ac365 Privacy Policy

Introduction and Scope

This Privacy Policy applies to all personal data collected, stored, and processed by ac365 (hereinafter "we", "us", "our", or "the Platform") in connection with the operation of the ac365 online betting and casino platform, including all associated games, payment functions, customer support channels, and marketing communications. It applies to all registered players, prospective players, and visitors to the ac365 website.

By registering an account with ac365, placing a bet, making a deposit or withdrawal, or otherwise interacting with the ac365 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should not use the ac365 platform.

This Privacy Policy should be read alongside the ac365 Terms & Conditions, which govern your overall use of the platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions with respect to data matters, this Privacy Policy shall take precedence.

This document is written in English and is the authoritative version of the ac365 Privacy Policy. ac365 is committed to maintaining clear, plain-English privacy documentation so that players in Bangladesh can understand exactly how their information is handled.

Data Controller Information

ac365 acts as the data controller in respect of all personal data collected through the ac365 platform. As data controller, ac365 determines the purposes and means by which your personal data is processed. For all data protection enquiries, including requests to exercise your rights as described in Section 10 of this Policy, you may contact ac365 at the following address:

ac365 is committed to responding to all data subject requests within 30 calendar days of receipt. Where a request is particularly complex or where ac365 receives a large volume of requests simultaneously, this period may be extended by a further 60 days, in which case ac365 will notify you of the extension and the reasons for it within the initial 30-day period.

Personal Data We Collect

The categories of personal data that ac365 collects and processes vary depending on the nature of your interaction with the platform. The following table provides an overview of the main categories of data we collect and their purpose:

ac365 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health data, except where the collection of health-related information is strictly necessary for the administration of responsible gaming interventions and is done so with your explicit consent.

How We Collect Your Data

ac365 collects personal data through the following methods and channels:

• Direct collection: Information you provide when you register an account, complete identity verification, make a deposit or withdrawal request, contact customer support, or respond to a survey or promotion.
• Automated technical collection: Data gathered automatically when you visit or interact with the ac365 platform, including through cookies, session logs, and server-side analytics tools. See Section 9 for full details on cookies.
• Payment provider data: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank in connection with deposit and withdrawal processing. This data is limited to what is necessary to confirm and reconcile transactions.
• Identity verification providers: Where ac365 uses a third-party KYC (Know Your Customer) service to verify your identity or age, that provider may share verification results and associated data with ac365 in accordance with their own privacy policies.
• Fraud prevention services: Data shared by fraud detection partners used to screen transactions and account activity for suspicious patterns. This data sharing is conducted under appropriate data processing agreements.
• Publicly available sources: In limited circumstances, ac365 may verify or supplement account data using publicly available information such as public records, where this is necessary for compliance or fraud prevention purposes.

Purposes and Legal Bases for Processing

ac365 processes your personal data only where it has a valid legal basis for doing so. The following table sets out the primary purposes for which ac365 processes personal data, together with the legal basis for each:

• Contract performance: Processing necessary to register your account, process deposits and withdrawals, deliver games and betting markets, and provide customer support. This processing is required to fulfil the contractual relationship between ac365 and you as a registered player.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, age verification requirements, Know Your Customer (KYC) obligations, and any other legal or regulatory requirements imposed on ac365.
• Legitimate interests: Processing carried out to detect and prevent fraud, protect the security of the platform, monitor for responsible gaming indicators, conduct analytics to improve platform performance, and manage the day-to-day operation of the business. In each case, ac365 has assessed that its legitimate interests are not overridden by your privacy interests or fundamental rights.
• Consent: Processing carried out for marketing communications (including promotional emails and SMS messages about ac365 offers, bonuses, and seasonal promotions) is conducted only on the basis of your explicit opt-in consent. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email.

ac365 does not engage in automated decision-making that produces legal or similarly significant effects on players, except where the use of automated tools to flag potentially fraudulent activity is required for compliance and security purposes. Where automated screening flags an account, the outcome is subject to human review before any action is taken.

Disclosure of Your Data to Third Parties

ac365 does not sell your personal data to any third party under any circumstances. ac365 may share your personal data with the following categories of recipients where it is necessary to do so:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the minimum data necessary to process your financial transactions. These providers are bound by their own regulatory obligations and data protection standards.
• Game providers: Third-party game studios and platforms such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive session data necessary to deliver and audit the games you play. They do not receive your full identity or financial data.
• Identity and KYC verification providers: Where third-party verification services are used to confirm your identity and age, your identity documents and personal details will be shared with that provider under a data processing agreement.
• Fraud prevention and security services: ac365 may share technical and transactional data with specialist fraud detection providers to identify and investigate suspicious activity patterns.
• Legal and regulatory authorities: ac365 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, by court order, or where ac365 has a good-faith belief that disclosure is necessary to prevent criminal activity or protect the rights and safety of ac365, its players, or third parties.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by ac365 may access personal data in the course of providing their professional services, subject to strict confidentiality obligations.

