acs67 Privacy Policy

This Privacy Policy ("Policy") describes how acs67 ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal information ("Personal Data") of individuals ("User", "Player", "you", "your") who access or use the acs67 online casino and sports betting platform at https://acs67.io. This Policy forms part of and should be read together with the acs67 Terms and Conditions. Capitalised terms not defined herein have the meanings given to them in the Terms and Conditions.

1. Introduction

acs67 is committed to handling the Personal Data of all players — including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and across Bangladesh — with transparency, integrity, and care. We recognise that the trust you place in us when you share your personal information is not taken lightly. This Policy has been written in plain English so that you can clearly understand what we do with your data and why.

By registering an account on the acs67 platform or by continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read, understood, and accepted the data practices described in this document. If you do not agree with any part of this Policy, you should not use the acs67 platform.

2. Personal Data We Collect

acs67 collects the following categories of Personal Data from players. We collect only what is necessary for the purposes set out in Section 4 of this Policy.

2.1 Identity & Contact Data

• Full legal name as it appears on your National Identity Card (NID) or passport
• Date of birth (used to verify that you are aged 21 or above)
• Residential address, including city and district within Bangladesh
• Email address used for account registration and communications
• Mobile phone number (used for account security and, with your consent, marketing SMS)

2.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (NID, passport, or driver's licence)
• Proof of address documentation (utility bill, bank statement, or similar)
• Selfie or live video verification image where required by our KYC provider
• Source of funds documentation where required under anti-money laundering (AML) procedures

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts denominated in Bangladeshi Taka (৳)
• Payment method identifiers (e.g., bKash wallet number, Nagad account reference, Rocket account reference, bank account details for DBBL, City Bank, BRAC Bank, or card details for Visa / Mastercard)
• Transaction timestamps and processing references
• Betting and gaming transaction history, including stake amounts, outcomes, and account balance movements

2.4 Technical & Usage Data

• IP address and approximate geolocation data (country and city level)
• Device type, operating system, and browser version
• Session duration, pages visited, and navigation patterns within the platform
• Game play logs including game titles, bet amounts, spin counts, and session timestamps
• Error and crash reports generated during platform use

2.5 Communications Data

• Records of live chat conversations with acs67 customer support
• Email correspondence sent to or received from acs67
• Responses to surveys, feedback forms, or promotions you choose to participate in

3. How We Collect Your Data

acs67 collects Personal Data through the following channels:

• Direct provision: Data you enter during account registration, KYC submission, deposit or withdrawal requests, live chat interactions, and any other direct communication with acs67.
• Automated collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies when you use the platform. See Section 6 for full details on cookies.
• Third-party sources: Identity verification data received from our KYC and AML service providers; fraud risk scoring data from payment fraud prevention systems; and, in limited cases, publicly available information used to meet our regulatory compliance obligations.
• Payment processors: Transaction confirmation data returned by bKash, Nagad, Rocket, Upay, and banking partners following a deposit or withdrawal instruction.

4. Purpose and Legal Basis for Processing

The table below sets out the purposes for which acs67 processes your Personal Data and the legal basis relied upon for each processing activity.

5. Data Sharing and Disclosure

acs67 does not sell, rent, or commercially trade your Personal Data to any third party. We share your data only in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party service providers who process data on our behalf under strict contractual confidentiality and data protection obligations. These include KYC and identity verification providers, payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners), cloud hosting and infrastructure providers, fraud detection and cybersecurity vendors, and customer support platform operators. Each provider receives only the minimum data required to perform their contracted service.

5.2 Game Providers

The casino games available on acs67 are supplied by certified third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical session data (such as a pseudonymous player session token) necessary to load and operate their games within the acs67 platform. They do not receive your name, payment details, or contact information.

5.3 Legal and Regulatory Disclosure

acs67 may disclose Personal Data to law enforcement authorities, regulatory bodies, or other governmental agencies where we are required to do so by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity. Such disclosures are made without prior notice to the Player where legally required.

