Privacy Policy — How asi365 Handles Your Personal Data

1. Introduction & Scope

This Privacy Policy ("Policy") applies to all users of the asi365 platform, accessible at asi365.pro, including any associated web interfaces, mobile-optimised views, and all gaming and betting services offered by asi365 ("we", "us", "our", "the Platform"). The Policy describes the types of personal data we collect, the lawful bases on which we process it, how it is used and shared, and the rights available to you as a data subject.

asi365 is committed to handling your personal information with care, transparency, and in accordance with recognised data protection standards. While Bangladesh does not yet have a comprehensive standalone data protection statute equivalent to the EU's General Data Protection Regulation (GDPR), asi365 voluntarily aligns its data practices with internationally recognised privacy principles to ensure the highest standard of protection for our players.

This Policy applies to:

• All registered players holding an active or inactive asi365 account;
• All visitors to asi365.pro, whether or not they hold a registered account;
• All individuals who contact asi365 support via email or any other channel;
• All users who interact with our platform from within Bangladesh or any other territory where asi365 is accessible.

This Policy should be read in conjunction with the asi365 Terms & Conditions, which form part of the overall agreement between you and the platform. By continuing to use asi365.pro, you acknowledge that you have read and understood this Policy.

2. Data We Collect

asi365 collects personal data through several channels: directly from you during registration and KYC verification, automatically through your use of the platform, and occasionally from trusted third-party sources (such as payment processors and identity verification providers). The categories of data we collect are detailed below.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile number, and residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi);
• Identity verification (KYC) data: Government-issued ID documents (National ID card, passport, driving licence), proof of address documents, and in some cases source-of-funds documentation;
• Payment data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account numbers, and card details (Visa, Mastercard) as required for deposits and withdrawals — note that full card numbers are not stored on our servers; card data is handled by PCI-DSS compliant payment processors;
• Communications data: Any messages, emails, or support tickets you send to asi365, including the content of those communications.

2.2 Data Collected Automatically

• Device & technical data: IP address, browser type and version, operating system, device model, screen resolution, and time-zone settings;
• Usage data: Pages visited on asi365.pro, time spent on each page, game rounds played, bet amounts, win/loss records, session duration, and navigation paths;
• Cookie data: Session identifiers, preference cookies, and analytics tokens (see the Cookies section for full details);
• Geolocation data: Approximate geographic location derived from IP address, used for fraud prevention and jurisdictional compliance — we do not collect precise GPS coordinates.

2.3 Data from Third Parties

• Identity verification results from KYC partners (pass/fail status, risk score);
• Transaction confirmation data from payment processors (bKash, Nagad, bank processors, card networks);
• Fraud signals and risk indicators from anti-money-laundering (AML) screening services.

Summary of data categories and collection sources:

3. How We Use Your Data

asi365 processes personal data only for clearly defined, legitimate purposes. We do not use your data for any purpose that is incompatible with the original reason for which it was collected. The primary purposes for which asi365 uses personal data are:

• Account management: Creating and maintaining your player account, processing login sessions, storing your preferences, and enabling you to access all platform features;
• Identity and age verification: Ensuring all players are at least 18 years of age and confirming that your identity matches the account registration details, in accordance with responsible gaming and anti-fraud obligations;
• Payment processing: Executing deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, bank transfer, and card networks — including verifying that payment accounts belong to you;
• Fraud prevention and AML compliance: Monitoring account activity for signs of fraudulent behaviour, money laundering, bonus abuse, multi-accounting, or other prohibited conduct as described in the Terms & Conditions;
• Responsible gaming monitoring: Tracking gaming activity to identify patterns consistent with problem gambling and to enforce player-set deposit limits, session limits, and self-exclusion requests;
• Customer support: Using your contact details and account history to respond to queries, resolve disputes, and process complaints;
• Legal and regulatory compliance: Retaining records as required by applicable financial, anti-money-laundering, and data protection laws and responding to lawful requests from regulatory or law enforcement authorities;
• Platform improvement: Using anonymised or aggregated usage data to analyse platform performance, fix technical issues, and develop new features — this analysis does not identify individual players;
• Communications: Sending service notifications (account activity alerts, payment confirmations, security alerts) and, where you have opted in, promotional communications about offers relevant to your interests.

