acd67 Privacy Policy

When you interact with the acd67 platform — whether by registering an account, making a deposit, placing a wager, or contacting our support team — we collect certain categories of personal information. The specific data collected depends on how you use the platform and the products you access. We do not collect data beyond what is necessary for the purposes described in this Privacy Policy.

We collect data through the following primary channels: (a) information you provide directly when completing the registration form or contacting support; (b) data generated automatically by your use of the platform, including via cookies and server logs; and (c) information received from third-party identity verification and payment processing partners during KYC and financial transaction workflows.

acd67 processes personal data only where we have a lawful basis to do so. The primary lawful bases we rely upon are: performance of a contract with you (i.e., operating your account and delivering the services you have registered to use); compliance with legal obligations (including anti-money-laundering and age verification requirements); and our legitimate interests in operating a safe, fraud-free, and commercially viable platform.

• Account Management: We use your identity and contact data to create and maintain your acd67 account, authenticate your identity at login, communicate account-related notifications, and process password reset requests.
• Payment Processing: Financial data, including your bKash, Nagad, Rocket, Upay, or bank details, is used exclusively to process deposits credited to your account balance and to return withdrawal funds to your nominated payment method. We do not store full payment credentials on our servers beyond what is required for transaction processing.
• Identity Verification (KYC): We are required to verify the identity of all players and to confirm that funds deposited on the platform are lawfully sourced. Verification documents are processed in compliance with our anti-money-laundering obligations and are not used for any other purpose.
• Responsible Gaming Compliance: Usage data — including session duration, deposit frequency, and wager patterns — is analysed to identify players who may be exhibiting signs of problem gambling. Where such indicators are present, we may proactively contact the player with responsible gaming resources or apply account-level safeguards.
• Platform Improvement: Aggregated and anonymised usage data is used to understand how players interact with the acd67 platform, identify technical issues, and prioritise product improvements. This data cannot be used to identify individual players.
• Fraud Prevention and Security: Technical data including IP addresses and device fingerprints is used to detect and prevent fraudulent account activity, bonus abuse, multi-accounting, and unauthorised access attempts.
• Marketing Communications: With your explicit consent, we may send you promotional communications about acd67 offers, new games, and seasonal promotions relevant to players in Bangladesh, including BPL season specials and Eid bonus campaigns. You may withdraw consent at any time by updating your communication preferences in the account settings panel or by writing to [email protected].
• Legal and Regulatory Compliance: We may use and disclose your data as required by applicable law, court order, or at the direction of a regulatory or law enforcement authority with legitimate jurisdiction over our operations.

acd67 does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment Service Providers: To process deposits and withdrawals, we share the minimum necessary financial data with our integrated payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These partners process your data solely to execute the transaction and are contractually prohibited from using it for any other purpose.
• Identity Verification Partners: We work with accredited third-party KYC and identity verification providers to authenticate player identity and comply with anti-money-laundering regulations. Your verification documents are shared with these partners only for the purpose of completing the verification process.
• Game Content Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive certain technical data (such as your anonymised player ID and session token) to deliver their game content and calculate game outcomes. These providers do not receive your name, financial details, or contact information.
• Legal and Regulatory Authorities: We may disclose your personal data to law enforcement agencies, courts, regulators, or other public authorities where required by law or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of acd67, its players, or third parties.
• Business Transfers: In the event that acd67 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transfer.

acd67 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your login session, and collect analytical data about how players use the site. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

We use the following categories of cookies on the acd67 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as user authentication, session management, fraud detection, and load balancing. Without these cookies, the platform cannot operate correctly. These cookies cannot be disabled.
• Functional Cookies: Functional cookies remember your preferences, such as your chosen language settings, preferred game categories, and display options. They allow us to provide a more personalised experience without requiring you to re-enter preferences on every visit.
• Analytical Cookies: We use analytical cookies to collect aggregated, anonymised data about how players navigate the platform — which pages are visited most frequently, where players encounter errors, and how long sessions typically last. This data is used solely to improve the platform and cannot be used to identify individual players.
• Security Cookies: Security cookies support our fraud prevention and account integrity systems. They help us identify unusual login patterns, detect bot activity, and protect player accounts from unauthorised access attempts.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling functional or analytical cookies may affect your experience on the acd67 platform, and some features may not operate as intended. Strictly necessary cookies cannot be disabled without preventing access to the platform entirely.

acd67 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. We review and update our security practices on an ongoing basis to address emerging threats and industry best practices.

