aac365 Privacy Policy

1. Who We Are

aac365 ("aac365", "we", "us", "our") operates the online casino and sports betting platform accessible at https://aac365.org and its mobile-optimised version. aac365 acts as the data controller in respect of all personal data collected through the aac365 platform. If you have any questions about how aac365 handles your personal data, you may contact us at [email protected].

This Privacy Policy governs the collection, use, storage, sharing, and protection of personal data belonging to all users ("Player", "User", "you") of the aac365 platform, including visitors who have not yet registered an account. It forms an integral part of the aac365 Terms & Conditions.

2. Data We Collect

aac365 collects personal data through several channels, including account registration, identity verification, platform use, payment transactions, and direct communications with our support team. The categories of data we collect are as follows:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used for mandatory age verification — players must be 21 or older)
• Residential address, including district, division, and postcode
• Mobile phone number (used for account verification and optional two-factor authentication)
• Email address (used for account communications and support correspondence)
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements, or official correspondence)
• Proof of payment method ownership (screenshots or statements for bKash, Nagad, Rocket, or other registered payment accounts)
• Source of funds documentation where required by aac365's anti-money-laundering procedures

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references
• Payment method identifiers (e.g., registered bKash or Nagad mobile number — never full card numbers, which are processed by our payment partners)
• Bonus and promotion redemption history
• Account balance history and wagering activity records

2.4 Technical and Usage Data

• IP address and approximate geolocation (city/division level)
• Device type, operating system version, and browser type
• Session timestamps, page views, and navigation paths within the aac365 platform
• Game session data including game titles played, bet amounts, and session durations
• Crash logs and error reports used to diagnose and fix platform issues

2.5 Communications Data

• Records of correspondence between you and the aac365 support team, including live chat transcripts, email exchanges, and support ticket content
• Feedback, complaints, and dispute records
• Records of your marketing communication preferences (opt-in or opt-out)

3. How We Use Your Data

aac365 processes your personal data only for legitimate, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. Our primary purposes for processing personal data are:

• Account management: Creating, maintaining, and securing your aac365 player account, including authentication and access control.
• Age verification and KYC compliance: Confirming that you meet the 21+ age requirement and satisfying our Know Your Customer obligations.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, and maintaining accurate financial records.
• Service delivery: Providing access to casino games, sports betting markets (including BPL, IPL, and international cricket), slots, crash games, and all other platform features.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited behaviours. aac365 uses automated systems as well as manual review for this purpose.
• Responsible gaming: Monitoring player activity to identify signs of problem gambling and fulfilling our obligations under our Responsible Gaming policy, including enforcing self-exclusion requests and deposit limits.
• Customer support: Responding to your queries, complaints, and disputes in a timely and effective manner.
• Marketing communications: Sending you promotional offers, bonus notifications, and news about aac365 features — but only where you have given explicit consent. You may withdraw consent at any time by contacting support.
• Platform improvement: Analysing aggregated usage data to improve the aac365 platform, fix technical issues, and develop new features.
• Legal compliance: Fulfilling any legal obligations that require us to process, retain, or disclose personal data.

4. Legal Bases for Processing

aac365 processes your personal data on the following legal bases, depending on the specific purpose of the processing:

• Contractual necessity: Processing required to provide the services you have requested and to fulfil our obligations under the aac365 Terms & Conditions.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering and age verification requirements.
• Legitimate interests: Processing conducted for aac365's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — principally for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Sharing Your Data

aac365 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of third parties only to the extent necessary for the purposes described in this policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and other payment partners who process your deposit and withdrawal transactions. These providers operate under their own privacy policies and data protection obligations.
• Identity verification services: Third-party KYC providers who assist in verifying the identity documents you submit during account verification.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi whose game software is integrated into the aac365 platform. These providers may process limited technical data to deliver their games to you.
• IT and cloud infrastructure providers: Hosting, storage, and security service providers who support the operation of the aac365 platform under strict contractual data processing agreements.
• Legal and regulatory authorities: Law enforcement, regulatory bodies, or courts where disclosure is required by law or necessary to protect the rights and safety of aac365 or third parties.
• Professional advisers: Lawyers, auditors, and consultants engaged by aac365 on a confidential basis in connection with the operation of its business.

