Privacy Policy — How acg67 Protects Your Data

1. Who We Are

acg67 ("we", "us", "our", or "the Company") operates the online betting and casino platform available at acg67.io (the "Platform"). This Privacy Policy describes how acg67 collects, uses, stores, shares, and protects the personal data of individuals ("you", "the User", or "the Player") who access or use the Platform, whether through a web browser or any other supported interface.

acg67 is committed to handling your personal data with care and transparency. This policy has been written to give you a clear and complete picture of our data practices. If you have any questions that are not addressed here, please contact our support team directly at [email protected].

By registering an account on the Platform, making a deposit, placing a bet, or otherwise using acg67's services, you acknowledge that you have read this Privacy Policy and understand how your personal data will be processed.

2. Personal Data We Collect

acg67 collects personal data in several ways: directly from you when you register and use the Platform, automatically through your use of the Platform, and from third-party service providers where necessary to verify your identity or process payments.

2.1 Data You Provide Directly

When you register an account or interact with acg67's services, you may provide the following categories of personal data:

• Identity Data: Full name, date of birth, gender, and nationality as stated on your identification documents
• Contact Data: Email address, mobile phone number, and residential address (including city, district, and postcode within Bangladesh)
• Account Credentials: Username and hashed password (your plain-text password is never stored)
• Verification Documents: Copies of government-issued photo ID (National ID card, passport, or driving licence) and proof of address, submitted during the KYC verification process
• Payment Data: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay) and payment card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are not stored by acg67 — payment card data is processed by our PCI-DSS compliant payment partners
• Communications Data: Records of your correspondence with acg67's support team, including email messages, live chat transcripts, and support ticket contents

2.2 Data Collected Automatically

When you access and use the Platform, certain technical data is collected automatically by our systems:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers
• Usage Data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths through the Platform
• Transaction Data: Records of all deposits, withdrawals, bets, and game rounds associated with your account, including timestamps, amounts, and outcomes
• Location Data: Approximate geographic location derived from your IP address, used to verify that you are accessing the Platform from a permitted jurisdiction
• Cookie Data: Data collected via cookies and similar tracking technologies — see Section 6 for full details

2.3 Data from Third Parties

acg67 may receive personal data about you from the following categories of third-party sources:

• Identity Verification Providers: KYC and anti-fraud service providers may confirm or supplement identity information you have provided during registration
• Payment Processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and card payment networks
• Fraud Prevention Services: Risk scores and flagging data from third-party fraud detection systems used to protect the integrity of the Platform

3. How We Use Your Personal Data

acg67 uses the personal data we collect for the following specific purposes:

Purpose	Categories of Data Used
Creating and managing your acg67 account	Identity, Contact, Account Credentials
Processing deposits, withdrawals, and bet settlements	Identity, Payment, Transaction
Verifying your identity and age (KYC compliance)	Identity, Verification Documents
Detecting and preventing fraud, money laundering, and platform abuse	Identity, Device, Usage, Transaction, Location
Providing customer support and responding to enquiries	Identity, Contact, Communications
Personalising your experience and recommending relevant games or offers	Usage, Transaction
Sending account-related notifications (deposits confirmed, withdrawals processed, security alerts)	Contact, Transaction
Enforcing responsible gaming tools (deposit limits, self-exclusion)	Identity, Transaction, Usage
Complying with legal and regulatory obligations	Identity, Transaction, Communications
Improving Platform performance, security, and user experience	Device, Usage, Cookie

4. Legal Basis for Processing Your Data

acg67 processes your personal data only where a valid legal basis exists for doing so. Depending on the specific purpose, the applicable legal basis will be one of the following:

• Contractual Necessity: Processing is necessary to perform the contract between you and acg67 — i.e., to operate your account, process your bets, and deliver our services to you.
• Legal Obligation: Processing is required to comply with applicable laws — including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate Interests: Processing is necessary for acg67's legitimate interests, including fraud prevention, platform security, and improving our services, provided those interests are not overridden by your rights and interests.
• Consent: Where acg67 relies on your consent to process data — for example, for marketing communications — you may withdraw that consent at any time by contacting [email protected] or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

5. How We Share Your Personal Data

acg67 does not sell, rent, or trade your personal data to any third party for commercial gain. We share personal data only in the following limited and controlled circumstances:

5.1 Service Providers

acg67 engages carefully selected third-party service providers who process personal data on our behalf, strictly under our instruction and subject to appropriate data protection agreements. These include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard network processors)
• Identity verification and KYC service providers
• Anti-fraud and risk management service providers
• Cloud infrastructure and data hosting providers
• Customer support platform providers
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — limited to session and transaction data needed to deliver the game

5.2 Legal and Regulatory Disclosures

acg67 may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies when required to do so by applicable law, valid legal process, or a binding regulatory request. We will notify you of any such disclosure where we are legally permitted to do so.

5.3 Business Transfers

In the event that acg67 undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change and of any choices you may have regarding your data in advance of the transfer taking effect.