All third parties with whom ac365 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond those specified by ac365.

International Data Transfers

ac365 primarily stores and processes player data on secure servers. In certain circumstances, the delivery of platform services — including game provision, fraud screening, and KYC verification — may involve the transfer of personal data to service providers located outside Bangladesh. Where such transfers occur, ac365 ensures that appropriate safeguards are in place to protect your personal data, including the use of contractual data protection clauses and the assessment of the data protection standards applicable in the destination country.

If you have questions about the specific safeguards applied to any international transfer of your personal data, please contact ac365 at [email protected].

Data Retention

ac365 retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law and compliance obligations. The following general retention principles apply:

• Active account data: Personal data associated with an active player account is retained for the duration of the account relationship and for a period of up to 5 years following account closure, to satisfy legal and regulatory record-keeping obligations including AML and KYC requirements.
• Transaction records: Financial transaction data is retained for a minimum of 5 years following the date of the transaction in accordance with standard compliance practice.
• Support correspondence: Customer support records are retained for up to 3 years from the date of the last interaction, unless longer retention is required in connection with an ongoing dispute or legal matter.
• Marketing data: Where you have consented to receive marketing communications, your contact details and marketing preferences will be retained until you withdraw your consent or for a maximum of 3 years from the date of your last interaction with ac365, whichever is sooner.
• Technical and log data: Server logs and session data are retained for up to 12 months for security and fraud prevention purposes, after which they are automatically deleted or anonymised.

When personal data is no longer required, ac365 applies secure deletion procedures to ensure that it cannot be recovered or reconstructed. Where data is anonymised rather than deleted, the anonymised data no longer constitutes personal data and may be retained for longer periods for analytical purposes.

Cookies and Tracking Technologies

ac365 uses cookies and similar tracking technologies on its platform to provide core functionality, enhance the player experience, and gather analytical data about how the platform is used. The following categories of cookies are used by ac365:

• Essential cookies: These cookies are strictly necessary for the operation of the ac365 platform. They enable core functions such as maintaining your logged-in session, remembering your language preferences, and ensuring that security measures function correctly. Essential cookies cannot be disabled without significantly impairing your ability to use the platform.
• Performance and analytics cookies: These cookies collect aggregated, anonymised data about how players navigate and interact with the ac365 platform — for example, which pages are visited most frequently and how long sessions last. This data is used solely to improve platform performance and does not identify individual players.
• Functional cookies: These cookies allow ac365 to remember preferences you have set — such as display settings, game history, and notification preferences — so that you receive a more personalised experience on return visits.
• Security cookies: These cookies are used to detect and prevent fraudulent activity, protect against automated attacks, and ensure the integrity of player sessions.

ac365 does not use third-party advertising or tracking cookies that share your behaviour data with external advertising networks. You may manage your cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use certain features of the ac365 platform.

Your Data Rights

As an ac365 player, you hold the following rights with respect to the personal data that ac365 holds about you. ac365 is committed to facilitating the exercise of these rights without undue delay and at no cost to you:

To exercise any of these rights, please contact ac365 at [email protected]. Please include your full name and the email address associated with your ac365 account so that we can identify you and process your request efficiently. ac365 will respond within 30 calendar days of receipt of a valid request.

Children and Minors

The ac365 platform is strictly intended for use by adults aged 21 years and over. ac365 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Registration is only permitted where the applicant confirms that they meet the minimum age requirement, and ac365 applies age verification procedures to all accounts.

If ac365 becomes aware that personal data has been collected from an individual under the age of 21, it will immediately suspend the associated account, delete the personal data in question, and return any deposited funds to the payment source used. If you believe that ac365 may have inadvertently collected data belonging to a minor, please contact [email protected] immediately so that appropriate action can be taken without delay.

Changes to This Policy

ac365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, data protection best practice, or the services offered by the platform. Where changes are material — for example, where ac365 begins processing a new category of personal data or shares data with a new category of third party — ac365 will notify registered players by email and via a prominent notice on the ac365 platform at least 14 days before the changes take effect.

For minor, non-material updates (such as corrections to typographical errors or clarifications that do not change the substance of the Policy), ac365 may update this document without advance notice. The effective date shown at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the ac365 platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change to this Privacy Policy, you should cease using the ac365 platform and may request account closure by contacting [email protected].