5.4 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of the assets of acs67, your Personal Data may be transferred to the acquiring or successor entity. You will be notified of any such transfer and provided with information about your rights in that context before the transfer takes effect.

6. Cookies and Tracking Technologies

The acs67 platform uses cookies and similar tracking technologies (including local storage objects and session identifiers) to operate the platform, personalise your experience, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential to the operation of the platform. These enable core functionality such as session authentication, security, and navigation. They cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences such as display language, preferred game categories, and account settings between sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the platform. This data is used solely to improve platform performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and automated bot activity.

acs67 does not use third-party advertising or behavioural targeting cookies. You may configure your browser to refuse non-essential cookies; however, doing so may affect certain platform features. Continued use of the acs67 platform following the display of our cookie notice constitutes your acceptance of our use of strictly necessary cookies.

7. Data Retention

acs67 retains Personal Data for the periods set out below, after which data is securely deleted or anonymised:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to satisfy AML and financial record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in compliance with applicable financial crime prevention regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support records: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter as a compliance record.
• Technical and usage logs: Retained for up to twelve (12) months for security and analytics purposes, then deleted or aggregated into anonymised statistical data.

8. Data Security

acs67 implements a layered security architecture designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the acs67 servers
• AES-256 encryption for sensitive data stored at rest, including passwords (stored as salted hashes), payment method identifiers, and identity document copies
• Role-based access controls ensuring that only authorised acs67 personnel can access Personal Data, and only to the extent necessary for their role
• Two-factor authentication (2FA) available for all player accounts and mandatory for acs67 staff accessing production systems
• Regular third-party penetration testing and vulnerability assessments of the platform infrastructure
• Intrusion detection and automated alerting systems monitoring for unusual access patterns and potential data breaches

In the event of a data security incident that poses a material risk to your rights or interests, acs67 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.

9. Children and Minors

The acs67 platform is strictly intended for adults aged 21 years and above. acs67 does not knowingly collect or process Personal Data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all accounts. If acs67 becomes aware that Personal Data has been collected from an individual under the age of 21 without parental consent and in breach of our eligibility requirements, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has created an account on the acs67 platform, please contact us immediately at [email protected].

10. Marketing Communications

acs67 may send you promotional communications including bonus offers, seasonal promotions (such as Eid specials, Pohela Boishakh offers, or BPL cricket promotions), and platform updates via email or SMS. We will only send marketing communications where you have explicitly opted in to receive them during registration or at a later date via Account Settings.

You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any marketing email, by sending an opt-out SMS reply as instructed in any marketing SMS, or by updating your communication preferences in Account Settings. Withdrawal of marketing consent does not affect your ability to receive transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) which are necessary for account operation and cannot be disabled.

11. Third-Party Links

The acs67 platform may contain references to or information about third-party service providers such as bKash, Nagad, Rocket, game studios, and sporting bodies. These references do not constitute endorsements and do not imply any affiliation. acs67 has no control over and accepts no responsibility for the privacy practices or content of any third-party website or service. This Privacy Policy applies solely to data collected and processed by acs67 in connection with the acs67 platform.

12. Changes to This Privacy Policy

acs67 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Where changes are material, we will notify registered Players by email to the address associated with their account or by displaying a prominent notice on the platform at least fourteen (14) days before the amended Policy takes effect. The date of the most recent revision is always displayed at the top of this page. Continued use of the acs67 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the Personal Data acs67 holds about you, please contact our Data Protection team through the following channels:

• Email: [email protected] (please include "Privacy Request" in the subject line)
• Live Chat: Available 24/7 on the acs67 platform
• Response Time: We aim to respond to all data rights requests within five (5) business days, Bangladesh Standard Time (BST, UTC+6)

All privacy-related requests and complaints are handled confidentially by our support team. We are committed to resolving all data privacy concerns promptly and transparently in accordance with this Policy and applicable data protection principles.