6. Cookies and Tracking Technologies

acg67 uses cookies and similar technologies (such as web beacons and local storage) to operate the Platform effectively, remember your preferences, and understand how users interact with our services. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account login sessions, security tokens, and bet slip persistence. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences such as language settings, odds format, and display preferences to personalise your experience on the Platform.
• Analytics Cookies: These cookies help acg67 understand how players navigate the Platform — which pages are visited most frequently, where users encounter difficulties, and how the Platform can be improved. Analytics data is aggregated and anonymised where possible.
• Security Cookies: These cookies support fraud detection and account security functions, including identifying unusual login patterns and supporting session integrity checks.

Most web browsers allow you to control cookie settings through the browser's preferences menu. However, disabling strictly necessary cookies may prevent you from logging in or using certain features of the acg67 Platform. acg67 does not use cookies to serve third-party advertising.

7. Data Security

acg67 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• One-way cryptographic hashing for all stored passwords — plain-text passwords are never retained
• Access controls restricting personal data access to acg67 staff who have a genuine operational need
• Regular internal security reviews and vulnerability assessments
• Secure, access-controlled data centres for server infrastructure
• Audit logging of access to sensitive data fields
• Automated monitoring systems that flag unusual account activity in real time

Despite these measures, no data transmission over the internet and no data storage system can be guaranteed as completely secure. In the unlikely event of a data breach that is likely to result in a significant risk to your rights, acg67 will notify affected players and relevant authorities in accordance with applicable legal requirements.

8. Data Retention

acg67 retains personal data for only as long as is necessary for the purposes set out in this Privacy Policy, or for as long as required or permitted by applicable law. Our general retention practice is as follows:

• Active Account Data: Retained for the duration of your account's active status on the Platform.
• Post-Closure Account Data: Following account closure, core identity and account records are retained for a minimum period to comply with anti-money laundering and financial record-keeping legal obligations. This period is typically five to seven years from the date of account closure.
• Transaction Records: All deposit, withdrawal, and bet settlement records are retained for the legally required minimum period, which may extend beyond general account closure retention.
• KYC Documents: Identity verification documents are retained for the period required by applicable regulations, and then securely deleted.
• Support Communications: Records of communications with our support team are retained for a defined period to enable follow-up and dispute resolution, after which they are deleted or anonymised.
• Inactive Accounts: Where an account has been inactive for an extended period, acg67 may take steps to archive or delete associated data in accordance with its data minimisation obligations, subject to any overriding legal retention requirements.

9. Your Privacy Rights

As a user of the acg67 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request promptly and respond within a reasonable timeframe.

• Right of Access: You have the right to request a copy of the personal data acg67 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Note that we may be required to retain some data to comply with legal obligations even after an erasure request.
• Right to Restriction of Processing: You may request that acg67 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: Where acg67 processes your data based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of prior processing.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interests, including profiling for personalisation purposes.

10. Children's Privacy

acg67 is an adults-only platform. Our services are strictly prohibited for individuals under the age of 21. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account and take steps to delete the relevant data as quickly as possible.

If you are a parent or guardian and believe that a person under 21 has created an account on acg67 or provided us with personal data, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11. International Data Transfers

acg67 primarily stores and processes data within secured infrastructure. Some of our third-party service providers — including cloud hosting, KYC verification, and game content providers — may process data in jurisdictions outside Bangladesh. Where such transfers occur, acg67 takes steps to ensure that appropriate data protection standards are maintained, including through the use of contractual data processing agreements that require third parties to handle your data with a level of protection equivalent to that applied by acg67.

By using the acg67 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence for the purposes described in this Privacy Policy.

12. Third-Party Links and Services

The acg67 Platform may contain references to third-party services — for example, game studio names or payment method brands. acg67 is not responsible for the privacy practices of any third-party service that operates independently of our Platform. This Privacy Policy applies solely to data collected and processed by acg67 through the acg67.io Platform. We encourage you to review the privacy policies of any third-party services you interact with separately from acg67.

13. Changes to This Privacy Policy

acg67 reserves the right to update, amend, or replace this Privacy Policy at any time. When a material change is made, we will notify registered players by email to their registered address and via a prominent notice on the Platform, prior to the change taking effect. The updated policy will always be published on this page along with its effective date.

Your continued use of the acg67 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you should stop using the Platform and may request account closure by contacting [email protected].

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how acg67 handles your personal data, please get in touch with our dedicated support team using the contact details below. We are available around the clock and will do our best to respond to all privacy-related enquiries promptly and thoroughly.

• Privacy Enquiries Email: [email protected]
• Subject Line for Data Rights Requests: Data Rights Request
• Platform: acg67.io
• Response Language: English
• Typical Response Time: Within 72 hours for privacy-related requests; within 30 days for formal data rights requests

For further information about your rights and our data practices, you may also review our Terms & Conditions and our Responsible Gaming page.