ac68 Privacy Policy

ac68 is Bangladesh's trusted online betting and casino platform, offering sports betting, live casino, slots, and crash games to registered members. We understand that the personal information you share with us carries significant value and trust, and we take our responsibility to protect that information seriously.

This Policy applies to all personal data collected through the ac68 website at ac68.io, through any mobile-optimised browser interface, and through any interactions with our customer support team via email or live chat. It applies to all current and former registered members, as well as visitors who browse the platform without registering.

This Policy has been prepared in accordance with general international best practices for data protection in the digital entertainment sector. ac68 is committed to handling all personal data with transparency, fairness, and accountability.

ac68 collects personal data in three primary ways: information you provide directly to us, information generated automatically through your use of the platform, and information obtained from third-party service providers where applicable.

Information You Provide Directly:

• Registration data: Full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and phone number.
• Identity verification documents (KYC): National ID card, passport, driving licence, proof of address, and payment method verification documents submitted during the KYC process.
• Financial data: bKash wallet number, Nagad number, Rocket number, Upay number, bank account details, and USDT wallet addresses used for deposits and withdrawals.
• Communications: Messages, complaints, and support requests submitted to ac68 customer support via email at [email protected] or via live chat.

Information Generated Automatically:

• IP address and approximate geolocation at the time of login and during active sessions.
• Device type, operating system, and browser type and version.
• Session data including login timestamps, session duration, pages visited, and game activity logs.
• Betting and gaming history including wager amounts, game types, outcomes, and transaction records.
• Cookies, pixel tags, and local storage data as described in Section 6 of this Policy.

ac68 uses the personal data it collects for the following specific and legitimate purposes:

• Account creation and management: To register your account, verify your identity, manage your membership, and maintain accurate records of your account activity.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Bank Transfer, and USDT, and to maintain accurate financial records associated with your account.
• Identity and age verification: To verify that you are at least 21 years of age and to confirm your identity before processing withdrawals, in accordance with our KYC obligations and responsible gaming commitments.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, multi-accounting, and other activities that violate our Terms and Conditions or applicable law.
• Customer support: To respond to your queries, complaints, and support requests submitted via email or live chat, and to maintain records of all communications for quality assurance and dispute resolution purposes.
• Regulatory compliance: To comply with anti-money laundering (AML) obligations, responsible gaming requirements, and any other applicable legal or regulatory requirements.
• Platform improvement: To analyse aggregated usage data in order to improve the performance, features, and user experience of the ac68 platform.
• Responsible gaming monitoring: To monitor betting patterns and account activity in order to identify members who may be exhibiting signs of problem gambling, and to take appropriate action including offering self-exclusion tools.
• Communications: To send you transactional emails relating to your account activity (deposits, withdrawals, security alerts) and, where you have provided consent, promotional communications about ac68 offers and features.

ac68 processes your personal data on one or more of the following lawful bases:

• Contractual necessity: Processing is necessary to perform the contract between you and ac68 — specifically to provide the betting and gaming services you have registered to use, and to manage your account and financial transactions.
• Legal obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, age verification duties, and fraud prevention reporting.
• Legitimate interests: Processing is necessary for the legitimate interests of ac68, including the prevention of fraud and abuse, the security of our platform, the improvement of our services, and the resolution of disputes — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent (for example, the sending of promotional marketing communications), you have provided that consent explicitly and may withdraw it at any time as described in Section 3.

ac68 does not sell, lease, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients, and only to the extent necessary for the specified purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and USDT network processors — for the purpose of processing your deposits and withdrawals. These providers receive only the financial data necessary to complete the transaction.
• Game providers: Certified third-party game developers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — for the purpose of delivering the game content you access on the platform. Game providers receive anonymised session tokens rather than directly identifiable personal data where technically feasible.
• Identity verification services: Third-party KYC and identity verification service providers engaged by ac68 to assist in the verification of identity documents submitted by members during the KYC process.
• IT and security service providers: Cloud hosting providers, cybersecurity firms, and platform infrastructure partners engaged by ac68 to maintain the security and availability of the platform. All such providers are bound by strict data processing agreements.
• Legal and regulatory authorities: ac68 may disclose personal data to law enforcement agencies, financial intelligence units, or other applicable regulatory bodies where required to do so by law, court order, or in connection with the investigation of suspected financial crime or fraud.

