Your Privacy Matters at aci67

Data Controller

1.1 Identity. The data controller responsible for your personal data is the operating entity of aci67, which operates the online casino and sports betting platform accessible at aci67.io. aci67 operates as an offshore platform serving players in Bangladesh and other permitted jurisdictions.

1.2 Contact Details. All data protection enquiries, subject access requests, and privacy-related correspondence should be directed to:

• Email: [email protected]
• Subject Line: "Data Protection Enquiry — [Your Username]"
• Response Time: Within 30 days of receipt of a valid request

1.3 Scope. This Privacy Policy applies to all personal data collected and processed in connection with: (a) registration and maintenance of an aci67 Account; (b) use of any game, betting market, or other service on the aci67 platform; (c) communications between you and aci67 customer support; and (d) your interaction with aci67 marketing communications where you have opted in.

Data We Collect

2.1 Registration Data. When you create an aci67 Account, we collect the following personal data:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including city, district, and postal code)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (BDT / Bangladeshi Taka)

2.2 Identity Verification (KYC) Data. To comply with anti-money laundering (AML) obligations and to verify that you meet the 21+ age requirement, aci67 may collect:

• Copy of government-issued photo ID (National Identity Card, passport, or driving licence)
• Proof of address document (utility bill, bank statement, or official government letter dated within 90 days)
• Selfie photograph or live verification image where enhanced verification is required
• Source-of-funds documentation for high-value transactions

2.3 Financial Data. When you make deposits or request withdrawals, aci67 records:

• Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard, USDT)
• Transaction reference numbers and timestamps
• Deposit and withdrawal amounts in BDT or cryptocurrency equivalent
• Partial account identifiers (e.g., last 4 digits of a card, or a masked mobile wallet number) — aci67 does not store full card numbers or full wallet credentials on its servers

2.4 Usage & Behavioural Data. As you use the aci67 platform, we automatically collect:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Session start and end times, pages visited, and features used
• Game history: games played, stakes placed, outcomes, and session durations
• Betting history: markets selected, odds accepted, and settlement results
• Responsible gaming tool usage and self-imposed limit settings

2.5 Communication Data. If you contact aci67 customer support, we retain:

• The content of emails, live chat transcripts, and support ticket submissions
• The date, time, and channel of each communication
• Any attachments or screenshots submitted as part of a support request

2.6 Marketing Preference Data. If you opt in to receive promotional communications, we record your marketing preferences and the history of communications sent to you. You may update or withdraw these preferences at any time.

How We Collect Data

aci67 collects personal data through the following channels:

• Directly from you — when you register an Account, complete KYC verification, make a deposit, place a bet, contact customer support, or update your Account profile.
• Automatically via the platform — through cookies, web beacons, server logs, and similar technologies that record your interactions with the aci67 website and mobile interface.
• From payment service providers — bKash, Nagad, Rocket, Upay, Visa, Mastercard, and cryptocurrency network providers share transaction confirmation data with aci67 to verify deposits and process withdrawals.
• From identity verification services — where aci67 uses a third-party KYC provider to verify identity documents or cross-reference data against public registers, that provider may share verification results with aci67.
• From fraud prevention services — aci67 uses automated screening tools that may receive limited data points to assess account risk and detect prohibited conduct.

How We Use Your Data

aci67 uses personal data for the following purposes:

aci67 will not use your personal data for any purpose that is incompatible with the purposes set out in this Section without first notifying you and, where required, obtaining your consent.

Legal Bases for Processing

aci67 processes personal data on the following legal bases, depending on the purpose of the processing activity:

• Contractual Necessity — Processing that is necessary to perform the contract between aci67 and you (i.e., the Terms & Conditions you accepted at registration). This covers account management, payment processing, and delivery of gaming services.
• Legal Obligation — Processing required to comply with applicable legal obligations, including AML screening, KYC verification, and retention of financial transaction records.
• Legitimate Interests — Processing that is necessary for the legitimate interests of aci67 and that does not override your fundamental privacy rights. This covers fraud prevention, platform security, responsible gaming monitoring, and aggregated platform analytics.
• Consent — Processing based on your freely given, specific, and informed consent. This applies to marketing communications and to the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Sharing Your Data

