Privacy Policy — ac367

ac367 ("ac367", "we", "us", "our") operates the online casino and sports betting platform accessible at https://ac367.app. ac367 is the data controller responsible for the personal information collected through this platform. As data controller, ac367 determines the purposes for which personal data is processed and the means by which that processing takes place.

This Privacy Policy applies to all personal data collected from individuals who visit the ac367 website, register an account, make a deposit, place a bet, or otherwise interact with any feature of the ac367 platform. It applies to residents of Bangladesh and all other jurisdictions from which the platform is lawfully accessible.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which form part of the binding agreement between you and ac367. In the event of any conflict between this Privacy Policy and any other document, this Privacy Policy prevails with respect to matters of data processing and privacy.

ac367 collects personal data in several categories depending on the nature of your interaction with the platform. The table below summarises the categories of data we collect and the primary context in which each category is gathered.

ac367 does not intentionally collect or process special categories of sensitive personal data (sometimes referred to as "sensitive personal data") such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for identity verification purposes in compliance with anti-money laundering requirements.

ac367 collects personal data through the following channels and mechanisms:

• Direct Collection: Data you provide directly when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, contacting our support team, or updating your account settings.
• Automated Technical Collection: Data collected automatically when you visit the ac367 website, including IP address, device identifiers, browser information, and session data through the use of cookies, web server logs, and similar technologies. See Section 7 for full details on cookies.
• Payment Processors: When you make a deposit or withdrawal, ac367 receives transaction confirmation and limited account reference data from payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. ac367 does not receive or store full card numbers or mobile banking PINs.
• Identity Verification Partners: Where ac367 uses a third-party KYC or identity verification service to assist with document verification, that partner may provide ac367 with a verification result along with limited data points used to confirm your identity.
• Game Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share aggregated or session-level data with ac367 for the purpose of game performance monitoring and player account management. No additional personal data is obtained through this channel beyond what is already held by ac367.

ac367 uses the personal data we collect only for the specific purposes described in this section. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent or establishing a fresh legal basis.

• Account Creation and Management: To register your account, verify your identity, maintain your account profile, and enable you to log in securely to the ac367 platform.
• Payment Processing: To process deposits, settle withdrawals, and maintain an accurate record of your account transaction history. All payment processing activities are conducted in compliance with applicable financial regulations.
• KYC and Age Verification: To verify that you are at least 18 years of age and to confirm your identity in compliance with anti-money laundering obligations. This is a legal requirement that ac367 cannot waive regardless of account status.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
• Customer Support: To respond to your enquiries, process complaints, provide technical assistance, and maintain a record of support interactions for quality assurance purposes.
• Platform Improvement: To analyse usage patterns, identify technical issues, improve game performance, and develop new features that enhance the ac367 player experience.
• Responsible Gaming: To monitor gambling behaviour for indicators of problem gambling, apply self-exclusion restrictions, enforce deposit limits, and comply with our responsible gaming obligations. See our Responsible Gaming page for more details.
• Promotional Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time by updating your account marketing preferences or by contacting our support team.
• Legal Compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our contractual rights under the Terms and Conditions.

ac367 processes your personal data on the following legal bases, depending on the specific purpose of each processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and ac367 — including account registration, payment processing, and game provision — is carried out on the basis of contractual necessity. Without this processing, ac367 would be unable to provide you with access to the platform.
• Legal Obligation: Processing required to comply with legal obligations, including identity verification, age verification, anti-money laundering checks, and responses to regulatory inquiries, is carried out on the basis of legal obligation. ac367 cannot waive these obligations at your request.
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics is carried out on the basis of ac367's legitimate interests in operating a safe, fair, and commercially viable gaming platform. ac367 has assessed that these legitimate interests are not overridden by your privacy interests or fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ac367 does not sell, rent, or share your personal data with unaffiliated third parties for their own marketing purposes. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Service Providers: We share necessary transaction data with payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard) to facilitate deposits and withdrawals. These providers are bound by their own privacy policies and by contractual obligations with ac367 to process data only for payment purposes.
• Identity Verification Partners: We may share identity documents and personal details with regulated third-party KYC service providers for the purpose of verifying your identity and age. These partners are bound by strict confidentiality and data processing agreements.
• Game Technology Providers: Game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive technical session data necessary to deliver their games. They do not receive your full identity or financial data beyond what is required to initialise a gaming session.
• IT and Platform Service Providers: ac367 uses trusted third-party providers for hosting, cloud infrastructure, cybersecurity monitoring, and platform analytics. These providers act as data processors under ac367's instructions and are not permitted to use your data for their own purposes.
• Regulatory and Law Enforcement Authorities: ac367 may disclose personal data where required to do so by law, court order, or at the lawful request of a competent regulatory or law enforcement authority. We will notify you of any such disclosure to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of ac367's assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified in advance of any such transfer and of any change to this Privacy Policy that results.

ac367 uses cookies and similar tracking technologies (such as web beacons and local storage objects) on the ac367 platform. Cookies are small text files stored on your device that help us provide a better, more personalised experience. The types of cookies we use are described below.