Lawful Bases for Processing: asi365 processes personal data under the following lawful bases: (a) contractual necessity — processing required to deliver the services you have contracted for; (b) legal obligation — processing required to comply with applicable law; (c) legitimate interests — processing for fraud prevention, security, and platform improvement where those interests are not overridden by your rights; and (d) consent — for optional communications such as marketing emails, where you have explicitly opted in.

4. Data Sharing & Third Parties

asi365 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

4.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf under contractual data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to asi365. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and the Visa/Mastercard networks — to execute transactions you initiate;
• KYC and identity verification providers: To verify your identity documents and assess fraud or AML risk;
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios — who receive only the session and game-round data necessary to deliver their games within the asi365 lobby;
• Cloud infrastructure providers: Hosting and data storage services who store your data on encrypted servers under strict access controls.

4.2 Legal and Regulatory Disclosures

asi365 may disclose personal data to governmental bodies, law enforcement agencies, or regulators where we are required to do so by law, court order, or legally binding regulatory direction. In such cases, we will disclose only the minimum data necessary to comply with the relevant legal obligation and will notify you of the disclosure where we are legally permitted to do so.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of asi365's business assets, personal data held on registered players may be transferred to the acquiring entity. You will be notified of any such transfer via the email address registered to your account, and the Privacy Policy of the successor entity will apply from the effective date of the transfer.

4.4 Aggregated and Anonymised Data

asi365 may share aggregated, anonymised statistical data about platform usage with analytics partners or publish such data in reports. This data cannot be used to identify any individual player and is not subject to the same restrictions as personal data.

5. Cookies & Tracking Technologies

The asi365 platform uses cookies and similar tracking technologies (including local storage tokens and session identifiers) to operate the site effectively, remember your preferences, and gather aggregated analytics data about how the platform is used. A cookie is a small text file placed on your device by your web browser when you visit a website.

Categories of Cookies Used by asi365:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, store your language and currency preferences, and prevent session hijacking. Without these cookies, you cannot use the platform. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences (e.g., preferred game categories, display settings) to personalise your experience. They are not required for basic platform function but enhance usability.
• Analytics Cookies: These cookies collect anonymised usage data — pages visited, time on site, navigation paths — to help asi365 understand how players use the platform and identify areas for improvement. No personally identifiable information is included in analytics data.
• Security Cookies: These cookies support fraud detection and security monitoring by storing a device fingerprint hash that helps us identify suspicious login attempts or account takeover behaviour.

Managing Cookies: You can control non-essential cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear all stored cookies, or receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will prevent you from logging into your asi365 account. For guidance on managing cookies in your specific browser, refer to the browser's help documentation.

asi365 does not use cookies for advertising retargeting, cross-site tracking, or the creation of advertising profiles. We do not share cookie data with advertising networks.

6. Data Retention & Storage

asi365 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your account being active on the platform plus a minimum of five (5) years following account closure, to comply with AML record-keeping requirements;
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the last transaction date, as required by financial regulations;
• Transaction records: Retained for a minimum of seven (7) years to satisfy financial auditing and tax compliance requirements;
• Support communications: Retained for three (3) years from the date of the last communication, or longer if the communication relates to an active dispute;
• Analytics and usage data: Aggregated, anonymised analytics data may be retained indefinitely; individually identifiable usage logs are retained for up to 24 months.

Data Storage Location: All personal data processed by asi365 is stored on encrypted servers. Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All data transfers between your browser and asi365.pro are encrypted using TLS 1.2 or higher (256-bit SSL).

Data Deletion: Where you exercise your right to erasure (see Your Privacy Rights below) and there is no legal obligation requiring retention, asi365 will securely delete your personal data within 30 calendar days of a valid deletion request being confirmed.

7. Your Privacy Rights

As a player on the asi365 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and fulfil it within 30 calendar days unless complexity or volume requires an extension, in which case we will notify you.

