acd67 Privacy Policy — How We Handle Your Personal Data

1. Introduction and Scope

This Privacy Policy ("Policy") describes how acd67 ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "the User", "the Player") who visit, register on, or otherwise interact with the acd67 website accessible at https://acd67.io and all associated pages, products, and services.

This Policy applies to all personal data processed by acd67 in connection with the provision of its online betting, casino, and gaming services to players located in Bangladesh and any other jurisdiction in which acd67 operates. It covers data collected through our website, our mobile-optimised platform, and through direct communications between you and our support team.

By registering an account with acd67 or otherwise using the platform, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the acd67 platform.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller Identity

For the purposes of this Privacy Policy, the data controller responsible for the processing of your personal data is acd67, the operator of the platform at https://acd67.io. All data protection queries, access requests, and complaints should be directed to our dedicated support team at [email protected].

3. Personal Data We Collect

acd67 collects the following categories of personal data from its registered players and website visitors:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, gender, national ID number, passport number	Account registration, age and identity verification, regulatory compliance
Contact Data	Email address, mobile phone number, district or city of residence (e.g., Dhaka, Chittagong, Sylhet)	Account communications, transaction alerts, support correspondence
Financial Data	bKash/Nagad/Rocket account number, Visa/Mastercard last four digits, deposit and withdrawal history	Payment processing, fraud prevention, transaction record-keeping
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Security monitoring, fraud detection, platform optimisation
Usage Data	Games played, bets placed, bet amounts, win/loss records, session duration, pages visited	Responsible gaming monitoring, personalisation, service improvement
Communications Data	Support chat transcripts, emails sent to [email protected], feedback submitted	Dispute resolution, quality assurance, compliance record-keeping

We do not intentionally collect any special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless you voluntarily provide such information in the course of a support interaction.

4. How We Collect Your Data

acd67 collects your personal data through the following channels:

• Direct collection: Data you provide when completing the registration form, submitting identity verification documents, making deposits or withdrawal requests, or contacting our support team.
• Automated collection: Technical and usage data collected automatically as you interact with the acd67 website, including through cookies, server logs, and session tracking tools.
• Third-party sources: Identity verification data received from third-party KYC (Know Your Customer) providers to whom you submit your documents; fraud-screening data from payment processors such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard.

5. Legal Basis for Processing

acd67 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform our contract with you — including account creation, transaction processing, and the provision of gaming and betting services.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, identity verification requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out in our legitimate interests as an operator, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and the use of non-essential cookies, where you have given your explicit and freely withdrawable consent.

6. How We Use Your Data

The personal data acd67 holds about you is used for the following purposes:

• To register and maintain your acd67 account, including verifying your identity and age (21+ requirement) in accordance with our Terms & Conditions.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other accepted payment methods, and to maintain accurate financial records.
• To detect, investigate, and prevent fraudulent activity, money laundering, prohibited conduct, and any other activity that violates our Terms & Conditions or applicable law.
• To monitor your gaming activity for responsible gaming purposes, identify patterns consistent with problem gambling, and where appropriate proactively apply account protections.
• To communicate with you regarding your account, including transaction confirmations, security alerts, and responses to your support queries.
• To send you promotional communications about acd67 bonuses, new games, cricket betting markets, seasonal offers (including Eid, BPL season, IPL, ICC tournaments, Pohela Boishakh), and other relevant content — subject to your communication preferences.
• To improve the acd67 platform, analyse usage patterns, and optimise the user experience for players across Bangladesh.
• To comply with our legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.

7. Data Sharing and Disclosure

acd67 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to contractual data protection obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment service providers, to the extent necessary to process your financial transactions.
• Identity verification providers: Third-party KYC service providers who assist us in verifying your identity and age in compliance with our policies.
• Technology and hosting providers: Cloud infrastructure, database, and security service providers who host and protect the acd67 platform on our behalf.
• Fraud prevention and analytics providers: Third-party services that assist us in detecting fraudulent activity and monitoring platform security.
• Legal and regulatory authorities: Courts, regulators, law enforcement agencies, and other competent authorities, where we are required or legally permitted to disclose your data.
• Professional advisers: Lawyers, auditors, and insurers in connection with the operation of our business, subject to professional confidentiality obligations.

Any third party with whom acd67 shares personal data is required to handle that data in accordance with applicable data protection principles and is prohibited from using it for any purpose other than the specific purpose for which it was shared.

8. Cookies and Tracking Technologies

acd67 uses cookies and similar tracking technologies to operate the platform, ensure security, and improve the user experience. The types of cookies we use are as follows:

• Strictly necessary cookies: Required for the platform to function, including maintaining your login session, processing transactions, and applying your account settings. These cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to measure how users interact with the acd67 platform, identify errors, and improve page performance. Data collected is aggregated and anonymised where possible.
• Functionality cookies: Used to remember your preferences, such as your preferred language and display settings.
• Marketing and targeting cookies: Used, with your consent, to deliver promotional content relevant to your interests. You may withdraw consent to these cookies at any time via your account settings.

You may manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the acd67 platform.

9. Data Retention

acd67 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Account data (identity, contact, and financial data) is retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with our AML and record-keeping obligations.
• Transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Communications data (support interactions) is retained for a period of two (2) years from the date of the last interaction.
• Technical and usage data collected through cookies and server logs is retained for a maximum of thirteen (13) months from the date of collection, unless a longer retention period is required for a specific legitimate purpose such as an ongoing fraud investigation.

When personal data is no longer required, acd67 will securely delete or anonymise it in accordance with our internal data destruction procedures.

10. Data Security

acd67 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel have access to personal data, limited to what is necessary for their specific role.
• Regular security audits, penetration testing, and vulnerability assessments of our platform infrastructure.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Secure, geographically redundant data storage with automated backup procedures.

While we take all reasonable precautions, no online platform can guarantee absolute security. In the unlikely event of a data breach that is likely to result in a high risk to your rights and freedoms, acd67 will notify affected players without undue delay and will take all appropriate remedial action.

11. Your Rights Over Your Data

As a player on the acd67 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of access: You have the right to request a copy of the personal data acd67 holds about you, together with information about how it is being used.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal obligations to retain certain data, as described in Section 9 above.
• Right to restriction of processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data while a dispute is resolved or a review is conducted.
• Right to data portability: You have the right to receive a copy of personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to acd67's assessment of competing grounds.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications or non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

acd67 will respond to all data rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

12. Children and Minors

The acd67 platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor may have registered an account on acd67 or provided us with their personal data, please notify us immediately at [email protected].

13. Third-Party Links

The acd67 platform does not contain links to third-party websites as part of its standard navigation. In the event that any third-party content or links are displayed (for example, within game content provided by studios such as Pragmatic Play, Evolution Gaming, Spribe, or Ezugi), acd67 is not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party service providers whose content you access through the acd67 platform.

14. Changes to This Policy

acd67 reviews this Privacy Policy periodically and reserves the right to update it at any time to reflect changes in our data processing practices, applicable law, or platform operations. Where changes are material, we will notify registered players via the email address or mobile number on file at least seven (7) days before the revised policy takes effect.

The "Effective Date" at the top of this document will always reflect the date on which the current version came into force. We encourage you to review this Policy periodically to stay informed about how acd67 protects your personal data. Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which acd67 processes your personal data, please contact us using the details below:

• Support Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Queries: "Privacy Policy Query" or "Data Rights Request"
• Response Time: Within 24 hours for general queries; within 30 days for formal data rights requests
• Operating Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

All formal complaints relating to the handling of your personal data will be acknowledged within 24 hours and will receive a substantive response within 30 days. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.