acc365 Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you register an acc365 account, you voluntarily provide us with personal information that is necessary to operate your account and deliver our services. This includes your full legal name as it appears on your Bangladeshi National ID card (NID) or passport, your date of birth, your registered mobile number, and the mobile money account (bKash, Nagad, Rocket, or Upay) or bank account number you intend to use for deposits and withdrawals.

If you contact acc365 support via live chat, you may also provide us with additional information relevant to your query. All support conversations are logged for quality assurance, fraud detection, and dispute resolution purposes.

1.2 Identity Verification Documents

To comply with our Know Your Customer (KYC) obligations and to process withdrawals above applicable thresholds, we may request copies of official identity documents. These include a scanned or photographed copy of your Bangladeshi NID card or passport (front and back), a recent utility bill, bank statement, or other document confirming your residential address, and a screenshot or confirmation showing your registered mobile money number matches your account registration details.

KYC documents are stored in encrypted form and are accessed only by authorised members of the acc365 compliance and fraud prevention team. They are never shared with third parties except where required by applicable law or as described in Section 4 of this policy.

1.3 Technical and Usage Data

When you access the acc365 platform, our servers automatically collect certain technical information. This includes your IP address, the type and version of browser or app you are using, your device operating system, the pages or game screens you visit within the Platform, the time and duration of your sessions, and error logs generated by the Platform during your use.

This technical data is collected primarily for security monitoring, fraud detection, and platform performance optimisation. It is not used to build advertising profiles and is not sold or shared with third-party advertising networks.

1.4 Transaction Data

Each deposit and withdrawal you make on acc365 generates a transaction record. This record includes the transaction amount in BDT, the payment method used (e.g., bKash, Nagad), the time and date of the transaction, the transaction reference number provided by the payment provider, and the resulting balance of your acc365 account. Transaction records are retained in accordance with our data retention schedule described in Section 5.

1.5 Gameplay Data

The acc365 platform logs detailed records of all bets placed, games played, and wagers settled on your account. This gameplay data is used to calculate winnings and losses, to detect collusion or match-fixing in sports betting, to ensure RNG integrity in casino games, and to comply with our responsible gaming monitoring obligations. Gameplay data associated with your account is not shared with third parties for commercial purposes.

2. How We Use Your Data

acc365 uses the personal data we collect for the following specific purposes:

Purpose	Data Used	Basis
Account registration and identity verification	Name, DOB, mobile number, NID / passport	Contractual necessity; legal obligation
Processing deposits and withdrawals	Payment method details, transaction records	Contractual necessity
Fraud prevention and security monitoring	IP address, device data, login history, transaction data	Legitimate interest; legal obligation
Responsible gaming monitoring	Gameplay data, deposit history, session data	Legal obligation; legitimate interest
Customer support	Contact details, support chat logs	Contractual necessity
Sending promotional communications (opt-in only)	Mobile number, email address	Consent
Platform performance and analytics	Technical / usage data (anonymised)	Legitimate interest
AML / KYC compliance	Identity documents, transaction records	Legal obligation

2.1 Marketing Communications

acc365 may send you promotional messages about bonuses, seasonal offers (such as Eid promotions, BPL cricket specials, and Pohela Boishakh offers), and new game launches via SMS or other messaging channels — but only if you have explicitly opted in to receive marketing communications during registration or through your account settings. You may withdraw your consent and unsubscribe from marketing messages at any time by updating your communication preferences in your account settings or by contacting acc365 support.

Withdrawing marketing consent does not affect the processing of data necessary to operate your account, process transactions, or fulfil our legal obligations.

2.2 Automated Decision-Making

acc365 uses automated processes to flag accounts for fraud review, to enforce responsible gaming limits, and to detect unusual betting patterns. Where an automated process results in a significant action against your account — such as a temporary suspension pending manual review — you have the right to request human review of that decision by contacting acc365 support within 14 days of being notified.

3. Cookies and Tracking

3.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language, whether you are logged in, and which pages you have viewed — to improve your experience on subsequent visits.

3.2 How acc365 Uses Cookies

acc365 uses the following categories of cookies on the Platform:

• Strictly Necessary Cookies: These cookies are essential for the acc365 platform to function. They manage your login session, maintain security tokens, and ensure the platform remembers your authentication state as you navigate between pages. These cookies cannot be disabled without rendering the platform non-functional.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the acc365 platform — such as which game categories are most popular and which pages generate the most support requests. This data is used solely to improve the Platform and is never linked back to individual players for advertising purposes.
• Preference Cookies: These cookies remember your platform preferences such as display settings and whether you have acknowledged any in-platform notices. They help us deliver a more personalised experience without requiring you to reconfigure settings on each visit.

acc365 does not use third-party advertising cookies, retargeting cookies, or any cross-site tracking technologies. You can control and delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies may affect your ability to log in and use the Platform correctly.

3.3 Local Storage

In addition to cookies, the acc365 platform may use browser local storage to cache certain game assets and user preferences for performance purposes. Local storage data is stored on your device only and is not transmitted to acc365 servers. You can clear local storage data through your browser's developer tools or by clearing site data in your browser settings.

