Effective date: July 2026
ace360 App Privacy Policy and Data Security
What data is stored in the ace360 App is clearly shown here for Dhaka users, and how bKash, Nagad and Rocket transactions are captured, explained in plain language.
Many apps retain unnecessary data; we do not. The rules about payment processors, cookies and user rights are explained plainly so you can understand calmly.
View ace360 APKCard data tokenization in ace360 App
Card numbers are not stored directly.
Card data goes in token form; the actual number is kept in a separate vault, and only the token is used in the current session.
Sensitive parts are hidden.
Other information is limited except expiry date and last four digits; this reduces risk and makes matching easier.
Displayed clearly on mobile.
ace360 App shows only the necessary payment summary; with one tap you can reconcile previous transactions.
Most issues start when the app collects extra card data; ace360 App does not go that path; tokenization prevents sensitive data from being exposed even if the session changes.
In Dhaka, many users top up with bKash or Nagad; showing the reference number and timely status is enough, no need to retain full payment details repeatedly.
ace360 App PCI limits
Not all processes fall under the same responsibility; PCI-related parts stay within strict limits, and general account information goes on a separate path.
This makes auditing easier; the support team knows which data can be viewed and which cannot be viewed at all.
Segments stay separate.
Payment, login and profile can run in separate flows, reducing unnecessary connections.
Access restricted.
Only authorized team members can view specific logs; not everyone can view all data.
Records are kept as needed.
For audits, dispute resolution and security verification, only the necessary parts are retained.
ace360 Login and data processors list
Not every login is kept in one place; authentication, analytics and customer support can be handled by separate processors.
The list can change, but the policy does not; when new processors come, their security, data retention time and location are checked first.
Authentication
Login session and token validation are here; ace360 Login is fast, but data is restricted.
Payment section
References for bKash, Nagad and Rocket are checked; wallet data is not stored unnecessarily.
Support section
To understand the issue as needed, requests sent from Dhaka are handled under the same rules.
Chargeback data and records are kept.
In chargebacks, quick evidence is needed, so time, reference and transaction status are kept separate.
This is not user wrongdoing but helps identify mismatches, duplicate payments or delayed claims.
Transaction receipt
Only the necessary parts for verification are kept; full personal data is not disclosed.
Timestamp
When an action happened, it can be seen; later, in disputes, reconciliation is easier.
Note if no match
If wrong reference or incomplete information is present, it is noted; this speeds up resolution.
Whether credit card or bKash, the same policy applies; in Bangladesh many users transact in the morning and check status at night, so keeping records clean is important.
Crypto wallet data, cookies and user rights.
If there is a crypto wallet, the address and network are viewed separately; the entire balance or private key is never disclosed.
Cookies mainly help maintain session, language and security; user rights are also present: you can view, correct and delete data on request.
Wallet address
If needed, only a partial address is shown; this verifies, but doesn't increase risk.
Cookie control
Many cookies can be disabled from browser settings, but some session features may not work properly.
User rights
You can request data copies, request corrections, and raise objections to some processing.
Many mobile users in Dhaka also use older browsers, so the cookie notice is kept small, and changing preferences is easy; the same rule applies to users coming from ace360 Download.
Contact and requests in ace360 App.
If any part seems unclear, contact support team; they respond directly and don't beat around the bush.
In your request, provide account email, reference number, and required date; verification ends in 12 steps.
Start ace360 Register