Privacy Policy for ac67

1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:

• "ac67" / "we" / "us" / "our" — refers to the ac67 online casino and sports betting platform, operated at ac67.io and its mobile-optimised interfaces.
• "Player" / "you" / "your" — refers to any individual who visits, registers, or uses any part of the ac67 platform.
• "Personal Data" — refers to any information that identifies or could reasonably be used to identify a specific individual, including name, date of birth, email address, phone number, residential address, and payment account details.
• "Sensitive Personal Data" — refers to personal data that warrants enhanced protection, including copies of government-issued identity documents, financial records, and data revealing health or wellbeing information collected in the context of responsible gaming tools.
• "Processing" — refers to any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Third-Party Processor" — refers to an external service provider engaged by ac67 to process personal data on our behalf, including payment providers, identity verification services, and fraud prevention partners.
• "Cookie" — refers to a small text file stored on your device by the ac67 platform for purposes including session management, preference retention, and analytics.
• "KYC" — Know Your Customer; the identity and age verification process conducted by ac67 prior to approving withdrawal requests or lifting account restrictions.

2 Introduction & Scope

ac67 is committed to protecting the privacy and personal data of every player who uses the platform. This Privacy Policy applies to all personal data collected through the ac67 website, mobile-optimised interfaces, customer support channels, and any related communications (including email and in-platform messaging).

This policy covers players based in Bangladesh and is written in English to ensure clarity and accessibility. The ac67 platform operates exclusively in Bangladeshi Taka (BDT) and is designed for players in Bangladesh who use local payment methods including bKash, Nagad, Rocket, and Upay.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which contain additional provisions relevant to how we handle player data in specific contexts.

3 Information We Collect

ac67 collects personal data through several channels in the course of operating the platform. The categories of information we collect are detailed below.

3.1 Registration Data

When you create an ac67 account, we collect the information you provide in the registration form, including:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Residential address in Bangladesh (city, district, full address)
• Email address
• Mobile phone number
• Username and encrypted password (we never store passwords in plain text)
• Preferred currency (BDT is the default and only supported currency)

3.2 Identity Verification (KYC) Data

To comply with our age verification and fraud prevention obligations, we may request the following documents during KYC review:

• Scan or photograph of your National Identity Card (NID), passport, or other government-issued photo ID
• A recent utility bill, bank statement, or official document confirming your residential address (dated within 90 days)
• Confirmation details of the payment method registered in your name (e.g., bKash mobile number, Nagad account number)

3.3 Financial Transaction Data

ac67 records details of all deposits and withdrawals processed through your account, including:

• Payment method type (bKash, Nagad, Rocket, Upay, bank transfer)
• Transaction reference numbers and timestamps
• Deposit and withdrawal amounts in BDT
• Account balance history

ac67 does not store full card numbers, mobile wallet PINs, or mobile banking passwords. Payment transactions are processed through the respective payment provider's own secure interface.

3.4 Gaming Activity Data

We collect detailed records of your gaming activity on ac67, including:

• Games played, bet amounts, win/loss records, and session durations
• Sports betting history including markets, odds, and outcomes
• Bonus and promotional offer usage history
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

3.5 Technical & Device Data

When you access the ac67 platform, our servers and analytics systems automatically record certain technical information about your session, including:

• IP address and approximate geographic location (city/district level)
• Device type, operating system, and browser version
• Pages visited, session duration, and navigation paths within the platform
• Referring URL (the page from which you arrived at ac67.io)
• Cookie identifiers and session tokens

3.6 Customer Support Communications

When you contact ac67 customer support via email ([email protected]) or in-platform messaging, we retain records of those communications, including your contact details, the content of your message, and any supporting evidence you provide (such as screenshots or transaction references). These records are used to resolve your query and to maintain a history of support interactions on your account.

4 How We Use Your Information

ac67 uses the personal data we collect for the following defined purposes:

ac67 will not use your personal data for any purpose not listed above without first obtaining your explicit consent or as otherwise required by applicable law.

