Privacy Policy — How ac888 Collects, Uses & Protects Your Data

1 Scope & Application

This Privacy Policy ("Policy") is issued by ac888 ("ac888", "we", "us", "our"), the operator of the online betting and gaming platform accessible at ac888.io. This Policy applies to all personal data that ac888 collects from individuals ("you", "your", "the Player") who access or use the ac888 platform, including but not limited to registered account holders, visitors who browse the platform without registering, and individuals who contact ac888's customer support team.

By accessing the ac888 platform or creating an account, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the ac888 platform.

This Policy should be read alongside ac888's Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and ac888.

2 Information We Collect

ac888 collects personal data through several channels in the ordinary course of operating the platform. The categories of information we collect are set out below.

2.1 Information You Provide Directly

When you register an account, complete identity verification, make a deposit or withdrawal, or contact customer support, you provide us with:

• Identity Data: Full legal name, date of birth, gender, and nationality
• Contact Data: Email address, mobile phone number, and residential address
• Identity Document Data: Copies of your National Identity Card (NID), passport, driver's licence, or other government-issued identification provided during KYC verification
• Financial Data: bKash, Nagad, or Rocket mobile wallet numbers; bank account details; transaction history on the ac888 platform
• Communications Data: Records of your correspondence with ac888's support team via email, live chat, or any other channel
• Profile Data: Username, account preferences, betting history, game play history, and responsible gaming settings

2.2 Information Collected Automatically

When you access the ac888 platform, certain technical information is collected automatically by our systems:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers
• Usage Data: Pages visited, session duration, click-through patterns, search queries on the platform, and game sessions accessed
• Location Data: Approximate geographic location derived from your IP address (not precise GPS location)
• Cookie Data: Information stored via cookies and similar tracking technologies as described in Section 7 of this Policy

2.3 Information from Third Parties

In certain circumstances, ac888 may receive personal data about you from third-party sources, including:

• Payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other banking partners) who confirm the status of your transactions
• Identity verification service providers who assist with KYC document authentication
• Fraud detection and anti-money laundering (AML) screening services
• Publicly available sources, including company registries and sanction screening databases, where relevant to compliance obligations

Data Category	Examples	Source
Identity Data	Name, date of birth, NID number	Provided by you during registration & KYC
Contact Data	Email, phone number, address	Provided by you during registration
Financial Data	Mobile wallet number, bank details, transaction records	Provided by you & payment providers
Technical Data	IP address, device ID, browser type	Collected automatically
Usage Data	Betting history, game sessions, login times	Collected automatically via platform logs
Document Data	NID scan, passport copy, proof of address	Provided by you during KYC verification

3 How We Use Your Data

ac888 uses the personal data it collects for the following specific purposes:

• Account Management: Creating and maintaining your ac888 account, verifying your identity, and managing your profile settings and preferences
• Transaction Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and banking partners; reconciling account balances; issuing bonus credits
• KYC & Compliance: Fulfilling identity verification, anti-money laundering (AML), and responsible gaming obligations as required by applicable standards
• Platform Security: Detecting and preventing fraud, collusion, multi-accounting, bot activity, and other prohibited conduct as defined in the Terms & Conditions
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of communications for quality assurance purposes
• Platform Improvement: Analysing usage patterns to improve platform performance, game selection, and the overall user experience for Bangladeshi players
• Responsible Gaming: Monitoring account activity to identify signs of problem gambling and administering player-protection tools such as deposit limits and self-exclusion
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications
• Legal Obligations: Retaining records as required by applicable law and cooperating with lawful requests from regulatory or law-enforcement authorities

4 Legal Basis for Processing

ac888 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing required to perform our contract with you — i.e., operating your ac888 account, processing wagers, and handling financial transactions
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC/AML obligations and record-keeping mandates
• Legitimate Interests: Processing necessary for ac888's legitimate business interests, such as fraud prevention, platform security, and improving the quality of the platform — where those interests are not overridden by your privacy rights
• Consent: For marketing communications and non-essential cookies, where we rely on your freely given, specific, and informed consent, which you may withdraw at any time

5 Data Sharing & Disclosure

ac888 does not sell your personal data. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Service Providers

ac888 engages third-party service providers who process personal data on our behalf in order to deliver platform services. These include payment processors (bKash, Nagad, Rocket, Upay, and banking partners), identity verification providers, cloud hosting and infrastructure providers, fraud detection services, and customer support software vendors. All service providers are bound by data processing agreements that require them to handle data securely and only for the specified purpose.

5.2 Game Studios & Content Providers

Certain game studios and content providers integrated into the ac888 platform (such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi) may receive limited technical data — such as player session tokens and game results — necessary to deliver and audit their games. These providers do not receive your identity documents, payment details, or contact information.

5.3 Legal & Regulatory Disclosure

ac888 may disclose personal data to government authorities, law-enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or other binding legal process. In such cases, ac888 will disclose only the minimum data required to satisfy the legal obligation and will, where legally permitted, notify the affected player of the disclosure.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving ac888, personal data held by ac888 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified via email prior to their data being transferred and will be informed of any material changes to this Privacy Policy resulting from the transaction.