• Encryption in Transit: All data transmitted between your device and acd67 servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. This ensures that your login credentials, personal details, and financial information cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data stored on acd67 servers — including identity documents, financial records, and account credentials — is encrypted at rest using industry-standard encryption algorithms. Encryption keys are managed under strict access controls.
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis. acd67 employees are granted access only to the data categories required for their specific role. All data access is logged and subject to periodic audit.
• Password Security: Player account passwords are stored using a one-way cryptographic hashing algorithm with a unique salt per account. acd67 employees cannot read or retrieve your plaintext password under any circumstances. If you forget your password, a reset link will be issued to your registered email address.
• Penetration Testing: acd67 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in our platform infrastructure before they can be exploited.
• Data Breach Response: In the unlikely event of a personal data breach that poses a risk to affected players, acd67 will notify impacted individuals promptly and take all reasonable steps to contain the breach, recover the affected data, and prevent recurrence.

While acd67 takes every reasonable precaution to protect your data, no digital platform can guarantee absolute security. You also play an important role in protecting your account: use a strong, unique password, do not share your login credentials with anyone, and contact [email protected] immediately if you suspect unauthorised access to your account.

acd67 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention periods apply to the main categories of data we hold:

• Account Data (active accounts): Retained for the full duration of your registration with acd67 plus a minimum of five years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Deposit, withdrawal, and wagering transaction records are retained for a minimum of five years from the date of the transaction in accordance with financial compliance obligations.
• Identity Verification Documents: KYC documents including copies of national ID cards, passports, and address verification documents are retained for five years following the completion of the verification process or the closure of the associated account, whichever is later.
• Support Communications: Customer support chat transcripts and email correspondence are retained for two years from the date of the interaction, or longer where the correspondence relates to a formal complaint or ongoing dispute.
• Technical and Log Data: Server logs and technical access data are retained for a maximum of 12 months, after which they are automatically deleted or anonymised.
• Marketing Preferences: Records of your marketing consent status are retained for as long as your account is active and for three years following account closure, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained beyond the standard period due to an active legal proceeding, regulatory investigation, or unresolved dispute, we will retain only the data relevant to that matter and for the duration necessary to resolve it.

As a registered player on the acd67 platform, you hold a number of rights in respect of your personal data. acd67 is committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights listed below, please contact our support team at [email protected] with the subject line "Data Rights Request" and the specific right you wish to exercise.

We will respond to all verified data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, and we will notify you of the extension and the reason for it. We will not charge a fee for handling data rights requests in normal circumstances. Where requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline to act on the request, and will explain our reasoning in writing.

acd67 reviews this Privacy Policy at regular intervals and whenever there is a material change to our data practices, the services we offer, or the legal and regulatory environment in which we operate. When a significant change is made, we will notify registered players via the email address associated with their account and display a prominent notice on the platform for a period of not less than 14 days following the change.

Minor updates that do not materially affect how your data is processed — such as corrections to typographical errors, clarifications of existing language, or formatting improvements — may be made without specific notification. The "Last Reviewed" date at the top of this policy will always reflect the date of the most recent change, regardless of its nature.

Your continued use of the acd67 platform after a material policy change has been notified to you constitutes your acceptance of the revised Privacy Policy. If you do not agree with any change, you should cease using the platform and may request account closure in accordance with the process described in the acd67 Terms & Conditions.

Data Controller Contact Details: For all privacy-related queries, data rights requests, or concerns about how acd67 handles your personal information, please contact our dedicated data protection team:

• Email: [email protected] (subject line: "Privacy / Data Rights Request")
• Response Target: Within 48 hours for general queries; within 30 days for formal data rights requests
• Platform: https://acd67.app
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)