Privacy Policy — How ac65 Protects Your Personal Data

ac65 is Bangladesh's premier online betting and casino platform, providing cricket betting, live casino games, slots, card games, and other interactive entertainment services to adult players aged 21 and above. As part of delivering these services, ac65 necessarily processes certain categories of personal data belonging to registered players and visitors to the Platform.

ac65 is committed to handling personal data with integrity, transparency, and rigorous security standards. We process personal data only for the purposes described in this Policy and only to the extent necessary to fulfil those purposes. We do not use personal data for undisclosed secondary purposes.

This Policy applies to all personal data collected via the ac65 website, mobile-optimised interfaces, customer support channels, and any other point of interaction between the player and the Platform. It does not apply to third-party websites or services that may be linked to or accessible from the Platform — those parties maintain their own independent privacy practices for which ac65 accepts no responsibility.

ac65 collects personal data across several categories depending on the nature of your interaction with the Platform. The following table provides a structured overview:

ac65 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification (e.g., a photograph on a government-issued ID). Where such data is incidentally included in a document submitted for KYC, it will be used solely to verify identity and will not be processed for any other purpose.

ac65 collects personal data through the following primary mechanisms:

• Direct Submissions: Data you voluntarily provide when registering an account, completing your profile, submitting KYC documents, making a deposit or withdrawal request, or contacting our support team.
• Automated Technical Collection: Data collected automatically when you visit or interact with the Platform, including IP address, device identifiers, browser characteristics, and session activity. This data is collected using cookies, web beacons, and server log files. See Section 7 for details on our cookie practices.
• Payment Processors: When you initiate a transaction via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, our integrated payment processors may share transaction confirmation data and wallet identifiers with us to facilitate account crediting and withdrawal processing.
• Third-Party Verification Services: In connection with KYC and fraud prevention, ac65 may engage third-party identity verification and anti-money-laundering (AML) service providers. These services may return verification scores, risk flags, or document authenticity assessments that are associated with your Account record.
• Customer Support Interactions: When you contact us via live chat or email at [email protected], the content of that communication and any attachments you provide may be stored as part of your Account record for quality assurance and compliance purposes.

ac65 processes personal data only for the following defined and lawful purposes:

• Account Management: To create, maintain, verify, and administer your Account, including processing login credentials, enforcing the one-account-per-player rule, and managing account security settings.
• Identity Verification (KYC): To verify that players meet the minimum age requirement of 21 years and to confirm the accuracy of account registration information, as required for responsible gaming compliance and fraud prevention.
• Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to execute withdrawal requests to the player's verified payment account. Financial data is shared with payment processors only to the extent necessary to complete these transactions.
• Gaming Operations: To deliver the betting and casino services you have requested, including maintaining game session integrity, settling wagers, applying bonuses, and enforcing game-specific rules.
• Responsible Gaming: To administer deposit limits, session time reminders, self-exclusion requests, and other player protection tools. Gaming behaviour data may be analysed to identify patterns associated with problem gambling in order to fulfil our duty of care obligations.
• Legal and Regulatory Compliance: To meet obligations under applicable anti-money-laundering, counter-terrorism financing, and consumer protection frameworks. This includes retaining transaction records for the legally required retention periods and cooperating with lawful requests from competent authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, collusion, prohibited conduct, and unauthorised access. Technical and gaming data may be analysed by automated systems and reviewed by our security team for this purpose.
• Customer Support: To respond to your support enquiries, resolve complaints, and improve the quality of our support services.
• Platform Improvement: Usage and technical data is analysed in aggregate and anonymised form to understand how players interact with the Platform and to improve features, performance, and user experience.
• Marketing Communications: Where you have provided consent, to send you promotional offers, bonus notifications, and updates relevant to your account. You may withdraw consent for marketing communications at any time by contacting [email protected].

ac65 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing an alternative lawful basis.

ac65 relies on the following legal bases for processing personal data:

• Contractual Necessity: Processing required to fulfil the Terms and Conditions you accepted upon registration, including account management, payment processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, age verification requirements, and lawful instructions from competent regulatory authorities.
• Legitimate Interests: Processing necessary for the legitimate interests of ac65, including fraud prevention, platform security, responsible gaming enforcement, and aggregate analytics — provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including opt-in marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

ac65 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial or marketing purposes. We share data only in the following defined circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and card network processors (Visa/Mastercard) receive the minimum data required to process your transactions. These providers operate their own privacy frameworks and are bound by contractual data protection obligations when processing data on our behalf.
• Identity Verification and AML Providers: Third-party KYC and compliance service providers receive identity documents and associated data solely for the purpose of completing verification checks. They are contractually prohibited from retaining or reusing this data for any other purpose.
• Fraud Prevention and Security Partners: Specialist security and fraud detection services may receive technical and behavioural data for the purpose of identifying and preventing prohibited conduct on the Platform.
• Legal and Regulatory Authorities: ac65 will disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent governmental or regulatory authorities when required to do so by applicable law, court order, or lawful regulatory direction. In such cases, ac65 will disclose only the minimum data required to satisfy the lawful request.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of ac65's business, personal data held by ac65 may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and the privacy implications in advance.

