ac367 Privacy Policy

Introduction & Scope

ac367 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the ac367 platform at ac367.io. This Privacy Policy describes in plain, clear terms what personal information we collect from registered Players and platform visitors, why we collect it, how we use it, who we share it with, and how long we retain it.

This Privacy Policy applies to all personal data processed in connection with your use of the ac367 website, its mobile-optimised interface, and any related services, promotions, or communications delivered by ac367. It applies to all registered Players based in Bangladesh and to any visitor who browses the ac367 platform without registering.

This Policy should be read alongside the ac367 Terms & Conditions and the Responsible Gaming page, both of which form part of the overall agreement between you and ac367.

Data Controller Information

ac367 acts as the data controller in respect of personal data collected from Players and visitors to the ac367 platform. As data controller, ac367 determines the purposes and means of processing your personal data, and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

All data protection queries, subject access requests, correction requests, deletion requests, and objections to processing should be directed to ac367 support using the contact details above. ac367 will respond to all data-related requests within a reasonable timeframe and no later than 30 days from the date of receipt of the request.

Personal Data We Collect

ac367 collects different categories of personal data depending on your level of interaction with the platform. The following table summarises what we collect and why:

ac367 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health information. If any such data is incidentally received (for example, within a support message), it will not be recorded or processed for any purpose beyond the immediate resolution of the matter.

How We Collect Your Data

ac367 collects personal data through the following channels:

• Direct registration: When you create a Player account on ac367, you provide Identity Data, Contact Data, and account credentials directly.
• Deposits and withdrawals: When you make a financial transaction via bKash, Nagad, Rocket, Upay, or a bank payment, Financial Data is collected and logged against your account.
• KYC verification: When you submit identity documents to verify your account before your first withdrawal, ac367 receives and processes KYC Documents.
• Platform usage: As you browse and use the ac367 platform, Technical Data and Usage Data are automatically collected via server logs, cookies, and session tracking tools.
• Support interactions: When you contact ac367 via live chat or email, Communications Data is collected and retained as part of the support record.
• Cookies and tracking technologies: As described in Section 8, cookies and similar technologies are used to collect Technical Data during your browsing sessions.

Legal Basis for Processing

ac367 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing is necessary to perform the contract between you and ac367 — specifically, to operate your Player account, process deposits and withdrawals, and deliver the gaming and betting services you have registered to use.
• Legal obligation: Processing is necessary to comply with ac367's legal and regulatory obligations, including anti-money laundering (AML) checks, fraud prevention requirements, and age verification obligations.
• Legitimate interests: Processing is necessary for ac367's legitimate business interests, including platform security, fraud detection, responsible gaming monitoring, service improvement, and analytics — provided those interests are not overridden by your privacy rights.
• Consent: Where ac367 relies on your consent as a legal basis — for example, for sending you marketing communications or for certain non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Personal Data

ac367 uses your personal data for the following specific purposes:

• Account creation and management: To register your Player account, maintain your BDT wallet balance, and provide access to the ac367 platform.
• Identity and age verification: To confirm that you are aged 21 or above and are the legitimate owner of the account and payment methods used. This is a non-negotiable requirement and cannot be waived.
• Processing financial transactions: To credit deposits made via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank to your BDT wallet, and to process withdrawal requests to verified payment accounts.
• Fraud prevention and security: To monitor account activity for patterns consistent with fraudulent behaviour, account takeover, bonus abuse, multi-accounting, or money laundering, and to take appropriate action where such patterns are identified.
• Responsible gaming compliance: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to deliver responsible gaming communications where appropriate.
• Customer support: To respond to your enquiries, resolve disputes, and maintain a record of support interactions for quality and compliance purposes.
• Platform improvement: To analyse how Players use the ac367 platform in aggregate, identify areas for improvement, test new features, and optimise performance across devices used in Bangladesh, including mobile devices on Grameenphone, Robi, Banglalink, and Teletalk networks.
• Marketing and promotions: To send you information about ac367 bonuses, promotions, and seasonal offers (such as those tied to BPL season, Eid, or Pohela Boishakh) where you have consented to receive such communications. You may opt out at any time.
• Legal compliance and record-keeping: To maintain records required by applicable law, to respond to lawful requests from authorities, and to defend ac367's legal rights and interests in the event of a dispute.

Data Sharing & Third Parties

ac367 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your data only in the circumstances described below, and only to the extent necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank receive the financial transaction data necessary to process deposits and withdrawals on your behalf. Each payment partner operates under its own privacy policy and data handling standards.
• Identity verification providers: Third-party KYC and identity verification services receive the identity documents and data you provide during account verification, for the purpose of confirming your identity and age.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other Game Providers may receive technical session data (such as session tokens and bet records) necessary to deliver their games to you through the ac367 platform. Game Providers do not receive your full personal profile.
• Fraud prevention and analytics services: Aggregated or pseudonymised Technical Data and Usage Data may be shared with fraud detection and analytics service providers to help ac367 identify and respond to suspicious activity and improve platform performance.
• Legal and regulatory authorities: ac367 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where such disclosure is necessary to protect the rights, property, or safety of ac367, its Players, or third parties.

Cookies & Tracking Technologies

The ac367 platform uses cookies — small text files stored on your device — and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to help us understand how Players use the platform so we can continue improving it.

