ac65 Privacy Policy

When you register and use the ac65 platform, we collect personal information that is necessary to provide our services, verify your identity, process financial transactions, and ensure the safety and integrity of our gaming environment. The categories of personal data we collect are described in detail below.

Registration Data

When you create an ac65 account, we collect the following registration information:

• Full legal name as it appears on your government-issued identification.
• Date of birth, collected for mandatory age verification (18+ requirement).
• Mobile phone number or email address, used as your primary contact method and for account security OTPs.
• Username and password (password stored in hashed, salted form — never in plain text).
• Residential address, which may be requested during the KYC verification process.

Identity Verification (KYC) Documents

To comply with our anti-money laundering obligations and to verify your age, ac65 may request copies of the following documents at any point during your account lifetime:

• National Identity Card (NID) issued by the Bangladesh Election Commission.
• Passport (biographical data page).
• Birth registration certificate (for age verification where NID is unavailable).
• Proof of address document (utility bill, bank statement) dated within the last three months.
• Proof of ownership of the payment method used for deposits (e.g., screenshot of bKash or Nagad account registered in your name).

Financial Transaction Data

For every deposit and withdrawal processed through ac65, we record the following financial data:

• Payment method used (bKash, Nagad, Rocket, Upay, Tap, SureCash, or bank transfer).
• Transaction amount in Bangladeshi Taka (৳ BDT).
• Transaction timestamp (Bangladesh Standard Time, UTC+6).
• Mobile wallet number or bank account details associated with the transaction.
• Transaction reference or confirmation number issued by the payment provider.

Gameplay and Behavioural Data

ac65 collects data about how you interact with the platform, including:

• Game sessions played, bets placed, amounts wagered, and outcomes.
• Sports betting markets selected and betting history.
• Bonus and promotion claims, wagering progress, and eligibility status.
• Session duration, login frequency, and time-of-day activity patterns.

This behavioural data is used for responsible gaming monitoring, fraud detection, platform personalisation, and product improvement. It is not shared with third-party advertisers.

Technical and Device Data

When you access ac65 via web browser or mobile device, we automatically collect certain technical information, including your IP address, device type and model, operating system, browser type and version, referring URL, and approximate geographic location (derived from IP address, not GPS). This data is used for security analysis, regional access management, and platform optimisation.

ac65 uses the personal data we collect exclusively for the purposes described in this section. We do not use your data for purposes that are incompatible with these stated objectives without first obtaining your explicit consent.

Responsible Gaming Monitoring

ac65 uses gameplay behavioural data — including session length, deposit frequency, loss patterns, and time-of-day activity — to proactively identify players who may be exhibiting signs of problem gambling. Where our systems flag potential concern, our responsible gaming team may reach out to the relevant player to offer support, tools, or information. This monitoring is conducted in the best interest of our players and does not result in any adverse account action unless requested by the player themselves.

Automated Decision-Making

ac65 uses automated systems for fraud detection and risk scoring. These systems analyse transaction patterns, device fingerprints, and login behaviour to identify potentially suspicious activity. Where an automated risk assessment triggers an account review, a human member of the ac65 Trust & Safety team will always review the case before any account action is taken. No player account is suspended, restricted, or closed solely on the basis of automated processing without human oversight.

ac65 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary to fulfil the stated purpose.

Service Providers and Technology Partners

ac65 works with a carefully selected group of third-party service providers who support the operation of our platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Tap, SureCash, and bank transfer partners receive transaction data necessary to process your deposits and withdrawals.
• Game providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session data necessary to power their games within the ac65 environment.
• KYC verification services: Identity document verification may be processed by a third-party KYC technology provider under strict data processing agreements that prohibit secondary use of your data.
• Cloud infrastructure and hosting: ac65's platform is hosted on enterprise-grade cloud infrastructure. Hosting providers process data solely as instructed by ac65 and have no independent right to access or use player data.
• Analytics and platform monitoring tools: Anonymised, aggregated platform usage data may be processed by analytics partners to help ac65 improve platform performance and user experience.

All third-party service providers engaged by ac65 are required to enter into data processing agreements that bind them to confidentiality obligations and restrict them from using player data for any purpose other than the specific service they provide to ac65.

Legal and Regulatory Disclosure

ac65 may disclose personal data to law enforcement authorities, regulatory bodies, or other government agencies where required to do so by applicable law, court order, or in connection with an active investigation into suspected money laundering, terrorist financing, fraud, or other criminal activity. In such cases, ac65 will disclose only the minimum data required to satisfy the legal obligation and will notify the affected player where legally permitted to do so.

