acy365 Privacy Policy
Your privacy matters to us. This policy explains exactly what personal data acy365 collects, how it is used, how it is protected, and what rights you hold as a Bangladesh player.
1. Introduction
This Privacy Policy ("Policy") describes how acy365 ("the Company", "we", "us", "our"), operator of the online betting and casino platform at acy365.app ("the Platform"), collects, uses, stores, shares, and protects the personal data of individuals who visit, register on, or use the Platform ("you", "your", "the Player").
By creating a player account or otherwise using the acy365 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to any part of this Policy, you must not register an account or use the Platform.
This Policy forms part of the acy365 Terms and Conditions and should be read together with them. In the event of any conflict between this Policy and the Terms and Conditions, the Terms and Conditions shall prevail. This Policy applies to all personal data collected through the Platform, including data collected via web browsers, mobile devices, payment integrations, and customer support correspondence.
acy365 reserves the right to amend this Policy at any time. Material changes will be communicated by notice on the Platform or by email to registered players. Continued use of the Platform following any update constitutes your acceptance of the revised Policy.
Your Data at a Glance
Identity Data
Full name, date of birth, nationality, and government-issued ID details collected for KYC and age verification.
Contact Data
Mobile number, email address, and residential address used for account communication and support.
Payment Data
bKash, Nagad, Rocket, bank account references used to process BDT deposits and withdrawals securely.
Usage Data
Betting history, game activity, session duration, device type, and IP address recorded for platform analytics.
Cookie Data
Session cookies and analytics tokens used to maintain login state and improve Platform performance.
Support Data
Emails and chat logs exchanged with acy365 support retained to resolve disputes and improve service quality.
2. Data We Collect
2.1 Information You Provide Directly
When you register an account, make a deposit or withdrawal, contact support, or interact with any feature on the acy365 Platform, you voluntarily provide personal data including:
- Full legal name, date of birth, and nationality.
- Residential address, mobile phone number, and email address.
- Government-issued identity document details (National ID, passport, or driver's licence number) submitted during Know Your Customer (KYC) verification.
- Payment account details including bKash wallet number, Nagad account, Rocket account, Upay account, bank account number, and card details where applicable.
- Username and password chosen at registration (passwords are stored in hashed, non-reversible form).
- Any information submitted in support correspondence, dispute notices, or responsible gaming requests.
2.2 Information Collected Automatically
When you access the acy365 Platform, certain technical and behavioural data is collected automatically by our systems, including:
- IP address, device type, operating system version, and browser type.
- Pages visited, links clicked, session start and end times, and time spent on each section of the Platform.
- Betting activity including markets accessed, stakes placed, odds accepted, and game rounds played.
- Geolocation data at the country or city level derived from your IP address.
- Referral source — how you arrived at the Platform (direct URL, search engine, or referral link).
2.3 Cookies and Tracking Technologies
acy365 uses cookies, pixel tags, and similar tracking technologies to operate and improve the Platform. Strictly necessary cookies are required for account login and session management and cannot be disabled. Analytics cookies help us understand how players navigate the Platform so we can improve usability. You may configure your browser to reject non-essential cookies; however, doing so may affect the functionality of certain Platform features. acy365 does not serve third-party advertising cookies or sell cookie data to marketing networks.
3. How We Use Your Data
acy365 processes your personal data only for legitimate, specified purposes. The following table summarises the primary purposes for which your data is used and the legal basis for each processing activity.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact | Contract performance |
| Age and identity verification (KYC) | Identity, ID documents | Legal obligation |
| Processing deposits and withdrawals | Payment, identity | Contract performance |
| Fraud prevention and AML compliance | Identity, payment, usage | Legal obligation |
| Customer support and dispute resolution | Identity, contact, support | Legitimate interest |
| Responsible gaming monitoring | Usage, betting history | Legal obligation |
| Platform analytics and improvement | Usage, cookie | Legitimate interest |
| Sending account notifications | Contact | Contract performance |
| Sending promotional communications | Contact | Consent |
Marketing communications: acy365 will only send you promotional emails or SMS messages if you have opted in to receive them. You may withdraw your marketing consent at any time by contacting [email protected] or updating your account notification preferences.
4. Data Sharing & Disclosure
acy365 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is shared only in the following strictly defined circumstances:
4.1 Service Providers
acy365 engages trusted third-party service providers to support the operation of the Platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and local bank partners), identity verification providers, fraud detection services, cloud hosting infrastructure providers, and customer support platform operators. Each service provider receives only the minimum personal data required to perform their specific function and is contractually obligated to process that data solely on acy365's instructions and in accordance with applicable data protection standards.
4.2 Game Providers
When you play games supplied by third-party studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — limited technical data (such as a pseudonymous player token, session identifier, and stake/result data) is transmitted to the game provider to facilitate gameplay and record results. Game providers do not receive your full name, contact details, or payment information. Their use of session data is governed by their own data processing agreements with acy365.
4.3 Legal and Regulatory Disclosure
acy365 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required to do so by applicable law, court order, or binding legal process. In such cases, acy365 will disclose only the data strictly required to comply with the legal obligation and will notify the affected player where permitted by law.
4.4 Business Transfers
In the event that acy365 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by acy365 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the privacy implications prior to the effective date of the change where reasonably practicable.