5 Legal Basis for Processing

ac67 processes your personal data on the following legal grounds:

• Contractual Necessity — processing your registration data, financial transaction data, and gaming activity data is necessary to perform the contract between you and ac67 (as set out in our Terms & Conditions). Without this data, we cannot provide the services you have signed up for.
• Legitimate Interests — ac67 processes technical and device data, session analytics, and fraud monitoring data on the basis of our legitimate interest in maintaining platform security, detecting fraudulent activity, and improving the quality of our services for all players.
• Legal Obligation — processing KYC identity documents and financial records is required to fulfil our obligations relating to age verification, identity confirmation, and anti-money laundering compliance.
• Consent — where ac67 sends you promotional communications, processes non-essential cookies, or collects data for purposes beyond operational necessity, we do so on the basis of your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Sharing Your Information

ac67 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

6.1 Payment Processing Partners

To process deposit and withdrawal transactions, ac67 shares relevant transaction data (transaction reference, amount, account holder name, and payment method identifier) with our payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each of these partners operates under their own privacy policy and is independently responsible for the data they process as part of the payment transaction.

6.2 Identity Verification Providers

KYC identity documents submitted by players are processed by authorised third-party identity verification providers engaged by ac67. These providers are bound by data processing agreements and are not permitted to use player data for any purpose other than the identity verification service they provide to ac67.

6.3 Fraud Prevention & Security Services

ac67 uses automated fraud detection systems that may process device fingerprinting data, IP address information, and behavioural patterns to detect suspicious activity. Data processed for fraud prevention purposes is not used for any other purpose and is not shared with unaffiliated parties.

6.4 Game Content Providers

When you play games hosted on the ac67 platform by third-party studios (such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Ezugi, or Spribe), limited session and gameplay data may be transmitted to the relevant studio's servers to facilitate gameplay. This data is subject to the respective studio's data handling practices.

6.5 Legal Disclosure

ac67 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, or where we believe in good faith that such disclosure is necessary to protect the rights, safety, or property of ac67, our players, or the public.

7 Cookies & Tracking Technologies

The ac67 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how players use the site so we can continue to improve it.

Types of cookies used by ac67:

• Strictly Necessary Cookies — These are essential to the operation of the ac67 platform. They enable core functions such as maintaining your logged-in session, storing your language and currency preferences, and ensuring secure transmission of your account data. These cookies cannot be disabled without impairing platform functionality.
• Analytics Cookies — ac67 uses analytics tools to understand how players navigate the platform, which pages generate the most engagement, and where technical issues occur. Analytics data is aggregated and anonymised wherever possible. These cookies are set only with your consent.
• Functional Cookies — These cookies remember choices you make on the platform (such as your preferred game category or notification settings) to provide a more personalised experience. They do not track your activity across other websites.
• Security Cookies — These cookies support ac67's fraud detection and security monitoring systems. They help us identify unusual access patterns, detect bot activity, and protect your account from unauthorised access.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the ac67 platform from functioning correctly. For analytics and functional cookies, you may withdraw consent at any time by adjusting your cookie preferences in your account settings.

8 Data Retention

ac67 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods we apply are as follows:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with ac67's data disposal procedures. Anonymised data (which can no longer be used to identify any individual) may be retained indefinitely for aggregated analytics purposes.

9 Data Security

ac67 applies a layered approach to data security that encompasses technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

Technical security measures in place at ac67 include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ac67 servers
• Encrypted storage for personal data and sensitive documents at rest
• Role-based access control (RBAC) ensuring that ac67 staff can only access player data relevant to their authorised role
• Multi-factor authentication (MFA) for all internal administrative access to player databases
• Automated intrusion detection systems and real-time security monitoring
• Regular penetration testing and third-party security audits of the platform infrastructure
• Audit logging of all access to sensitive player records, with logs retained for security review

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a high risk to the rights or freedoms of affected players, ac67 will notify impacted players promptly and take all reasonable steps to contain and remediate the breach.

You also have a role in keeping your ac67 account secure. We strongly recommend that you use a strong, unique password for your ac67 account, enable any two-factor authentication options available, and never share your login credentials with any other person.

10 Your Rights

As an ac67 player, you have a number of rights in relation to your personal data. These rights are set out below, along with guidance on how to exercise them.

