Privacy Policy for aca67

1 Information We Collect

aca67 collects personal information from you in the following circumstances: when you register an account, when you make a deposit or withdrawal, when you use the platform's games and betting markets, and when you contact our customer support team. The categories of personal data we collect are described in detail below.

1.1 Identity and Contact Information

When you register your aca67 account, we collect your full legal name, date of birth, email address, and any additional contact details you provide. This information is required to create and manage your account, verify your identity in accordance with our Know Your Customer (KYC) obligations, and communicate with you about your account activity.

1.2 Financial Information

To process deposits and withdrawals, aca67 collects details of your chosen payment method, including mobile banking account references (such as bKash or Nagad registered phone numbers), bank account details where applicable, and transaction reference numbers. aca67 does not store complete payment credentials; full card numbers and mobile banking PINs are never retained on our servers.

1.3 Technical and Usage Data

When you access the aca67 platform, we automatically collect certain technical data about your device and browsing behaviour, including:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Pages visited on the aca67 platform, time spent on each page, and navigation paths
• Games played, bet amounts, wagering history, and session duration
• Login timestamps and frequency of platform access

This technical data is used for platform security monitoring, fraud prevention, responsible gaming analysis, and aggregate performance reporting. It is not used to build individual advertising profiles.

1.4 Communications Data

If you contact the aca67 customer support team via live chat or email, we retain records of those communications, including the content of your messages and any attachments you submit. This data is used to resolve your query and to maintain a record of our support interactions for quality assurance purposes.

2 How We Use Your Data

aca67 uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with the original reason for which it was collected without first obtaining your consent or establishing a separate lawful basis.

Where aca67 sends you marketing communications — such as promotional offers, bonus notifications, or seasonal campaign updates relating to events like Eid, Pohela Boishakh, or BPL cricket season — we will only do so where you have actively opted in to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected].

3 Legal Basis for Processing

Every processing activity carried out by aca67 rests on one of the following lawful bases. We will always be able to identify and communicate the applicable legal basis for any data processing activity upon request.

3.1 Contract Performance

The majority of personal data processing at aca67 is necessary for the performance of the contract between aca67 and you — that is, the provision of the online casino and sports betting services you have signed up to use. Without processing your identity, financial, and account data, we cannot fulfil our contractual obligations to you.

3.2 Legal Obligation

aca67 is subject to a range of legal obligations that require us to process certain categories of personal data. These include anti-money-laundering (AML) obligations that require us to verify your identity and monitor transaction patterns, responsible gaming obligations that require us to monitor wagering behaviour for signs of problem gambling, and record-keeping requirements that apply to financial transactions.

3.3 Legitimate Interests

In some cases, aca67 processes personal data on the basis of its legitimate interests as a business, where those interests are not overridden by your own rights and interests. Examples include fraud detection, platform security monitoring, and the use of aggregated, anonymised usage data to improve the aca67 platform experience for all players.

3.4 Consent

Where aca67 processes personal data on the basis of your consent — most commonly for direct marketing communications — we will always obtain that consent explicitly before processing commences. You have the right to withdraw your consent at any time, and withdrawal will not affect the lawfulness of any processing carried out prior to that withdrawal.

4 Data Sharing & Third Parties

aca67 does not sell, rent, or trade your personal information to any third party for their independent marketing or commercial purposes. However, in order to operate the aca67 platform effectively and comply with our legal obligations, we do share certain data with carefully selected third-party partners and service providers.

4.1 Payment Service Providers

To process deposits and withdrawals, aca67 shares the minimum necessary financial data with our approved payment partners, including the operators of bKash, Nagad, Rocket, and Upay mobile financial services, Dutch-Bangla Bank, and Visa/Mastercard payment networks. These partners process your payment data only for the purpose of executing the specific transaction you have requested and are bound by strict data protection obligations.

4.2 Game Technology Providers

The aca67 platform is powered by games and technology from leading providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process limited technical and session data as part of delivering their game content. All game providers are contractually required to handle any player data in a manner consistent with this Privacy Policy.

4.3 Identity Verification Partners

To fulfil our KYC obligations, aca67 may share identity document data with third-party verification service providers. These partners are engaged solely for the purpose of verifying that your identity documents are authentic and that you meet the eligibility requirements to hold an aca67 account. Verification data is not used for any other purpose.

4.4 Legal and Regulatory Disclosure

aca67 may be required to disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally compelled to do so. We will always seek to limit the scope of any such disclosure to what is strictly required by law and will notify you of any such disclosure where we are legally permitted to do so.

