aca365 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how aca365 ("aca365", "the Company", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who access or use the aca365 online casino and sports betting platform, available at https://aca365.pro and all associated pages and services (collectively, "the Platform").

aca365 is committed to protecting your personal information and handling it in a responsible, transparent, and lawful manner. This Policy has been prepared in accordance with applicable data protection principles and is intended to give you a clear and honest account of our data practices.

By registering an account on the aca365 Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not register an account or continue to use the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, which together form the complete agreement governing your use of aca365.

Our Privacy Principles

Six commitments that underpin every data decision at aca365

2. Personal Data We Collect

When you register and use the aca365 Platform, we collect personal data in the following categories. The specific data points collected will depend on how you interact with our services.

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth — used to verify that you meet the 21+ age requirement.
• Username and password — your password is stored in hashed form and is never accessible in plain text by any aca365 employee.
• Email address — used for account communication, transaction receipts, and promotional messages (where consented).
• Mobile phone number — used for account verification, two-factor authentication, and customer support communication.
• Residential address — including district, division, and postal code (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).

2.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, we may collect copies of:

• National Identity Card (NID), passport, or other government-issued photo identification.
• Proof of address documents such as utility bills or bank statements dated within the last three months.
• Proof of ownership of any payment method (bKash, Nagad, Rocket, Upay, or bank account) used for transactions on the Platform.

2.3 Financial and Transaction Data

• Deposit and withdrawal amounts, transaction timestamps, and transaction reference numbers.
• Payment method identifiers (e.g., the last four digits of a bKash or Nagad mobile wallet number). We do not store full payment credentials on our servers.
• Bonus and promotional activity records, including wagering history related to bonus claims.

2.4 Gaming and Betting Activity Data

• Game sessions, bet amounts, win/loss records, and game history across all Platform products including cricket betting, live casino, slots, and crash games.
• Responsible gaming tool usage, including deposit limits, session limits, and self-exclusion requests.
• Any communications you submit to our support team, including chat transcripts and email correspondence.

2.5 Technical and Device Data

• IP address — used for security monitoring, fraud detection, and geolocation verification.
• Device type, operating system, and browser version — used for Platform optimisation and troubleshooting.
• Cookie and session data — see Section 7 (Cookies) for full details.
• Login timestamps and session duration — used for responsible gaming monitoring and security auditing.

3. How We Use Your Personal Data

aca365 uses the personal data we collect for the following defined purposes. We process your data only where we have a lawful basis for doing so, which may be contractual necessity, legitimate interest, legal obligation, or your explicit consent.

4. Sharing Your Personal Data

aca365 does not sell your personal data to third parties. We may share your data with carefully selected third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to facilitate deposits and withdrawals. Only the minimum data necessary to complete the transaction is shared.
• Identity verification partners: Third-party KYC and fraud prevention services that assist us in verifying player identities and meeting our AML obligations.
• Game content providers: Licensed game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi — for the purpose of delivering game content and maintaining game integrity. These providers operate under strict data processing agreements.
• IT and infrastructure providers: Hosting, server management, and cybersecurity service providers who process data on our behalf under binding confidentiality and data processing agreements.
• Legal and regulatory authorities: Where we are required by law to disclose personal data to law enforcement, courts, or regulatory bodies, we will comply with such requirements.

5. Data Retention

aca365 retains personal data for the duration of your account relationship with us and for a defined period thereafter, in line with applicable legal requirements and best practice. The following retention periods apply:

• Active account data: Retained for the full duration that your account remains open and active.
• Closed account data: Following account closure, we retain identity, transaction, and gaming history data for a minimum of five (5) years to meet anti-money laundering and responsible gaming audit requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later.
• Support correspondence: Retained for three (3) years from the date of the last communication.
• Marketing consent records: Retained for as long as your account is open, or until you withdraw consent.

When the applicable retention period expires, personal data is securely deleted or permanently anonymised so that it can no longer be linked to you as an individual.

6. Cookies and Tracking Technologies

aca365 uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences, and monitor security. A cookie is a small text file placed on your device when you visit the Platform.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens that keep you logged in during a visit. These cookies cannot be disabled.
• Functional cookies: Store your preferences such as language settings and responsible gaming tool configurations so that they persist between sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the Platform. This helps us identify pages that perform poorly and improve the overall user experience. No personally identifiable information is included in analytics reports.
• Security cookies: Used by our fraud detection systems to identify suspicious login patterns, unusual betting behaviour, or attempts to access the Platform from flagged IP addresses.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the Platform. Disabling functional or analytics cookies will not affect your ability to access core Platform features.

7. Your Data Rights

As a player on the aca365 Platform, you hold the following rights with respect to the personal data we process about you. To exercise any of these rights, please contact our support team at [email protected]. We will acknowledge your request within 5 business days and aim to resolve it within 30 days.

• Right of access: You may request a copy of the personal data aca365 holds about you at any time.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: You may request deletion of your personal data where it is no longer needed for the purposes for which it was collected, subject to our legal retention obligations described in Section 5.
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to withdraw consent: Where our processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of our legitimate interests where you believe your individual rights and freedoms override those interests.

8. Data Security

aca365 takes the security of your personal data seriously. We implement and maintain a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the aca365 Platform is encrypted using industry-standard SSL/TLS protocols.
• Password hashing: Player passwords are stored using strong one-way cryptographic hashing. No aca365 employee can retrieve your password in plain text.
• Access controls: Access to systems containing personal data is restricted to authorised personnel on a need-to-know basis, with role-based permissions enforced throughout.
• Regular security reviews: Our security infrastructure is reviewed periodically to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that poses a risk to your personal data, aca365 will notify affected players as promptly as practicable and take all reasonable steps to mitigate the impact.

While we take all reasonable precautions, no online platform can guarantee absolute security. You play an important role in keeping your account secure — please use a strong, unique password and enable two-factor authentication where available. If you suspect any unauthorised access to your account, contact [email protected] immediately.

9. Contact Us and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way aca365 handles your personal data, please contact our support team using the details below. All data-related enquiries are treated with strict confidentiality.

Email: [email protected]
Support hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

We are committed to resolving any privacy concerns promptly and transparently. Where you are not satisfied with our response, you retain the right to escalate your complaint through the appropriate legal channels available in your jurisdiction.