Privacy Policy — acs365

1. Introduction

acs365 ("we", "us", "our", or the "Platform") operates the online casino and sports betting service accessible at acs365.club. We are committed to protecting the personal data of every player who registers and uses our platform, particularly those based in Bangladesh. This Privacy Policy sets out, in clear and formal terms, our practices regarding the collection, use, storage, disclosure, and protection of personal data.

This policy applies to all individuals who visit the acs365 website, register an account, make deposits or withdrawals, participate in promotions, or otherwise interact with the platform in any capacity. It covers data processed through all interfaces of the acs365 service, including the desktop website and mobile browser experience.

We encourage you to read this policy in its entirety before using the acs365 platform. If you have questions about any provision herein, please contact our support team using the contact details provided in Section 13 before proceeding.

2. Personal Data We Collect

acs365 collects the following categories of personal data from players and prospective players:

2.1 Identity Data

• Full legal name as it appears on your government-issued identity document
• Date of birth
• Gender (where voluntarily provided)
• Nationality
• Photograph or scan of government-issued identity document (National ID card, passport, or driving licence) submitted during KYC verification

2.2 Contact Data

• Mobile phone number (including bKash/Nagad registered number where applicable)
• Email address
• Residential address including district, division, and postal code within Bangladesh

2.3 Financial Data

• Mobile financial service account details (bKash, Nagad, Rocket, Upay account numbers registered in your name)
• Bank account details (where bank transfer is used as a deposit or withdrawal method)
• Partial card details (last four digits and card type for Visa/Mastercard transactions — full card numbers are never stored by acs365)
• Deposit and withdrawal history including amounts, timestamps, and payment method used
• Account balance and wagering history

2.4 Account & Activity Data

• Username and encrypted password hash
• Account registration timestamp and IP address at registration
• Login history including timestamps, IP addresses, and device fingerprints
• Game play history, bet records, and session durations
• Bonus claims, wagering progress, and promotional participation history
• Responsible gaming preferences including deposit limits, session limits, and self-exclusion status

2.5 Technical Data

• IP address and approximate geolocation data derived from IP
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Referring URL and pages visited on the acs365 platform
• Cookie identifiers and session tokens (see Section 9)

2.6 Communications Data

• Content of live chat conversations with acs365 support agents
• Email correspondence with the acs365 support team
• Feedback, complaints, and dispute records

3. How We Collect Your Data

acs365 collects personal data through the following channels and mechanisms:

3.1 Direct Collection

Data you provide directly to us when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, participate in a promotion, or respond to a survey. This includes all information entered into forms, uploaded as documents, or communicated via live chat or email.

3.2 Automated Collection

Data collected automatically as you interact with the acs365 platform, including through cookies, web beacons, pixel tags, server logs, and similar tracking technologies. This data is collected whether or not you are logged in to an account and includes browsing behaviour, session duration, and technical device information.

3.3 Third-Party Sources

In certain circumstances, acs365 may receive personal data about you from third-party sources, including:

• Payment processors such as bKash, Nagad, Rocket, Upay, and card networks, who share transaction confirmation data and, where required for fraud prevention, limited account holder verification data.
• Identity verification services used during the KYC process to cross-reference the documents you submit against third-party databases.
• Fraud prevention and anti-money-laundering (AML) screening providers who may flag accounts or transactions against watchlists or risk databases.
• Analytics providers who aggregate anonymised traffic and behavioural data to help acs365 understand platform usage patterns.

4. Purposes of Processing

acs365 processes your personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which each category of data is used:

acs365 does not use your personal data for automated decision-making that produces significant legal effects without human review, nor do we use your data to build profiles for sale to third-party advertisers.

5. Legal Basis for Processing

acs365 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the account agreement, including account management, payment processing, and the delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including age verification requirements, anti-money-laundering obligations, and fraud reporting duties.
• Legitimate interests: Processing carried out for acs365's legitimate operational interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent to send promotional communications or to use non-essential cookies. You may withdraw consent at any time by contacting our support team or adjusting your cookie preferences. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

6. Sharing Your Personal Data

acs365 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

6.1 Payment Processors

We share financial and identity data with our payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard — to facilitate the processing of deposits and withdrawals. These partners operate under their own privacy policies and are contractually required to handle your data securely and in compliance with applicable financial regulations.

6.2 Game Providers

Third-party game studios and content providers integrated into the acs365 platform — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited technical and account data (such as a player session token or anonymised player ID) necessary to deliver the game experience. These providers do not receive your full name, contact details, or financial information.

6.3 Identity Verification & AML Providers

During the KYC process, we may share identity documents and personal details with specialist third-party identity verification and AML screening services. These providers are bound by strict confidentiality and data processing agreements with acs365.

