aet365 Privacy Policy

When you create an aet365 account, we collect the following personal information:

• Full legal name
• Date of birth (to verify 21+ age eligibility)
• Residential address (including city and division within Bangladesh)
• Email address
• Mobile phone number
• Chosen username and encrypted password

This information is required to create and maintain your aet365 account. Without it, we cannot provide you with full access to our platform.

Before processing withdrawals, aet365 requires identity verification. We may request:

• National Identification Card (NID) or passport copy
• Proof of address (utility bill, bank statement dated within 3 months)
• Selfie or photo confirmation matching your NID

All identity documents are stored in an encrypted format and accessed only by authorised compliance personnel. Documents are retained for the period required by our anti-money laundering obligations and then securely deleted.

To process BDT deposits and withdrawals, aet365 collects:

• Mobile wallet numbers (bKash, Nagad, Rocket, Upay) registered in your name
• Bank account details where bank transfers are used
• Transaction reference numbers and timestamps
• Deposit and withdrawal amounts in BDT

aet365 does not store full card numbers, CVV codes, or complete mobile banking PINs. Card-based transactions via Visa and Mastercard are processed through PCI-DSS compliant payment gateways.

When you access aet365, we automatically collect certain technical data:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session duration, pages visited, and features used
• Game history, bet records, and win/loss data
• Crash logs and error reports

This data helps us improve platform performance, personalise your experience, detect suspicious activity, and resolve technical issues.

When you contact aet365 support, submit a complaint, or engage in live chat, we retain records of those communications. This includes chat transcripts, email correspondence, and support ticket histories. These records are used to resolve disputes, improve our support quality, and maintain an audit trail of account-related decisions.

To process your BDT transactions, aet365 shares the minimum necessary payment data with authorised payment processors including bKash, Nagad, Rocket, Upay, and card processing gateways. These processors operate under strict data processing agreements and are prohibited from using your data for any purpose other than processing your transaction.

aet365 integrates games from third-party providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers may receive anonymised session tokens and bet data necessary to operate their games within the aet365 platform. They do not receive your full personal profile, payment details, or NID information.

aet365 may be required to disclose personal data to law enforcement agencies, regulatory authorities, or courts where required by applicable law. We will notify you of any such disclosure where we are legally permitted to do so. Disclosures related to suspected money laundering, fraud, or serious criminal activity may be made without prior notice to the player.

aet365 does not sell, rent, lease, or otherwise transfer your personal data to any third-party marketing companies, data brokers, or advertisers. Your personal information is never used for third-party advertising targeting without your explicit consent.

While your aet365 account is active, we retain all personal data associated with it. This includes your registration details, transaction history, game records, and communications. This data is necessary to operate your account, process payments, and comply with our responsible gaming and anti-fraud obligations.

Following account closure — whether player-initiated or aet365-initiated — we retain personal data for a minimum of 5 years in line with standard financial record-keeping and anti-money laundering requirements. After this period, personal data is securely deleted or anonymised, unless a longer retention period is required by law or is necessary for the resolution of an ongoing dispute.

For players who have self-excluded, aet365 retains your self-exclusion record and associated account data for the full duration of the exclusion period and for a minimum of 5 years thereafter. This retention is essential to prevent the inadvertent re-registration of excluded players and to enforce self-exclusion protections effectively.

aet365 employs a layered security architecture to protect your personal data:

• 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for sensitive data stored at rest
• Bcrypt password hashing — passwords are never stored in plain text
• Two-factor authentication (2FA) available for all accounts
• Regular third-party security audits and penetration testing
• Intrusion detection systems and real-time anomaly monitoring

Access to player personal data within aet365 is governed by a strict role-based access control policy. Only personnel with a verified operational need may access identifiable player data. All staff with data access undergo data protection training. Internal access logs are reviewed regularly for unauthorised or unusual access patterns.

In the event of a data breach that poses a risk to your personal data, aet365 will notify affected players within 72 hours of becoming aware of the breach, to the extent technically feasible. Notifications will be sent to the email address registered on your account and will include the nature of the breach, the data affected, and the steps aet365 is taking to address it.