In all cases where aac365 shares data with third-party processors, we require those parties to maintain appropriate technical and organisational security measures and to use the data solely for the agreed purpose.

6. Data Retention

aac365 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the lifetime of your aac365 account and for a minimum of five years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• KYC documents: Retained for a minimum of five years from the date of submission or from account closure, whichever is later.
• Support communications: Retained for three years from the date of the most recent interaction.
• Marketing consent records: Retained until you withdraw consent, plus one year for audit purposes.
• Technical and usage logs: Retained for up to 24 months for security and fraud detection purposes, then deleted or anonymised.

When the retention period expires, aac365 will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual.

7. Cookies and Tracking Technologies

aac365 uses cookies and similar tracking technologies on the aac365 website and mobile platform to enhance your experience, maintain session security, and analyse usage patterns. The categories of cookies we use are:

• Essential cookies: Strictly necessary for the operation of the aac365 platform, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing core functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and game lobby filters to personalise your experience.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate and use the aac365 platform, helping us identify areas for improvement.
• Marketing cookies: Used only where you have provided explicit consent, to deliver relevant promotional content within the aac365 platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the aac365 platform. For further information about our use of cookies, please contact us at [email protected].

8. Data Security

aac365 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the aac365 platform
• Encrypted storage of sensitive data including KYC documents and financial records
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security audits and vulnerability assessments
• Optional two-factor authentication for player accounts, strongly recommended for all users
• Automated fraud detection and anomaly monitoring systems
• Staff training on data protection and information security practices

While aac365 employs robust security practices, no platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you believe your account security has been compromised, contact us immediately at [email protected].

9. International Data Transfers

aac365's platform and some of our third-party service providers may process or store data on servers located outside Bangladesh. Where personal data is transferred internationally, aac365 takes appropriate steps to ensure that adequate protections are in place, including entering into data processing agreements that incorporate recognised data transfer safeguards. By using the aac365 platform, you acknowledge and consent to such transfers where necessary for the delivery of our services.

10. Children and Minors

aac365 operates an age-restricted platform. Access is strictly limited to individuals who are 21 years of age or older. aac365 does not knowingly collect, process, or store personal data belonging to persons under the age of 21. If aac365 discovers or is notified that personal data of a minor has been collected, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on aac365, please notify us immediately at [email protected].

11. Your Privacy Rights

As a user of the aac365 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected]. aac365 will respond to all valid requests within 30 days.

12. Third-Party Links and Services

The aac365 platform integrates third-party game content from studios such as Pragmatic Play, Evolution Gaming, NetEnt, and others. While aac365 takes care to work only with reputable partners, we are not responsible for the privacy practices of third-party providers whose services are embedded in or linked from the aac365 platform. We encourage you to review the privacy policies of any third-party service providers whose products you access through aac365.

13. Marketing Communications

With your consent, aac365 may send you promotional communications about bonuses, new games, seasonal offers (such as Eid promotions, BPL cricket season offers, and Pohela Boishakh specials), and other aac365 news via email or SMS. You may opt out of marketing communications at any time by contacting support at [email protected] or by following the unsubscribe instructions included in any marketing message. Opting out of marketing communications will not affect your ability to use the aac365 platform or receive essential service-related communications.

14. Changes to This Policy

aac365 reserves the right to amend this Privacy Policy at any time. When we make material changes, we will update the version number and date at the top of this page. Where changes are significant, we may also notify you via email or a prominent notice within the aac365 platform. Your continued use of aac365 following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms.

15. Contact and Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the aac365 data team:

• Email: [email protected] (plain text only — not a clickable link)
• Response time: Within 30 days for formal privacy rights requests; within 24 hours for general privacy enquiries
• Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)