6.4 Legal and Regulatory Authorities

acs365 may disclose personal data to law enforcement agencies, financial intelligence units, or other governmental authorities when required to do so by applicable law, court order, or regulatory direction. We may also disclose data where we believe disclosure is necessary to protect the rights, property, or safety of acs365, its players, or the public.

6.5 Service Providers

We engage third-party service providers to support our operations, including cloud hosting providers, customer support software vendors, analytics platforms, and email service providers. These providers act as data processors on our behalf under contractual terms that prohibit them from using your data for any purpose other than providing the contracted service to acs365.

7. Data Retention

acs365 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, in accordance with financial record-keeping requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the transaction, consistent with anti-money-laundering regulatory requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the verification process, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer if the communication relates to an unresolved dispute or legal matter.
• Technical and log data: Retained for up to twelve (12) months, after which it is anonymised or deleted.
• Marketing consent records: Retained for as long as consent remains active plus three (3) years following withdrawal of consent.

Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for analytical and statistical purposes.

8. Data Security

acs365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your browser or device and the acs365 servers.
• Encryption at rest for sensitive data stored on acs365 servers, including identity documents and financial information.
• Password hashing using industry-standard one-way cryptographic algorithms — plain-text passwords are never stored.
• Role-based access controls ensuring that acs365 staff can only access personal data that is strictly necessary for their specific job function.
• Regular security audits and penetration testing conducted by independent third-party security professionals.
• Intrusion detection and monitoring systems operating continuously across acs365 infrastructure.
• Two-factor authentication (2FA) available to players for account login and withdrawal requests.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. While acs365 takes every reasonable precaution to protect your data, we cannot provide an absolute security guarantee. In the event of a data breach that is likely to result in a risk to your rights and freedoms, acs365 will notify affected players promptly in accordance with applicable data protection obligations.

9. Cookies & Tracking Technologies

acs365 uses cookies and similar tracking technologies to operate and improve the platform experience. A cookie is a small text file placed on your device by a website server. The cookies used by acs365 fall into the following categories:

9.1 Strictly Necessary Cookies

These cookies are essential for the platform to function correctly. They enable core features such as session management, login authentication, security token validation, and payment gateway integration. These cookies cannot be disabled without impairing your ability to use the platform.

9.2 Functional Cookies

Functional cookies remember your preferences and settings — such as your selected language, display preferences, and responsible gaming configurations — so that you do not need to re-enter them each time you visit. These cookies enhance your experience but are not strictly required for platform operation.

9.3 Analytics Cookies

With your consent, acs365 uses analytics cookies to collect aggregated, anonymised data about how players navigate and use the platform. This data helps us understand which features are most valuable, identify usability issues, and guide platform improvements. Analytics data is not used to identify individual players.

9.4 Managing Cookies

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please note that disabling strictly necessary cookies will affect your ability to use the acs365 platform. For functional and analytics cookies, you may withdraw consent at any time without affecting your access to core platform features.

10. Your Data Rights

As a player on the acs365 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at the address provided in Section 13. We will respond to all valid requests within thirty (30) days of receipt.

• Right of Access: You have the right to request a copy of the personal data that acs365 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by acs365. You may update basic account information directly from your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that acs365 delete your personal data. Note that this right is subject to our legal obligations to retain data for specified minimum periods under financial regulations.
• Right to Restriction of Processing: You have the right to request that acs365 restrict the processing of your personal data in certain circumstances, such as while a dispute regarding accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to acs365 processing your personal data on the basis of legitimate interests, including profiling for marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11. Children and Minors

The acs365 platform is strictly intended for adults aged 18 years and older. We do not knowingly collect, process, or store personal data from individuals under the age of 18. If acs365 becomes aware that personal data has been collected from a minor, the relevant account will be immediately suspended, all associated data will be reviewed, and the personal data of the minor will be deleted without undue delay.

If you are a parent or guardian and believe that a minor under your care has registered an account on acs365 or provided personal data to the platform, please contact our support team immediately using the contact details in Section 13 so that we can take appropriate action.

12. Changes to This Privacy Policy

acs365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform operations. When material changes are made — those that significantly affect how we use your personal data or the rights available to you — we will notify registered players via the email address on file or through a prominent notice on the acs365 platform, no less than seven (7) days before the changes take effect.

Minor or clarificatory changes that do not affect the substance of the policy may be published without prior notice and will be effective immediately upon publication. The "Effective Date" displayed at the top of this page will always reflect the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how acs365 protects your data. Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the manner in which acs365 processes your personal data, please contact our dedicated data privacy support team. We are committed to resolving all privacy-related enquiries promptly and transparently.

For matters relating to your account security, responsible gaming tools, or self-exclusion requests, please visit our Responsible Gaming page. For the full terms governing your use of the platform, please review our Terms & Conditions.