5 Cookies & Tracking Technologies

aca67 uses cookies and similar tracking technologies to operate the platform effectively, maintain your logged-in session, remember your preferences, and analyse aggregated platform usage. A cookie is a small text file that is stored on your device when you visit a website. Cookies do not contain executable code and cannot be used to access other data on your device.

5.1 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the aca67 platform to function. They maintain your login session, remember your account preferences, and enable core security features. The platform cannot operate without these cookies and they cannot be disabled.
• Analytics Cookies: aca67 uses analytics cookies to collect aggregated, anonymised data about how players use the platform — which pages are visited most frequently, where players navigate from, and how long sessions last. This data is used to improve the platform experience and is not linked to any individual player identity.
• Preference Cookies: These cookies remember your platform settings and preferences (such as display language and notification preferences) so that you do not need to re-enter them on each visit.

5.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is set. Please note that disabling essential cookies will prevent you from logging in to your aca67 account and using the platform's core features. Instructions for managing cookies in the most commonly used browsers are available through each browser's help documentation.

6 Data Retention

aca67 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by our legal obligations, whichever is the longer period. The following retention periods apply to the main categories of personal data held by aca67:

• Account and identity data: Retained for the duration of your active account relationship with aca67, plus a minimum of five years following account closure to satisfy anti-money-laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping obligations.
• Customer support communications: Retained for up to three years from the date of the most recent interaction, to allow for resolution of any follow-up queries or disputes.
• Technical and usage data: Aggregated analytics data is retained indefinitely in anonymised form. Raw technical logs containing identifiable data (such as IP addresses) are retained for up to 12 months and then deleted or anonymised.
• Marketing consent records: Retained for the duration of your consent, plus up to three years following withdrawal of consent, to demonstrate compliance with marketing consent requirements.

When personal data reaches the end of its applicable retention period and there is no other lawful basis for continuing to hold it, aca67 securely destroys or anonymises that data in accordance with our internal data disposal procedures.

7 Your Privacy Rights

As an aca67 player, you hold a number of rights in respect of your personal data. aca67 is committed to facilitating the exercise of these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Privacy Request".

7.1 Right of Access

You have the right to request a copy of all personal data that aca67 holds about you. We will provide this information in a clear, structured format within a reasonable timeframe following receipt of a valid request. We may ask you to verify your identity before releasing any personal data to ensure that we do not disclose your information to an unauthorised third party.

7.2 Right to Rectification

If any of the personal data aca67 holds about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account details directly through your aca67 account settings. For changes to core identity data (such as legal name or date of birth), we may require supporting documentation before making the correction.

7.3 Right to Erasure

You may request that aca67 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent and there is no other lawful basis for processing, or where the data has been unlawfully processed. Please note that aca67 may be unable to fulfil erasure requests in respect of data that we are legally required to retain, such as transaction records subject to anti-money-laundering obligations.

7.4 Right to Restrict Processing

You have the right to request that aca67 restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and we are considering that objection. During any restriction period, we will continue to store your data but will not actively process it beyond what is necessary to maintain the restriction.

7.5 Right to Object to Marketing

You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. Where you exercise this right, aca67 will cease processing your data for marketing purposes immediately. To opt out of marketing communications, contact [email protected] or follow the unsubscribe instructions in any marketing email you receive.

8 Data Security Measures

aca67 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. The following security controls are applied across the aca67 platform and its supporting infrastructure:

• Encryption in transit: All data transmitted between your device and the aca67 platform is protected by 256-bit SSL/TLS encryption. The aca67 platform operates exclusively over HTTPS.
• Encryption at rest: Sensitive personal data stored on aca67 servers — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data held by aca67 is restricted on a strict need-to-know basis. Only aca67 staff members with a legitimate operational need to access specific categories of data are granted that access, and all access is logged and auditable.
• Secure payment processing: Payment data is handled by PCI DSS-compliant payment processors. aca67 does not store full payment card numbers or mobile banking PINs on its own infrastructure.
• Intrusion detection: aca67 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Security review: aca67 conducts regular security assessments of its platform and data handling practices to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event that aca67 becomes aware of a personal data breach that is likely to result in a risk to your rights and interests, we will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

If you have questions or concerns about the security of your aca67 account or the handling of your personal data, please contact our support team at [email protected] at any time. Our support team is available 24/7 and will treat all privacy and security enquiries as a priority.