Business Transfers

In the event that ac65 undergoes a business restructuring, merger, acquisition, or sale of assets, personal data held by ac65 may be transferred to the acquiring or successor entity as part of that transaction. In such an event, ac65 will notify registered players via their registered contact details and the successor entity will be required to honour the commitments made in this Privacy Policy.

ac65 uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep you securely logged in during your session, and to gather anonymised analytics that help us improve the ac65 experience for all players in Bangladesh.

Types of Cookies We Use

What We Do Not Use

ac65 does not use third-party advertising cookies, retargeting pixels, social media tracking scripts (such as Facebook Pixel or Google Ads tags), or any other technology designed to track your browsing behaviour across external websites for advertising purposes. Our cookie footprint is limited strictly to what is necessary to operate the platform safely and efficiently.

Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your ac65 account, as these cookies are required for authentication and session security. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and the Samsung Internet browser commonly used on devices popular in Bangladesh.

ac65 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applied to the main categories of personal data we hold are outlined below.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where anonymisation is not technically feasible for a specific data category, the data is archived in an access-restricted environment and is not used for any active processing purpose during the archival period.

If you request deletion of your ac65 account, we will action that request promptly. However, please note that we are required by law to retain certain records — particularly KYC documents and financial transaction data — for the statutory periods outlined above, regardless of account closure. We will inform you of any such retention obligations at the time of your deletion request.

ac65 implements a layered security architecture to protect player data against unauthorised access, disclosure, alteration, and destruction. Our security programme is reviewed and updated on a regular basis to address evolving threats and to reflect best practices in online platform security.

Technical Safeguards

• TLS/SSL encryption on all data transmitted between your device and ac65 servers — look for the padlock icon in your browser's address bar.
• AES-256 encryption for sensitive data at rest, including KYC documents and payment method identifiers.
• Bcrypt password hashing with per-user salt — your password is never stored in a readable format.
• SMS OTP two-factor authentication available for all player accounts, automatically triggered on unrecognised device logins.
• Rate limiting and brute-force protection on all login and account recovery endpoints.
• Web Application Firewall (WAF) and DDoS mitigation on all public-facing infrastructure.

Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis and governed by role-based access controls.
• All ac65 personnel and contractors with access to personal data are bound by confidentiality obligations.
• Security awareness training is provided to all personnel who handle personal data.
• ac65 conducts periodic internal security reviews and vulnerability assessments of its platform infrastructure.

Security Incident Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, ac65 will notify impacted players without undue delay, and in any case within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences of the breach, and the measures taken or proposed to address it.

As a registered player on ac65, you have the following rights in relation to your personal data. These rights may be exercised at any time by contacting our support team at [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of the personal data ac65 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the legal basis), or where you object to processing and there is no overriding legitimate interest. Note that certain data categories are subject to mandatory retention periods and cannot be deleted on request — ac65 will clearly explain any such limitations at the time of your request.
• Right to Restriction of Processing: You may request that ac65 restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: For data you have provided to ac65 on the basis of consent or contractual necessity, you have the right to receive that data in a portable format and to transmit it to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on ac65's legitimate interests, in which case ac65 will assess whether its interests override your rights in the specific context.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

ac65 will respond to all verified data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window. ac65 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

To protect the security of your account and the personal data of all our players, ac65 will verify your identity before processing any data rights request. This verification will typically involve confirming details associated with your registered account.

If you have any questions, concerns, or complaints about how ac65 handles your personal data, or if you wish to exercise any of the privacy rights described in Section 7, please contact our support team using the details below. We take all privacy enquiries seriously and will respond promptly.

Contact Details

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 via the in-account support widget for registered players
• WhatsApp: Available 08:00 – 00:00 Bangladesh Standard Time (BST, UTC+6)

ac65 serves players across all eight divisions of Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. Our support team is equipped to handle privacy enquiries from players throughout the country and will communicate with you in English.

Changes to This Privacy Policy

ac65 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new legal or regulatory requirements, or improvements to our platform. When material changes are made, we will notify registered players via their registered mobile number or email address at least 14 days before the revised policy takes effect. The "Effective" date at the top of this page will be updated to reflect the date of the latest revision.

Your continued use of ac65 following notification of a Privacy Policy update constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you must stop using the platform and may request account closure in accordance with the procedure described in our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how ac65 protects and processes your personal data. The most current version of the Privacy Policy will always be available at ac65.app/privacy-policy.