All third parties with whom ac65 shares personal data are required to implement appropriate technical and organisational security measures and to process data only in accordance with ac65's written instructions.

ac65 uses cookies and similar tracking technologies to deliver and improve the Platform experience. A cookie is a small text file placed on your device when you visit the Platform. Cookies do not contain personally identifiable information on their own, but when combined with other data, they may form part of a player's overall data profile.

The following categories of cookies are used on the ac65 Platform:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and cookies that maintain your login state. These cookies cannot be disabled without affecting the basic operation of the Platform.
• Functional Cookies: Remember your preferences such as language settings, game history display, and preferred payment method to improve your experience across sessions.
• Analytics Cookies: Collect anonymised usage data to help ac65 understand how players navigate the Platform, which features are most used, and where technical issues may be occurring. This data is processed in aggregate form and does not identify individual players.
• Security and Fraud Detection Cookies: Used to detect and prevent fraudulent behaviour, identify suspicious access patterns, and protect the integrity of the Platform and its player community.

You may manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of certain Platform features. Clearing cookies will log you out of your active session.

ac65 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an individual player. Where legal obligations require us to retain data beyond these periods, we will do so and will inform you accordingly upon request.

ac65 implements a layered security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport Layer Security: All data transmitted between your device and the ac65 Platform is encrypted using 256-bit SSL/TLS encryption. Any attempt to access the Platform over an unencrypted connection is automatically redirected to HTTPS.
• Data Storage Security: Personal data and financial records stored on ac65 servers are encrypted at rest using industry-standard encryption protocols. Database access is restricted to authorised personnel only.
• Access Controls: Internal access to player personal data is governed by a strict role-based access control (RBAC) system. Staff members can only access the data categories necessary for their specific operational role.
• Monitoring and Intrusion Detection: ac65 deploys continuous monitoring systems and intrusion detection tools to identify and respond to potential security threats in real time.
• Staff Training: All ac65 staff who handle personal data receive mandatory data protection and security awareness training. Confidentiality obligations are embedded in employment agreements.
• Incident Response: In the event of a data security incident affecting player personal data, ac65 maintains a documented incident response procedure. Where a breach is likely to result in a risk to affected individuals, ac65 will notify impacted players without undue delay.

As a player on the ac65 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a clear description of your request.

• Right of Access: You have the right to request confirmation of whether ac65 holds personal data about you, and to receive a copy of that data in a commonly used, machine-readable format where technically feasible.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. Certain data (such as your registered name and date of birth) may require supporting documentation before a correction is applied.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to legal retention obligations — see Section 8.
• Right to Restriction: You may request that we temporarily restrict the processing of your personal data while a rectification or objection request is being assessed.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for fraud prevention purposes. ac65 will assess the objection and cease processing unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place prior to withdrawal.
• Right to Data Portability: Where processing is based on contract or consent and is carried out by automated means, you may request a structured copy of your personal data for the purpose of transferring it to another service provider.

ac65 will respond to all privacy rights requests within 30 calendar days of receipt. Where a request is complex or involves a high volume of data, this period may be extended by an additional 30 days with prior notice to the requestor.

The ac65 Platform is strictly intended for adults. ac65 does not knowingly collect personal data from individuals under the age of 21. Registration is prohibited for persons below this age, and age verification is conducted as part of the KYC process for all accounts.

If ac65 becomes aware that personal data has been collected from an individual under the age of 21, the relevant Account will be immediately suspended, all associated data will be deleted in accordance with our data retention procedures, and any funds held in that Account will be reviewed in accordance with our Terms and Conditions.

Parents and guardians who believe that a minor in their care has registered on the ac65 Platform are urged to contact [email protected] immediately with details of the Account so that the matter can be resolved without delay.

ac65 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our data processing practices, or improvements to the clarity of our disclosures. The effective date displayed at the top of this document will always indicate when the most recent revision was applied.

Where a proposed change is material — meaning it affects the purposes for which data is processed, the categories of data collected, or the rights available to players — ac65 will provide advance notice to registered players via the email address associated with their Account. The notice will be issued at least 14 days before the updated Policy takes effect, allowing players sufficient time to review the changes and, where applicable, withdraw consent or close their Account.

Continued use of the ac65 Platform following the effective date of an updated Policy constitutes acceptance of the revised terms. If you do not agree with any changes to this Policy, you must cease using the Platform and may request Account closure by contacting [email protected].

All previous versions of this Privacy Policy are archived and available upon request. If you wish to review a prior version, please contact our support team with the specific effective date you require.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which ac65 processes your personal data, please contact our support team using the details below. All privacy-related communications are handled by staff with dedicated data protection responsibilities.

• Email: [email protected] — please use the subject line "Privacy Request" for all data protection enquiries
• Support Channel: Live chat available 24/7 directly on the ac65 Platform
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: ac65 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a full substantive response within 30 calendar days
• Language: English

ac65 takes all privacy concerns seriously and will investigate any complaint thoroughly. If you are not satisfied with our response to a privacy complaint, you may wish to seek independent legal advice or contact a relevant consumer protection authority in your jurisdiction.