6.1 Third-Party Service Providers. aci67 shares personal data with carefully selected third-party service providers who assist in operating the platform. These providers are contractually bound to process your data only on aci67's instructions and in accordance with applicable data protection standards. Categories of providers include:

• Payment processing partners: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, Visa, Mastercard, and USDT network processors
• Identity verification and KYC service providers
• Fraud detection and AML screening services
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Play'n GO (these providers operate their own game engines and may process limited session data)
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Email and marketing communication delivery services (where you have opted in)

6.2 Legal Disclosures. aci67 may disclose your personal data to law enforcement, regulatory authorities, or other competent bodies where required to do so by applicable law, court order, or regulatory instruction. aci67 will notify you of such a disclosure where legally permitted to do so.

6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of aci67's assets, your personal data may be transferred to the acquiring entity. You will be notified of such a transfer and of any material changes to how your data will be handled prior to the transfer taking effect.

6.4 No Data Sales. aci67 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks. Your data is used exclusively for the purposes described in this Privacy Policy.

International Data Transfers

7.1 Cross-Border Processing. aci67 operates as an offshore platform and may process or store your personal data in countries other than Bangladesh. In particular, cloud infrastructure, KYC processing, and game server operations may involve data transfer to jurisdictions outside Bangladesh.

7.2 Transfer Safeguards. Where personal data is transferred internationally, aci67 ensures that appropriate safeguards are in place to protect your data. These may include: contractual data processing agreements incorporating internationally recognised standard contractual clauses; transfer to recipients in jurisdictions recognised as providing an adequate level of data protection; or other lawful transfer mechanisms.

7.3 Enquiries. If you wish to obtain further information about the specific safeguards applied to international data transfers involving your personal data, please contact aci67 at [email protected] with the subject line "International Transfer Enquiry".

Data Retention

8.1 Retention Periods. aci67 retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

8.2 Extended Retention. Where aci67 is required to retain data beyond the standard periods described above — for example, in connection with an ongoing legal dispute, regulatory investigation, or fraud inquiry — data will be retained until the matter is resolved and the extended retention requirement no longer applies.

8.3 Deletion. Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised data (i.e., data from which all identifying information has been irreversibly removed) may be retained indefinitely for statistical and analytical purposes.

Security Measures

9.1 Technical Safeguards. aci67 implements a range of technical security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• TLS/SSL encryption for all data transmitted between your device and aci67 servers
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment references
• Firewall protection and intrusion detection systems on all production infrastructure
• Regular penetration testing and vulnerability assessments by independent security professionals
• Two-factor authentication (2FA) availability for all player accounts
• Automated session timeout for inactive authenticated sessions

9.2 Organisational Safeguards. aci67 restricts access to personal data on a strict need-to-know basis. Staff members with access to personal data are subject to confidentiality obligations and receive data handling training. Access logs are maintained for all systems containing personal data.

9.3 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, aci67 will notify affected players without undue delay, providing details of the nature of the breach, the data categories affected, and the steps aci67 is taking to address the situation.

9.4 Your Responsibility. While aci67 takes robust measures to secure your data, you also have a role to play. You are responsible for maintaining the confidentiality of your account password, enabling two-factor authentication, and keeping your registered device secure. If you suspect your account has been compromised, contact [email protected] immediately.

Cookies & Tracking Technologies

10.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. aci67 uses cookies and similar technologies (including web beacons and local storage) to maintain session integrity, remember your preferences, analyse platform usage, and deliver relevant content.

10.2 Categories of Cookies Used.

10.3 Managing Cookies. You may control non-essential cookies through your browser settings or device preferences. Please note that disabling strictly necessary cookies may impair core platform functionality, including your ability to log in and maintain an authenticated session. Instructions for managing cookies in major browsers are available through the browser vendor's official help documentation.

Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by aci67:

• Right of Access — You may request a copy of the personal data aci67 holds about you, together with information about how it is processed. aci67 will respond to a valid subject access request within 30 days.
• Right to Rectification — If personal data held by aci67 is inaccurate or incomplete, you may request that it be corrected. You may update certain information directly from your Account profile settings.
• Right to Erasure ("Right to be Forgotten") — You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and aci67 has no overriding legitimate grounds. This right is subject to aci67's legal retention obligations — data required by law to be retained cannot be erased on request.
• Right to Restriction — You may request that aci67 restrict the processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability — Where processing is based on consent or contractual necessity, and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object — You may object to processing of your personal data based on aci67's legitimate interests. aci67 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Rights Related to Automated Decision-Making — Where aci67 makes decisions about you solely through automated processing that produce significant effects (such as automated account suspension), you have the right to request human review of that decision.

To exercise any of the above rights, contact aci67 at [email protected] with the subject line "Data Rights Request — [Your Username]". aci67 may request proof of identity before processing a data rights request to protect against fraudulent requests.

Children's Privacy

12.1 Age Restriction. The aci67 platform is strictly for adults aged 21 years and above. aci67 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately suspend the associated account, delete the data, and return any deposits made.

12.2 Parental Controls. If you believe that a person under 21 years of age may have registered or accessed the aci67 platform, please contact us immediately at [email protected]. aci67 takes the protection of minors extremely seriously and will investigate all such reports promptly. We also recommend that parents and guardians install parental control software on shared devices to prevent access to online gambling platforms.

Marketing Communications

13.1 Opt-In Basis. aci67 sends promotional communications — including bonus offers, tournament announcements, and seasonal promotions — only to players who have explicitly opted in to receive such communications during registration or via their Account settings.

13.2 Content of Communications. Marketing communications from aci67 may include information about: deposit bonuses and reload offers; free bet promotions; BPL, IPL, and T20 World Cup special markets; Eid, Pohela Boishakh, and national holiday promotions; new game releases from providers such as Pragmatic Play, Evolution Gaming, and Spribe; and platform feature updates.

13.3 Opt-Out. You may withdraw your consent to receive marketing communications at any time by: (a) clicking the "unsubscribe" link in any marketing email; or (b) updating your communication preferences in your Account settings; or (c) contacting [email protected] with the subject line "Unsubscribe — [Your Username]". Opt-out requests are processed within 5 business days. Please note that withdrawing marketing consent does not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, and security alerts, which are sent as part of the account service.

Third-Party Services

14.1 Game Providers. The aci67 platform integrates game content from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Play'n GO. When you launch and play a game from one of these providers, limited technical and session data (such as session tokens and game round data) is processed by the provider's own game server infrastructure. aci67 requires all game providers to process this data under strict data processing agreements consistent with the standards described in this Privacy Policy.

14.2 Payment Processors. Transactions processed via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or USDT network processors are subject to the respective privacy policies of those payment service providers. aci67 does not control the data practices of these independent payment companies. We encourage you to review their privacy policies before initiating a transaction.

14.3 No Responsibility for External Sites. The aci67 platform does not contain links to third-party websites. However, if you arrive at aci67.io via an affiliate link or referral, the referring site's data practices are entirely independent of aci67 and are governed by that site's own privacy policy. aci67 accepts no responsibility for the data handling practices of referring or affiliate websites.

Changes to This Policy

15.1 Right to Update. aci67 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The most current version will always be published at aci67.io/privacy-policy with the effective date clearly stated at the top of the document.

15.2 Notification of Material Changes. Where a change to this Privacy Policy is material — meaning it significantly affects your rights or how your data is used — aci67 will notify registered players via their registered email address at least 7 days before the change takes effect.

15.3 Continued Use. Your continued use of the aci67 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with the changes, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact aci67 through the following channels:

• Data Protection Enquiries: [email protected] — Subject: "Data Protection Enquiry — [Your Username]"
• Subject Access Requests: [email protected] — Subject: "Data Rights Request — [Your Username]"
• Business & Legal Correspondence: [email protected]
• Operating Hours: 24 hours · 7 days · Bangladesh Standard Time (BST, UTC+6)
• Response Time: Acknowledgement within 5 business days · Full response within 30 calendar days