ac367 does not use third-party advertising cookies or allow external ad networks to place tracking cookies on the ac367 platform. You can manage or delete cookies at any time through your browser's settings menu. Please note that disabling functional or analytics cookies may affect the performance and personalisation of your platform experience, but will not prevent you from accessing core features.

ac367 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes and enforce our agreements. The following general retention periods apply:

• Active Account Data: Personal data associated with an active account is retained for the duration of the account's active lifetime and is accessible to you at any time through your account dashboard.
• Closed Account Data: Following account closure, ac367 retains your identity, financial, and transaction data for a minimum of five (5) years to comply with anti-money laundering record-keeping obligations and to handle any post-closure disputes or regulatory inquiries.
• KYC Documents: Identity documents submitted for verification purposes are retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Support Correspondence: Customer support communications are retained for two (2) years from the date of the most recent interaction in a given support thread.
• Technical and Usage Data: Anonymised analytics data and technical logs are retained for up to twelve (12) months before being deleted or further anonymised.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your account and for three (3) years after account closure, to demonstrate compliance with consent requirements.

When your data is no longer required for the applicable retention period, it is securely deleted or anonymised in a manner that prevents re-identification.

ac367 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and ac367 servers is encrypted using industry-standard TLS encryption protocols. Our platform enforces HTTPS on all pages and endpoints.
• Encryption at Rest: Sensitive data stored on ac367 servers, including identity documents and financial records, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within ac367's systems is restricted on a strict need-to-know basis. Staff members who require access to personal data for their role are subject to background checks, confidentiality agreements, and role-based access controls.
• Two-Factor Authentication: ac367 supports and strongly encourages the use of two-factor authentication (2FA) for all player accounts, providing an additional layer of security beyond username and password.
• Security Monitoring: ac367 operates continuous security monitoring of its platform infrastructure to detect and respond to suspicious activity, intrusion attempts, and data anomalies in real time.
• Vendor Security Assessments: Third-party service providers who process data on behalf of ac367 are assessed for security compliance before engagement and are contractually required to maintain security standards consistent with this policy.

As a player on the ac367 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your request. We will respond within a reasonable timeframe, typically within 30 days.

• Right of Access: You have the right to request a copy of all personal data ac367 holds about you, along with information about how it is processed, who it has been shared with, and how long it will be retained.
• Right to Rectification: You have the right to request correction of any personal data that ac367 holds about you that is inaccurate, incomplete, or outdated. You may also update certain account details directly through your account dashboard.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected and ac367 has no overriding legal obligation to retain it. Note that legal retention obligations (see Section 8) may prevent full erasure in some cases.
• Right to Restriction of Processing: You have the right to request that ac367 restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested or while a complaint is under review.
• Right to Object: You have the right to object to processing based on ac367's legitimate interests, and to object to receiving direct marketing communications at any time. Objections to marketing will be actioned immediately upon receipt.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

ac367 will not charge a fee for handling your privacy rights requests in normal circumstances. However, where requests are manifestly unfounded, repetitive, or excessive, ac367 reserves the right to charge a reasonable administrative fee or refuse to respond, having first notified you of its decision and the reasons for it.

The ac367 platform is strictly intended for adults aged 18 years and above. ac367 does not knowingly collect personal data from individuals under the age of 18. Our registration process includes mandatory age declaration and is supported by identity verification procedures designed to detect and prevent underage account creation.

If ac367 discovers or is notified that personal data has been collected from an individual under the age of 18, we will immediately close the associated account, delete the personal data to the extent permitted by law, and handle any deposited funds in accordance with our responsible gaming underage gambling procedure.

If you are a parent or guardian and you believe your child has created an ac367 account or submitted personal data to our platform, please contact us immediately at [email protected]. We take underage gambling and child privacy extremely seriously and will act without delay upon receipt of a credible notification.

ac367 primarily processes and stores personal data on servers located within secure data centre facilities. In some cases, your personal data may be processed by service providers operating outside Bangladesh — for example, cloud infrastructure providers, game technology studios, or identity verification services that operate internationally.

Where personal data is transferred outside Bangladesh to third-party service providers, ac367 ensures that such transfers are governed by appropriate safeguards, including contractual data processing agreements that require the recipient to provide a level of data protection consistent with the standards set out in this Privacy Policy.

ac367 does not transfer your personal data to any jurisdiction for the purpose of circumventing your privacy rights or accessing data protection exemptions available in other territories. All international transfers serve the specific operational purposes described in this Privacy Policy and are conducted on a minimum-necessary basis.

ac367 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, applicable law, or regulatory guidance. The "Last Updated" date displayed at the top of this document will be revised whenever a substantive change is made.

Where a material change is made to this Privacy Policy — meaning a change that significantly affects how your personal data is used or your rights in relation to it — ac367 will provide advance notice of the change by publishing a prominent notice on the platform and, where appropriate, by sending an email notification to your registered email address.

Your continued use of the ac367 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept the updated Privacy Policy, you must discontinue use of the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to ac367's data processing practices, please contact our dedicated privacy support team. All privacy-related enquiries are handled in English and will receive a response within 30 days of receipt.

For matters relating to responsible gaming, self-exclusion, or problem gambling support, please visit our Responsible Gaming page. For general account questions, visit our FAQ page or contact our support team directly.