You can control non-essential cookies through your browser settings. Instructions for managing cookies are available in the help section of all major browsers including Google Chrome, Mozilla Firefox, Microsoft Edge, and Samsung Internet (commonly used on mobile devices in Bangladesh). Disabling non-essential cookies will not prevent you from using the ac367 platform, but may affect some preference-based features.

Data Retention

ac367 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or fraud prevention obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your Player account registration, plus a minimum of 5 years following account closure, to satisfy legal record-keeping requirements.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction, in accordance with standard financial record-keeping obligations applicable to payment processing in Bangladesh.
• KYC documents: Retained for a minimum of 5 years following account closure, or longer if required by applicable anti-money laundering regulations.
• Support communications: Retained for up to 3 years from the date of the last interaction, to allow for dispute resolution and quality review.
• Technical and usage logs: Generally retained for 12 months in identifiable form, after which they may be anonymised and retained indefinitely for aggregate analytics purposes.
• Marketing consent records: Retained for as long as you hold an active ac367 account, or until you withdraw consent, whichever occurs first.

When personal data is no longer required and the applicable retention period has expired, ac367 will securely delete or anonymise the data. Where deletion is not immediately technically feasible, ac367 will isolate the data from further active processing until deletion is completed.

Data Security Measures

ac367 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the ac367 platform is encrypted using SSL/TLS technology. Look for the padlock icon in your browser address bar when using ac367.
• Encrypted password storage: Account passwords are never stored in plain text. ac367 uses industry-standard hashing algorithms to store password credentials securely.
• Access controls: Personal data is accessible only to ac367 team members and service providers who require it to perform their specific role. Role-based access controls and audit logging are in place.
• Secure server infrastructure: ac367's platform and data are hosted on secure, professionally managed server infrastructure with physical and logical access controls, regular security patching, and intrusion detection monitoring.
• Fraud detection systems: Automated fraud detection tools monitor account activity in real time for signs of account compromise, unauthorised access, or suspicious transaction patterns.
• Regular security reviews: ac367 conducts periodic reviews of its security practices and data handling procedures to identify and address vulnerabilities.

Your Data Rights

As a registered Player on the ac367 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact ac367 support at the details provided in Section 15. ac367 will respond to all valid requests within 30 days:

• Right of access: You have the right to request a copy of the personal data ac367 holds about you, including the categories of data held, the purposes for which it is processed, and details of any third parties with whom it has been shared.
• Right to rectification: You have the right to request that ac367 correct any inaccurate or incomplete personal data held about you. This is particularly important for Identity Data such as your name, date of birth, and contact details, which must be accurate for KYC purposes.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to ac367's legal retention obligations and fraud prevention requirements, which may require certain data to be retained even after account closure.
• Right to restrict processing: You have the right to request that ac367 pause the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of ac367's legitimate interests.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where ac367 relies on legitimate interests as its legal basis, including profiling for fraud prevention or responsible gaming purposes. ac367 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where ac367 processes your data based on consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing. To opt out of marketing emails, follow the unsubscribe instructions in any marketing communication or contact ac367 support.

Children & Minors

The ac367 platform is strictly for adults aged 21 and above. ac367 does not knowingly collect personal data from any person under the age of 21, and does not permit any person under 21 to register, deposit funds, or use any feature of the platform.

ac367 encourages all adult account holders to use parental control software and to ensure that minors in their household do not have access to their account credentials or devices on which their ac367 account is logged in.

Marketing Communications

With your consent, ac367 may contact you by email or mobile notification to inform you about promotions, bonuses, seasonal offers, and updates relevant to your use of the ac367 platform. Marketing communications from ac367 may include:

• Welcome bonuses and new Player promotions
• Reload bonuses and deposit match offers
• Cricket betting promotions tied to BPL, IPL, T20 World Cup, and Bangladesh Tigers matches
• Seasonal offers related to Eid, Pohela Boishakh, Victory Day (December 16), and other events relevant to Bangladesh Players
• New game launch announcements from Game Providers including Pragmatic Play, Evolution Gaming, and Spribe
• Responsible gaming reminders and account activity summaries

You may opt out of marketing communications at any time by contacting ac367 support or by using the unsubscribe option included in every marketing email. Opting out of marketing communications does not affect transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent to all active account holders regardless of marketing preferences.

Changes to This Policy

ac367 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new platform features, evolving legal requirements, or feedback from our Player community. When we make changes, the revised Policy will be published on this page with an updated effective date.

Where a change is material — meaning it substantively affects how your personal data is collected, used, or shared — ac367 will make reasonable efforts to notify registered Players of the change via their registered contact details at least 7 days before the change takes effect. Your continued use of the ac367 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy.

We encourage all Players to review this Privacy Policy periodically. If you have questions about any update, contact ac367 support before continuing to use the platform.

Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ac367 holds about you, please contact our support team:

If you are not satisfied with ac367's response to a privacy concern or data request, you have the right to escalate your complaint through any applicable legal or regulatory channel available to you as a Bangladesh resident.

ac367 takes all privacy complaints seriously. Every complaint received is logged, investigated, and responded to in good faith. We aim to resolve all data-related complaints within 30 days of receipt.