ac668 Privacy
Policy

ac668 collects personal information from you at different points during your relationship with the platform — at registration, during ongoing account use, when you contact support, and when you make financial transactions. The categories of data we collect, together with their source and purpose, are set out below.

1.1 — Registration Data

When you create an ac668 account, we collect the following information directly from you:

• Full legal name
• Date of birth (to verify you are 18 or older) 18+
• Registered mobile number (Bangladeshi operator)
• Username chosen by you
• Encrypted password (we never store passwords in plain text)
• Preferred language (English)

1.2 — Know Your Customer (KYC) Verification Data

Prior to your first withdrawal, ac668 conducts mandatory identity verification in accordance with anti-money laundering obligations. During KYC, we collect:

• A copy of a government-issued photo identification document — National Identity Card (NID), passport, or driving licence
• A selfie or live photo for facial verification against your identity document
• Proof of ownership of your registered payment method (e.g., a screenshot of your bKash or Nagad account showing your registered name and number)
• Residential address (city and district within Bangladesh)

1.3 — Transaction Data

For every deposit and withdrawal on ac668, we record:

1.4 — Betting and Gaming Activity Data

ac668 records all betting and gaming activity associated with your account, including sports bets placed, casino game sessions, stakes wagered, outcomes, bonus usage, and wagering progress. This data is used for account management, bonus compliance, fraud detection, and responsible gaming monitoring.

1.5 — Technical and Device Data

When you access ac668 via a web browser or mobile device, we automatically collect:

• IP address (used for geographic access checks and fraud detection)
• Device type, operating system, and browser version
• Session duration and page interaction data
• Referring URL (where you navigated from before arriving at ac668)

1.6 — Communications Data

If you contact ac668 via live chat or email, we retain a record of that communication — including the content of your messages, timestamps, and the name of the support agent who assisted you — for quality assurance and dispute resolution purposes.

ac668 processes your personal data only for purposes that are lawful, proportionate, and directly related to operating a safe and compliant betting and casino platform for players in Bangladesh. We do not use personal data for purposes that would be unexpected or disproportionate to the service you signed up for.

The primary purposes for which ac668 processes your personal data are:

• Account creation and management: To open, maintain, verify, and — where necessary — close your player account in accordance with our Terms & Conditions.
• Identity and age verification: To confirm you are at least 18 years of age 18+ and that the identity you registered under is genuine, as required by our KYC obligations.
• Payment processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and domestic bank transfer in Bangladeshi Taka (BDT).
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, multiple account abuse, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor betting patterns for indicators of problem gambling behaviour, enforce self-exclusion periods, apply deposit limits, and intervene where necessary to protect at-risk players.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide live chat and email assistance in English.
• Platform improvement: To analyse aggregated, anonymised usage data and improve the performance, stability, and user experience of ac668 for all players.
• Legal compliance: To meet our obligations under applicable law, including responding to lawful requests from competent authorities.
• Promotional communications: To send you account-specific promotional offers by email or in-app notification, where you have not opted out of such communications. You may withdraw this consent at any time via your account settings or by contacting support.

ac668 does not sell, rent, or commercially transfer your personal data to any third party. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 — Payment Service Providers

To process your deposits and withdrawals, ac668 shares relevant transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, or your selected domestic bank. These providers receive only the data required to execute and confirm the transaction. They are contractually prohibited from using your data for any purpose beyond payment processing.

3.2 — Game Technology Providers

ac668's live casino and slot games are powered by third-party game providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, and Microgaming. These providers receive only a pseudonymous player session identifier and game stake/outcome data necessary to operate the game. They do not receive your name, contact details, or payment information.

3.3 — Identity Verification Services

To fulfil KYC obligations, ac668 may use a third-party identity verification service to validate government-issued identification documents submitted during the verification process. Such providers are bound by strict data processing agreements and are not permitted to retain your identity documents beyond the verification window.

3.4 — Legal and Regulatory Disclosure

ac668 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by a lawful order, court direction, or applicable regulation. In such cases, ac668 discloses only the minimum data necessary to comply with the specific legal request.

3.5 — Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ac668's business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and your rights will be preserved under the terms of this Privacy Policy.

ac668 uses cookies — small text files stored on your device by your browser — to enable core platform functionality, maintain your session while logged in, and gather aggregated performance data to improve the service. The following table describes the categories of cookies used on ac668.

ac668 does not use advertising cookies, cross-site tracking cookies, social media pixel trackers, or any third-party behavioural profiling technology. You will never be retargeted on other websites based on your ac668 activity.