5. Data Retention
acy365 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
- Active account data (identity, contact, payment details): Retained for the duration of the active player relationship.
- Transaction and betting records: Retained for a minimum of 5 years following the date of each transaction, in line with anti-money laundering record-keeping requirements.
- KYC and identity verification documents: Retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
- Customer support correspondence: Retained for a minimum of 3 years from the date of the last interaction.
- Analytics and usage data: Retained in aggregated, anonymised form indefinitely for Platform improvement purposes. Individual-level usage logs are deleted or anonymised within 24 months.
- Self-exclusion records: Retained permanently to prevent re-registration during the exclusion period and to maintain an accurate compliance record.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically immediate (for example, data held in encrypted backup archives), acy365 ensures that backup data is overwritten within its normal backup rotation cycle.
6. Data Security
All data transmitted between your device and the acy365 Platform is protected by industry-standard SSL (Secure Sockets Layer) encryption. acy365 implements a combination of technical, administrative, and physical security controls to protect player data against unauthorised access, disclosure, alteration, or destruction.
acy365's security measures include, but are not limited to, the following:
- SSL/TLS encryption on all Platform connections to protect data in transit.
- Passwords stored using one-way cryptographic hashing algorithms — acy365 staff cannot view plain-text passwords at any time.
- Access controls ensuring that staff can only access player data necessary for their specific job function.
- Regular security assessments and vulnerability monitoring of Platform infrastructure.
- Two-factor authentication (2FA) available to all registered players as an additional account security layer.
- Encrypted storage of sensitive documents submitted during KYC verification.
While acy365 takes every reasonable precaution to safeguard your data, no system is entirely immune to security threats. In the event of a data security incident that may materially affect your rights, acy365 will notify affected players as promptly as reasonably practicable and will take appropriate remedial steps. If you believe your acy365 account has been compromised, contact [email protected] immediately.
7. Your Privacy Rights
As a player on the acy365 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact acy365 at [email protected] with the subject line "Privacy Rights Request" and include your registered username and a clear description of the right you wish to exercise.
7.1 Right of Access
You have the right to request a copy of the personal data acy365 holds about you. acy365 will provide a response within 30 days of receiving a valid access request, subject to identity verification.
7.2 Right to Rectification
If any personal data acy365 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Certain data corrections (such as name changes) may require supporting documentation. You may also update contact information directly within your account settings.
7.3 Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that acy365 is required by law to retain certain data (such as transaction records and KYC documents) for defined periods regardless of a deletion request. In such cases, acy365 will delete all data not subject to a legal retention obligation and inform you of what data must be retained and why.
7.4 Right to Restrict Processing
You have the right to request that acy365 restrict its processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis for processing. During the restriction period, acy365 will store your data but not actively process it beyond what is required by law.
7.5 Right to Withdraw Consent
Where acy365 processes your data based on your consent (for example, to send marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw marketing consent, update your preferences in your account settings or email [email protected].
8. Age Restriction
🔞 21+ Only: The acy365 Platform is strictly for individuals aged 21 years and above. acy365 does not knowingly collect personal data from any individual under the age of 21. If acy365 discovers that an account has been registered by or on behalf of a person under 21, the account will be immediately closed, all data deleted (subject to legal retention obligations), and any funds returned to the source payment method following a compliance review. If you believe a minor has registered an account on the Platform, please notify acy365 immediately at [email protected].
9. Third-Party Links
The acy365 Platform may contain references to third-party game providers and payment partners whose own privacy practices are independent of acy365. This Policy applies solely to data collected and processed by acy365 through the Platform. acy365 is not responsible for the privacy practices of third-party service providers, game studios, or payment processors. Players are encouraged to review the privacy policies of any third-party services they interact with in connection with their acy365 account.
10. Changes to This Policy
acy365 may update this Privacy Policy periodically to reflect changes in data processing practices, Platform features, or applicable legal requirements. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Where a change is material — meaning it significantly affects how your data is used or your rights in respect of that data — acy365 will provide advance notice by email to your registered address or by a prominent notice on the Platform, no less than 14 days before the change takes effect.
If you disagree with any changes to this Policy, you should stop using the Platform and contact [email protected] to request account closure. Continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.
11. Contact & Privacy Requests
For all privacy-related enquiries, data access requests, rectification requests, or complaints about how acy365 handles your personal data, please contact the acy365 support team. All privacy requests are handled in strict confidence and in accordance with this Policy.
Privacy Contact Email: [email protected]
When submitting a privacy request, please include your registered username, the nature of your request (e.g., "Data Access Request", "Erasure Request", "Marketing Opt-Out"), and sufficient information for acy365 to verify your identity before processing the request. acy365 aims to acknowledge all privacy requests within 48 hours and to resolve them within 30 days. If a request is complex or involves a high volume of data, acy365 may extend this period by up to an additional 30 days and will notify you of the extension with reasons.
If you feel that acy365 has not adequately addressed your privacy concern, you retain the right to escalate your complaint through any applicable legal remedy available to you under applicable law in your jurisdiction.
Continue Exploring acy365
Now that you have reviewed the acy365 Privacy Policy, you can explore the Platform with confidence. Log in to your account, browse the cricket sportsbook, play live casino games, or check the FAQ if you have any remaining questions about how your data is handled.