally mandated period.

aeh365 does not sell your personal data to any third party. We share your data only in the following limited, necessary circumstances:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners receive the minimum personal and financial data required to process your transactions securely.
• Identity Verification Providers: Third-party KYC verification services receive identity documents and selfie images when you submit them for account verification. These providers are contractually bound to process your data solely for verification purposes.
• Game Content Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session data required to deliver their games through the Platform. These providers do not receive your full identity or contact details.
• IT and Hosting Providers: Cloud hosting and infrastructure partners who provide the technical environment for the Platform may process your data as data processors acting under our instruction and bound by strict data processing agreements.
• Legal and Regulatory Authorities: aeh365 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent imminent harm or illegal activity.
• Professional Advisers: Legal, accounting, and audit professionals who provide services to aeh365 may access limited personal data where strictly necessary for the services they are providing, subject to professional confidentiality obligations.

All third-party data processors engaged by aeh365 are vetted for data security compliance and are contractually required to process your data only as directed by aeh365 and in accordance with this Policy.

aeh365 retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of your active account plus a period of five (5) years following account closure, to satisfy potential dispute resolution, AML, and financial audit requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with applicable financial record-keeping requirements.
• KYC Verification Documents: Retained for five (5) years following account closure or the date of the last verified transaction, whichever is later.
• Support Communications: Retained for three (3) years following the resolution of the relevant support interaction or dispute.
• Technical and Usage Data: Retained in aggregated, anonymised form indefinitely for analytical purposes. Personally identifiable technical data is retained for twelve (12) months from collection.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years to demonstrate compliance with consent requirements.

Once the applicable retention period has expired, your data will be securely deleted or irreversibly anonymised. aeh365 conducts periodic data audits to ensure that retained data remains necessary and proportionate.

aeh365 uses the following categories of cookies and tracking technologies on the Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable session management, keep you logged in between page loads, and maintain the contents of your betting slip. These cookies cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the Platform, such as which pages are visited most frequently and whether error messages are received. This information helps aeh365 improve the Platform over time. No personally identifiable information is collected by these cookies.
• Functional Cookies: These cookies remember your Platform preferences, such as your chosen language settings and notification preferences, to provide a more personalised experience.

aeh365 does not use advertising cookies, cross-site tracking cookies, or third-party behavioural profiling cookies. You may manage or delete cookies through your device browser settings. Please be aware that disabling cookies may affect your ability to log in or use certain Platform features.

aeh365 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive data fields including passwords and identity document details are stored in encrypted form at rest using AES-256 encryption.
• Access Controls: Access to personal data within aeh365's internal systems is restricted on a strict need-to-know basis. All staff with data access undergo regular security training.
• Two-Factor Authentication: aeh365 provides optional 2FA for player accounts to add an additional layer of protection against unauthorised access.
• Regular Security Audits: The Platform undergoes periodic security assessments and penetration testing conducted by independent security professionals.
• Incident Response: In the event of a data security incident affecting your personal data, aeh365 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

While aeh365 employs all reasonable technical and organisational safeguards, no data transmission over the internet can be guaranteed to be 100% secure. Players are responsible for maintaining the security of their own account credentials.

The aeh365 Platform is strictly intended for adults aged 21 years and above. aeh365 does not knowingly collect personal data from any person under the age of 21. The Platform employs age-verification procedures during registration and may request additional proof of age at any time.

If aeh365 becomes aware that personal data has been collected from a person under the age of 21, the following actions will be taken immediately:

• The relevant account will be suspended pending investigation.
• Any deposits made by the underage player will be returned to the original payment source.
• All personal data associated with the underage account will be securely deleted from our systems.
• The incident will be reviewed internally to identify and close the gap in age-verification procedures that allowed the registration to occur.

If you have reason to believe that a person under the age of 21 has registered on the aeh365 Platform, please contact us immediately at [email protected].

aeh365 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will publish the revised Policy on the Platform with an updated "Last Updated" date at the top of this page. Where required, we will also notify registered players of significant changes via the contact details associated with their account.

Your continued use of the aeh365 Platform after the publication of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. We encourage you to review this Policy periodically to remain informed about how your personal data is being protected.

If you do not agree to any revised version of this Policy, you must close your account and cease using the Platform. Upon account closure, your data will be handled in accordance with the retention schedule described in Section 6 of this Policy.