You may manage or disable non-essential cookies at any time through your browser's privacy settings. Please note that disabling essential session cookies will prevent you from logging into your ac668 account and using the platform. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, or your mobile browser of choice).

ac668 implements a layered security architecture to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Our technical and organisational security measures include, but are not limited to, the following:

• Transport Layer Security (TLS 1.2+): All data transmitted between your browser or mobile device and ac668 servers is encrypted in transit using TLS. An active SSL certificate is maintained at all times.
• AES-256 Encryption at Rest: Sensitive stored data — including identity documents, KYC records, and financial transaction histories — is encrypted at rest using AES-256 symmetric encryption.
• Password Hashing: Player passwords are never stored in plain text. ac668 uses a one-way cryptographic hashing algorithm with salting to store password credentials. Even ac668 staff cannot view your password.
• Role-Based Access Controls: Access to personal data within ac668's internal systems is granted on a strict need-to-know basis. Staff roles are assigned minimum required permissions, and all access to sensitive data is logged and audited.
• Two-Factor Authentication (2FA): Account login supports optional two-factor authentication via a one-time code sent to your registered mobile number. Players are strongly encouraged to enable 2FA for additional account protection.
• Automated Threat Detection: ac668's systems employ real-time monitoring to detect and respond to suspicious login attempts, unusual account activity, and potential data breach indicators.
• Regular Security Reviews: ac668 conducts periodic internal security assessments to identify and remediate vulnerabilities in its platform infrastructure.

Despite these measures, no digital platform can guarantee absolute security. If you have reason to believe that your ac668 account has been accessed without your authorisation, you must contact our support team immediately via live chat and change your password without delay. ac668 will investigate all reported security incidents promptly and take appropriate corrective action.

ac668 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, or to resolve disputes and enforce our agreements. The following retention periods apply to the main categories of data we hold:

When the applicable retention period expires and no legal obligation requires continued storage, ac668 securely deletes or anonymises the relevant personal data. Anonymised aggregated data — from which no individual can be identified — may be retained indefinitely for statistical and platform improvement purposes.

Where you request deletion of your personal data under Section 7 of this policy, ac668 will action that request within the stated timeframe, subject to any overriding legal obligation that requires us to retain specific data for a longer period (for example, AML-mandated transaction records).

As a registered player on ac668, you hold the following rights with respect to the personal data we process about you. These rights may be exercised at any time by contacting our support team via live chat or by emailing [email protected] (plain text — not a clickable link).

• Right of Access: You may request a copy of the personal data ac668 holds about you. We will provide this information in a readable format within 14 BST business days of a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Account profile corrections can also be made directly from within your account settings for basic details.
• Right to Erasure ("Right to be Forgotten"): You may request that ac668 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw the consent on which processing was based. Note that this right is subject to overriding legal retention obligations (see Section 6).
• Right to Restrict Processing: You may request that ac668 limit processing of your data to storage only — for example, while a dispute about the accuracy of your data is pending investigation.
• Right to Data Portability: You may request that ac668 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider, where technically feasible.
• Right to Object: You may object at any time to processing of your personal data for direct marketing purposes, including promotional email communications. You may also object to processing based on legitimate interests grounds, subject to ac668's compelling legitimate grounds overriding your objection.
• Right to Withdraw Consent: Where ac668 relies on your consent as the legal basis for any processing activity (such as sending promotional emails), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

ac668 will acknowledge all valid data rights requests within five (5) BST business days and complete the request within fourteen (14) BST business days, except where the complexity of the request reasonably requires additional time, in which case you will be informed of the extended timeline.

ac668 does not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative charge may apply. We will notify you of any applicable charge before proceeding.

ac668 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or data processing practices. The updated policy will be published on this page with a revised "Last Reviewed" date shown at the top.

Where a change is material — meaning it significantly affects how your personal data is collected, used, or shared — ac668 will notify registered players via the email address associated with their account at least seven (7) days before the change takes effect. For minor clarifications or editorial corrections that do not affect the substance of the policy, notification may not be provided, and the updated policy will take effect immediately upon publication.

Your continued use of ac668 following the publication of any updated Privacy Policy constitutes your acknowledgement of the changes and your agreement to be bound by the revised terms. If you do not agree with any material change to this policy, you should contact support to discuss your options, including voluntary account closure and data deletion.