• Right of Access — You may request a copy of all personal data that ac67 holds about you. We will provide this within 14 calendar days of receiving a valid request, in a readable format.
• Right to Rectification — If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data (such as your registered name) may require supporting documentation to amend.
• Right to Erasure — You may request that ac67 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing exists. Please note that we are required to retain certain data (such as financial records and KYC documents) for defined legal retention periods even after account closure.
• Right to Restriction of Processing — You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability — Where ac67 processes your data on the basis of consent or contract, and processing is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object — You have the right to object to the processing of your personal data where that processing is based on ac67's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent — Where ac67 processes your personal data on the basis of your consent (for example, for marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact our support team at [email protected] with the subject line "Data Rights Request — [Your Username]". Include a clear description of the right you wish to exercise and provide sufficient information for us to verify your identity before processing the request. ac67 will acknowledge all data rights requests within 5 business days and provide a substantive response within 14 calendar days.

11 Children & Minors

The ac67 platform is strictly for adults aged 21 and above. ac67 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register an account, access the platform, or provide any personal information to ac67.

All registration attempts are subject to age verification checks. Where ac67 has reasonable grounds to believe that an account has been registered by a person under 21, that account will be suspended immediately and the matter will be referred to our KYC team for investigation. Any balance associated with an account found to belong to a minor will be handled in accordance with our Terms & Conditions and applicable law.

If you are a parent or guardian and believe that a minor in your care has registered an account with ac67 or provided personal data to the platform, please contact us immediately at [email protected]. We will investigate the matter and take appropriate action, including account closure and deletion of any personal data collected, as quickly as possible.

12 Third-Party Links & Services

The ac67 platform may reference or interact with third-party services, including game content providers (Pragmatic Play, Evolution Gaming, PG Soft, Spribe, Ezugi, NetEnt, Microgaming) and payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank). When you interact with these services — for example, when you launch a game hosted on a third-party studio's server or initiate a payment through bKash — your data may be processed directly by that third party under their own privacy policy.

ac67 is not responsible for the privacy practices of any third-party service providers or game content studios. We encourage you to review the privacy policies of those providers directly if you have questions about how they handle your data.

ac67 does not embed third-party advertising trackers, social media pixels, or behavioural retargeting scripts on the platform. Any analytics tools used by ac67 are configured to anonymise data and are not shared with advertising networks.

13 International Data Transfers

ac67 primarily processes and stores player data on servers located within or serving the Bangladesh region. However, some of the third-party processors engaged by ac67 (including certain game content studios and technical infrastructure providers) may process data on servers located outside Bangladesh.

Where personal data is transferred to processors in other countries, ac67 takes steps to ensure that appropriate safeguards are in place to protect your data, including:

• Entering into data processing agreements with all third-party processors that include contractual obligations to protect personal data to a standard equivalent to or exceeding ac67's own security requirements.
• Requiring third-party processors to implement appropriate technical and organisational security measures, including encryption of data in transit and at rest.
• Limiting the scope of data transferred to the minimum necessary for the specific processing purpose.

By using the ac67 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to third-party processors who may operate outside Bangladesh, subject to the safeguards described above.

14 Changes to This Policy

ac67 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. When material changes are made to this policy, ac67 will notify registered players by email and by displaying a prominent notice on the platform for a period of not less than 7 days prior to the updated policy taking effect.

Minor amendments — such as typographical corrections, clarifications that do not alter the substance of any provision, or updates to reflect the addition of a new payment method — may be made without advance notice and will take effect immediately upon publication.

The "Last Updated" date at the top of this document always reflects the date of the most recent revision. We recommend that you review this Privacy Policy periodically to stay informed of how ac67 handles your personal data. Your continued use of the ac67 platform following any update constitutes your acknowledgement of the revised policy.

15 Contact & Data Requests

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 10, please contact the ac67 data support team using the details below.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request — [Your Username]"
• Subject Line for Privacy Complaints: "Privacy Complaint — [Your Username]"
• Support Hours: 24/7, including Bangladesh public holidays
• Acknowledgement Time: Within 5 business days for all data rights requests
• Response Time: Substantive response within 14 calendar days
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Language: English and Bengali support agents available

When submitting a data rights request, please include your registered username, the email address associated with your ac67 account, and sufficient information to allow us to verify your identity. This is necessary to protect the security of your account and to ensure that we do not disclose personal data to an unauthorised party.