• Right of Access: You have the right to request a copy of all personal data asi365 holds about you, along with information about how it is being processed and the categories of recipients with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Minor details (email address, phone number) can be updated directly in your account settings panel.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and we have no overriding legitimate interest. This right is subject to legal retention requirements — we cannot delete data we are legally required to retain.
• Right to Restrict Processing: You may request that we restrict processing of your data in certain circumstances — for example, while a rectification request is being resolved, or where you contest the lawfulness of our processing.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive a copy of your personal data in a structured, machine-readable format (CSV or JSON) for transfer to another controller.
• Right to Object: You have the right to object at any time to processing of your personal data that is based on asi365's legitimate interests, including profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Please note that exercising some of these rights — particularly erasure — may result in the closure of your asi365 account if retaining the account is not possible without the relevant data.

8. Data Security Measures

Protecting your personal data from unauthorised access, alteration, disclosure, or destruction is a core operational priority for asi365. We implement a layered security architecture that includes both technical and organisational controls:

• Transport Layer Security: All data transmitted between your browser and asi365.pro is encrypted using TLS 1.2 or TLS 1.3 (256-bit SSL). Our SSL certificate is maintained current and valid at all times.
• Encryption at Rest: All sensitive data stored on asi365 servers — including KYC documents, payment identifiers, and account credentials — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is granted only to authorised asi365 personnel who require it to perform their specific job functions. Access is managed through role-based access control (RBAC) and is reviewed periodically.
• Two-Factor Authentication: Player accounts support two-factor authentication (2FA). We strongly recommend enabling 2FA in your account security settings to protect against unauthorised login attempts.
• Penetration Testing: asi365 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities in our platform infrastructure before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights, asi365 will notify affected players via their registered email address within 72 hours of confirming the breach, describing the nature of the incident, the data involved, and the steps being taken to address it.

While asi365 takes all reasonable and industry-standard steps to protect your personal data, no internet-based system can be guaranteed to be 100% secure. You play an important role in account security by keeping your login credentials confidential, enabling 2FA, and notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

9. Children's Privacy

The asi365 platform is strictly intended for adults aged 18 years and over. We do not knowingly collect, process, or retain personal data from any individual under the age of 18. The age verification procedures implemented during account registration — including date-of-birth confirmation and KYC identity document review — are specifically designed to prevent minors from accessing the platform.

If asi365 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 18, we will immediately and permanently close the relevant account, delete all associated personal data (subject to any overriding legal retention obligation), and — where applicable — report the matter to relevant authorities.

If you are a parent or legal guardian and believe that your minor child has registered an account on asi365, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

10. Changes to This Policy

asi365 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, updates to applicable law, or changes to the services we offer. When material changes are made to this Policy, we will notify registered players by sending a notification to the email address associated with their account and by posting a prominent notice on asi365.pro.

The "Last Updated" date at the top of this Policy indicates when the most recent revision took effect. We recommend that you review this Policy periodically to stay informed about how we are protecting your personal data. The most current version of the Privacy Policy is always accessible at asi365.pro/privacy-policy.

Your continued use of the asi365 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this Policy, you should cease using the platform and may request account closure in accordance with the account closure provisions in our Terms & Conditions.

11. Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the way asi365 handles your personal data, please contact our Data Protection team using the details below. All privacy-related enquiries are handled confidentially and with priority.

• Email: [email protected] (use subject line: "Privacy Enquiry" or "Data Rights Request")
• Response Time: We aim to acknowledge all privacy enquiries within 5 business days and provide a full response within 30 calendar days.
• Support Hours: Available 24/7 — English and Bengali language support, average response time 2–5 minutes for live support queries.

For data rights requests (access, rectification, erasure, portability, objection), please include: your registered email address, a description of your request, and, where applicable, a copy of a valid identity document to allow us to verify your identity before processing the request. We will not process data rights requests that we are unable to verify.

If you are not satisfied with how asi365 has handled your privacy concern after contacting our support team, you retain the right to escalate the matter to the relevant regulatory or data protection authority in your jurisdiction.