aac67 Privacy Policy

aac67 operates an online casino and sports betting platform accessible at https://aac67.io, serving players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by aac67.

This Policy should be read alongside our Terms & Conditions, which govern your use of the aac67 platform. By creating an account and using aac67, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.

aac67 is committed to maintaining the highest standards of data privacy. We apply the principle of data minimisation — collecting only what is genuinely necessary — and the principle of purpose limitation — using your data only for the reasons stated in this Policy. We do not profile players for marketing purposes beyond what is described here, and we do not sell personal data to any third party under any circumstances.

aac67 collects personal data through several channels: directly from you when you register an account, make a deposit, contact our support team, or use platform features; automatically through your use of the platform via cookies and similar tracking technologies; and from third-party identity and payment verification partners as part of our KYC process.

The categories of personal data we may collect include:

aac67 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or updating this Privacy Policy with adequate notice.

• Account creation and management: To register your account, verify your identity, maintain your account profile, and communicate essential account information including security alerts and policy updates.
• Service delivery: To allow you to access the game lobby, place bets, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card payments, and receive winnings.
• Age and identity verification (KYC): To comply with our obligation to ensure that all players are aged 21 or above and are who they claim to be. KYC verification is a mandatory step before any withdrawal is processed.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, multi-accounting, and other prohibited activities described in our Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce self-exclusion requests, and to apply deposit limits or cooling-off periods that you have activated.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance via our 24/7 support team.
• Legal compliance: To fulfil our obligations under applicable law, including responding to lawful requests from regulatory or law enforcement authorities.
• Platform improvement: To analyse aggregated usage data (anonymised where possible) to improve game performance, navigation, and overall player experience on the aac67 platform.
• Promotional communications: To send you relevant offers, bonus notifications, and platform updates via email — but only where you have opted in to receive such communications. You may opt out at any time.

aac67 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary for the performance of the contract between you and aac67 — specifically, to operate your account, process transactions, and deliver the gaming service you have signed up for.
• Legal obligation: Processing is necessary for aac67 to comply with applicable legal requirements, including age verification obligations and anti-money-laundering (AML) duties.
• Legitimate interests: Processing is necessary for aac67's legitimate interests in preventing fraud, maintaining platform security, and improving the service — provided those interests are not overridden by your data protection rights.
• Consent: For processing activities that go beyond operational necessity — such as sending promotional emails — aac67 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

aac67 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to maintain appropriate data security standards.

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. These partners operate under their own privacy and security frameworks.
• KYC and identity verification partners: Specialist third-party providers assist aac67 in verifying player identities and ages. These providers receive only the minimum data required to complete verification and are prohibited from using your data for any other purpose.
• Game studio providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session tokens and anonymised gameplay data to deliver their games through the aac67 platform. They do not receive your name, contact details, or financial data.
• IT and hosting infrastructure partners: Cloud hosting and server management providers process data on our behalf solely to maintain platform infrastructure. All such providers are bound by strict data processing agreements.
• Legal and regulatory authorities: aac67 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law or in response to a valid legal process.

aac67 uses cookies and similar tracking technologies — including local storage objects and session identifiers — to operate the platform, maintain your logged-in session, remember your preferences, and analyse how the platform is used in aggregate. Cookies are small text files stored on your device when you visit the aac67 website.

You may configure your browser to refuse all cookies or to alert you when cookies are being set. Please note that disabling essential cookies will prevent you from logging in to your aac67 account and accessing the gaming platform. Disabling functional or analytics cookies will not affect your ability to use the core platform but may reduce the quality of your experience.

aac67 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account's active status, plus a minimum period following account closure as required for legal and audit purposes.
• Transaction and financial records: Retained for a minimum of five years following the transaction date, in accordance with standard financial record-keeping requirements.
• KYC and identity documents: Retained for the duration of your account plus five years following account closure to support any post-closure compliance or dispute resolution requirements.
• Support correspondence: Retained for two years from the date of the last interaction, unless the correspondence relates to an ongoing dispute or legal matter.
• Self-exclusion records: Retained for the full duration of the self-exclusion period plus five years, to prevent re-registration during or shortly after an exclusion period.
• Technical and usage logs: Retained for up to 12 months in identifiable form, after which they are anonymised or deleted.

When personal data is no longer required and the relevant retention period has expired, aac67 securely deletes or anonymises that data so it can no longer be attributed to an identifiable individual.

aac67 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and the aac67 servers is encrypted using industry-standard TLS protocols, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage: Sensitive data fields — including identity document scans and financial references — are encrypted at rest using strong encryption standards.
• Access controls: Access to personal data within aac67's internal systems is restricted on a strict need-to-know basis. Staff members only access the data necessary to perform their specific role.
• Two-factor authentication: aac67 offers two-factor authentication (2FA) on all player accounts as an additional layer of protection against unauthorised login. Players are strongly encouraged to enable 2FA in their account security settings.
• Regular security audits: aac67's platform and infrastructure undergo periodic security reviews to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that affects your personal data, aac67 will notify affected players via their registered email address within a reasonable timeframe, providing details of the nature of the incident and the steps being taken to address it.

As a data subject, you hold a number of rights in relation to your personal data held by aac67. aac67 is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our support team at [email protected] with the subject line "Data Rights Request" and include your registered username to allow us to identify your account.

• Right of access: You have the right to request a copy of the personal data aac67 holds about you, along with information about how it is being used. We will respond to access requests within 30 days.
• Right to rectification: If any personal data aac67 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly within your account settings.
• Right to erasure: You may request that aac67 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that certain data must be retained for legal compliance purposes even following an erasure request.
• Right to restrict processing: You may request that aac67 temporarily suspend the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of aac67's legitimate interests, including any profiling for the purpose of direct marketing. Where you object to marketing communications, aac67 will cease sending them immediately.
• Right to withdraw consent: Where aac67 relies on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

aac67 is strictly an adults-only platform. Access to the platform is limited to individuals aged 21 and above. aac67 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the registration and KYC process.

If aac67 becomes aware that personal data has been collected from a person under the age of 21 — whether through circumvention of our age verification procedures or otherwise — we will immediately suspend the relevant account, delete the data collected, and void any transactions associated with the account. If you believe a minor has registered on our platform, please contact us immediately at [email protected].

aac67 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered players via email at their registered address and/or by displaying a prominent notice on the platform. The "Last updated" date at the top of this Policy will be revised accordingly.

Your continued use of the aac67 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should stop using the platform and may request account closure by contacting our support team. We encourage you to review this Policy periodically to stay informed of how your data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way aac67 handles your personal data, please contact our dedicated support team. We are committed to responding to all privacy-related enquiries in a thorough and timely manner.