ac68 uses cookies and similar technologies — including session tokens, local storage, and web beacons — to operate and improve the platform. The following categories of cookies may be set when you use ac68.io:

You may manage or disable non-essential cookies through your browser settings. Note that disabling functional cookies may affect certain platform features such as saved preferences. Strictly necessary cookies cannot be disabled as they are essential to the secure operation of your account.

ac68 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the ac68 servers.
• Encryption of sensitive data fields — including passwords, payment details, and identity document images — at rest in our database systems.
• Strict role-based access controls ensuring that only authorised ac68 personnel with a legitimate need to process specific categories of data can access those records.
• Regular independent security audits and penetration testing of the ac68 platform infrastructure.
• Continuous monitoring for suspicious access patterns, unusual login behaviour, and potential data breach indicators.
• Incident response procedures to detect, contain, and notify relevant parties of any data security incidents within a reasonable timeframe.

ac68 retains personal data only for as long as is necessary to fulfil the purposes for which it was originally collected, or for as long as is required by applicable law or regulation. The following general retention principles apply:

• Active account data: Personal data associated with an active ac68 account is retained for the duration of the account's active status.
• Closed account data: Following account closure — whether initiated by the member or by ac68 — personal data is retained for a minimum period of five years from the date of closure, in order to comply with anti-money laundering record-keeping requirements and to facilitate the resolution of any disputes or regulatory inquiries that may arise after closure.
• KYC documents: Identity verification documents submitted during the KYC process are retained for a minimum of five years following the date of submission or account closure, whichever is later.
• Financial transaction records: Records of all deposits, withdrawals, and betting transactions are retained for a minimum of seven years for financial compliance purposes.
• Customer support communications: Email and live chat records are retained for a period of three years from the date of the most recent interaction.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ac68's internal data deletion procedures.

As a data subject whose personal information is processed by ac68, you hold the following rights with respect to your data. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your ac68 account.

ac68 will respond to all data subject rights requests within seven business days of receipt. In some cases — particularly where requests are complex or involve large volumes of data — the response period may be extended by a further fourteen business days, in which case ac68 will notify you of the extension and the reasons for it.

The ac68 platform is strictly intended for adults aged 21 and above. ac68 does not knowingly collect, process, or store personal data belonging to any person under the age of 21. The registration process includes mandatory age verification steps designed to prevent underage access.

If ac68 becomes aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation during registration or by any other means — ac68 will immediately suspend the relevant account, delete all associated personal data (subject to any legal obligations to retain records relating to potential underage gambling incidents), and take appropriate steps to prevent further access.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account with ac68, please contact our support team immediately at [email protected]. We take underage gambling extremely seriously and will act promptly on any such notification.

As an online platform operating across multiple jurisdictions, ac68 may process and store personal data on servers located outside of Bangladesh. Where personal data is transferred to and processed in a jurisdiction other than Bangladesh, ac68 takes steps to ensure that an adequate level of data protection is maintained.

These steps include entering into appropriate data transfer agreements with the relevant service providers and ensuring that all third-party recipients of personal data are subject to binding contractual obligations that meet the data protection standards set out in this Policy.

By using the ac68 platform and registering an account, you acknowledge and consent to the transfer of your personal data to ac68's service providers and infrastructure partners as described in this Policy, subject to the safeguards outlined above.

The ac68 platform may contain references to third-party game providers and payment service partners. While ac68 takes care to work only with reputable partners, we have no control over the privacy practices of third-party websites or services that operate independently of the ac68 platform.

This Privacy Policy applies solely to personal data collected and processed by ac68 through the ac68.io platform. It does not apply to any third-party websites, applications, or services. ac68 encourages you to review the privacy policies of any third-party services you interact with in connection with your use of the ac68 platform.

ac68 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When a material change is made to this Policy, ac68 will update the "Last Updated" date at the top of this document and, where the change is significant, notify registered members via email or a platform notification.

Your continued use of the ac68 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should discontinue use of the platform and contact [email protected] to request account closure.

We recommend that you review this Privacy Policy periodically to stay informed of how ac68 is protecting your personal information. All previous versions of this Policy are archived and available upon written request to [email protected].

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which ac68 processes your personal data, please contact our Data Support team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.

Email: [email protected]

Platform: ac68.io

Response Time: Within 7 business days of receipt of your written request.