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

To deliver the acc365 platform and its associated services, we engage a limited number of carefully selected third-party service providers. These providers may process certain personal data on our behalf and are contractually required to handle that data in accordance with this Privacy Policy and applicable data protection principles. Current categories of third-party processors engaged by acc365 include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and partner banks process transaction data to complete deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
• Game Providers: Third-party casino game studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi may receive anonymised session identifiers to manage game rounds. Game providers do not receive your full name, NID details, or payment information.
• Security and Fraud Detection: We use specialist third-party services for IP reputation analysis and bot detection. These services process IP addresses and device fingerprints only and do not receive personally identifiable information.
• Cloud Infrastructure: The acc365 platform is hosted on secure cloud infrastructure with servers located in secure data centres. Hosting providers operate under strict contractual data processing agreements.

4.2 Legal Disclosures

acc365 may disclose your personal data to government bodies, law enforcement agencies, or financial intelligence units if we are required to do so by applicable law, court order, or lawful regulatory request. Such disclosures are made only to the minimum extent required and are not subject to prior notice to the affected player where prohibited by law.

4.3 Business Transfers

In the event that acc365 or its operating entity undergoes a merger, acquisition, or sale of assets, player data held at the time of such a transaction may form part of the transferred assets. In such circumstances, acc365 will endeavour to notify affected players via their registered mobile numbers prior to any transfer of personal data, and players will retain their rights as described in Section 6 of this policy.

5. Data Retention

acc365 retains different categories of personal data for different periods, based on the purpose for which the data was collected and the legal obligations that apply:

• Account Registration Data: Retained for the lifetime of your acc365 account, plus a period of five years following account closure to satisfy our anti-money-laundering record-keeping requirements.
• KYC / Identity Documents: Retained for five years from the date of verification or from the date of account closure, whichever is later, in accordance with financial compliance obligations.
• Transaction Records: Retained for five years from the date of each transaction for financial audit and AML compliance purposes.
• Gameplay Records: Retained for two years from the date of play, after which they are anonymised and retained in aggregate form for statistical analysis only.
• Support Chat Logs: Retained for 18 months from the date of each conversation, after which they are permanently deleted.
• Technical / Session Logs: Retained for 90 days for security monitoring and fraud investigation purposes, then automatically purged.
• Marketing Consent Records: Retained for the duration of your opt-in status, plus two years following withdrawal of consent as evidence of your consent history.

Following the expiry of applicable retention periods, personal data is either permanently deleted from acc365 systems or irreversibly anonymised so that it can no longer be linked to any individual player.

6. Your Privacy Rights

As an acc365 player, you hold the following rights over your personal data. To exercise any of these rights, contact the acc365 support team via live chat or at [email protected]. All verified requests are responded to within 14 calendar days.

• Right of Access: You may request a copy of the personal data that acc365 holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For changes to core identity data (such as your legal name), we may require supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that we may be unable to comply with erasure requests where retention is required by our legal or regulatory obligations (e.g., AML record-keeping).
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, such as while the accuracy of the data is contested, or while an objection to processing is pending resolution.
• Right to Object: You may object to processing of your personal data where that processing is based on our legitimate interests. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: You may request a copy of personal data you have provided to acc365 in a structured, commonly used, machine-readable format (such as CSV or JSON), for the purposes of transferring it to another service provider.
• Right to Withdraw Consent: Where our processing of your personal data is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Security

7.1 Technical Safeguards

acc365 implements a multi-layered approach to data security. All data in transit between your device and our servers is encrypted using TLS 1.2 or higher. Data at rest — including your account information, KYC documents, and transaction records — is stored in encrypted form using AES-256 encryption. Our servers are hosted in access-controlled data centres with physical security, biometric authentication, and 24/7 monitoring.

Passwords stored on acc365 systems are never stored in plain text. They are processed using a strong, salted hashing algorithm. Even in the unlikely event of a database breach, your raw password would not be exposed.

7.2 Access Controls

Access to player personal data within the acc365 organisation is restricted on a strict need-to-know basis. Only authorised personnel in the compliance, fraud prevention, and customer support teams have access to personally identifiable player data, and only to the extent necessary to perform their functions. All internal data access is logged and subject to regular internal audit.

7.3 Incident Response

In the event of a personal data breach that poses a risk to your rights and freedoms, acc365 will notify affected players via their registered mobile numbers as promptly as practicable, and will take immediate steps to contain and remediate the breach. We maintain a documented incident response plan that is tested and reviewed on a regular schedule.

7.4 Your Role in Security

While acc365 implements robust technical and organisational security measures, the security of your account also depends on the steps you take to protect it. We strongly recommend that you use a strong and unique password for your acc365 account, that you never share your login credentials with anyone, and that you log out of your account when using a shared or public device. If you suspect any unauthorised access to your account, contact acc365 support immediately via live chat.

8. Contact and Policy Updates

8.1 How to Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or to the personal data acc365 holds about you, please contact our support team through any of the following channels. Response times are within four hours during Bangladesh Standard Time (BST, UTC+6) business hours; our live chat channel is available 24 hours a day, seven days a week.

• Live Chat: Available 24/7 via the live chat widget on the acc365 platform.
• Email: [email protected] (plain text — not a clickable link).
• WhatsApp: +880 1700-ACC365 (plain text — not a clickable link).

8.2 Updates to This Policy

acc365 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the Platform. When material changes are made, we will notify registered players via their registered mobile numbers and will update the version number and effective date at the top of this page. The current version of the Privacy Policy published on the acc365 website supersedes all previous versions. Your continued use of the acc365 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically so that you remain informed about how acc365 protects and manages your personal data. If you disagree with any change to this policy, please stop using the Platform and contact support to request account closure.