6 Payment Data & Financial Information

ac888 takes the security of financial data with particular seriousness. The following rules govern the handling of payment information on the platform:

• Full payment card numbers (where applicable) are never stored on ac888 servers. Card transactions are processed by PCI DSS-compliant payment gateways that tokenise sensitive card data before transmission.
• Mobile wallet numbers (bKash, Nagad, Rocket, Upay) are stored in encrypted form and are used solely for the purpose of processing your deposits and withdrawals.
• Bank account details provided for bank transfer withdrawals are retained only for the duration necessary to process the specific transaction, after which they are removed from active systems and retained in encrypted archive logs for the period required by applicable financial record-keeping obligations.
• Transaction history — including deposit amounts, withdrawal amounts, dates, and payment method identifiers — is retained for a minimum of five (5) years as required for AML compliance purposes.
• ac888 will never ask you to provide your mobile banking PIN, internet banking password, or any other authentication credential. If you receive any communication purporting to be from ac888 requesting such information, treat it as fraudulent and report it immediately to [email protected].

7 Cookies & Tracking Technologies

The ac888 platform uses cookies and similar tracking technologies to enable core platform functionality, improve the user experience, and analyse platform usage. The types of cookies used are described below.

7.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They include session cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure stable performance. No consent is required for strictly necessary cookies.

7.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred language, display settings, and responsible gaming limit configurations — so that you do not need to re-enter them on each visit. These cookies improve your experience but are not essential to core platform operation.

7.3 Analytical Cookies

Analytical cookies collect aggregated, anonymised data about how players interact with the platform — such as which pages are visited most frequently, where players navigate from, and how long sessions last. This information is used solely to improve the platform and is not linked to your personal identity. Analytical cookies are activated only with your consent.

7.4 Managing Cookies

You may manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to view, block, and delete cookies. Please note that disabling strictly necessary cookies will prevent the platform from functioning correctly. For detailed guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

8 Data Retention

ac888 retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Data Type	Retention Period	Reason
Account & identity data	Duration of account + 5 years post-closure	AML/KYC compliance & dispute resolution
Financial transaction records	Minimum 5 years from transaction date	Legal & financial record-keeping obligations
Support correspondence	3 years from last interaction	Quality assurance & dispute evidence
KYC documents	Duration of account + 5 years post-closure	Regulatory compliance
Technical & usage logs	12 months rolling	Security monitoring & fraud detection
Marketing consent records	3 years from consent or withdrawal	Proof of consent for marketing communications

When the applicable retention period expires, data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual. Where deletion is not immediately possible (for example, because data is held in backup archives), the data will be isolated from active use and deleted at the next scheduled archive purge.

9 Your Rights Over Your Data

As a data subject, you have a number of rights in relation to the personal data ac888 holds about you. These rights are described below, along with guidance on how to exercise them.

• Right of Access: You may request a copy of all personal data ac888 holds about you, together with information about how it is processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data directly through your account profile.
• Right to Erasure: You may request that ac888 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent was the legal basis), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations.
• Right to Restrict Processing: You may request that ac888 suspend the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing while that objection is being considered.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that ac888 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to marketing, ac888 will cease using your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected] with your full name, account username, and a clear description of the right you wish to exercise. ac888 will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

10 Data Security Measures

ac888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

• Encryption in Transit: All data transmitted between your device and ac888 servers is protected by 256-bit SSL/TLS encryption, indicated by the padlock icon in your browser address bar.
• Encryption at Rest: Sensitive personal data stored on ac888 servers — including identity documents, financial data, and authentication credentials — is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All access events are logged and subject to regular audit review.
• Vulnerability Management: ac888's technical infrastructure is subject to regular vulnerability assessments and penetration testing by qualified security professionals.
• Incident Response: ac888 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, ac888 will notify affected players promptly and without undue delay.
• Staff Training: All ac888 personnel who handle personal data receive regular training on data protection obligations and security best practices.

Whilst ac888 takes all reasonable measures to protect your data, no digital system is entirely immune to risk. You are responsible for keeping your account credentials confidential and for ensuring that you access the platform from secure devices and networks.

11 Children & Underage Users

The ac888 platform is strictly intended for adults aged 21 years and above. ac888 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the ac888 platform or submit any personal data to us.

If ac888 becomes aware that it has inadvertently collected personal data from a person under the age of 21, that data will be deleted immediately, the associated account will be closed, and any deposited funds will be returned to the originating payment method. If you believe that a minor has registered an account on ac888, please notify us immediately at [email protected].

12 Third-Party Links & Services

The ac888 platform may contain references to third-party game studios, payment providers, and technology partners. ac888 is not responsible for the privacy practices of third-party organisations, and this Privacy Policy applies solely to data collected and processed by ac888 in connection with the ac888 platform. We encourage you to review the privacy policies of any third-party services you use in connection with your ac888 account.

Payment service providers such as bKash, Nagad, Rocket, and Upay operate under their own privacy policies and data protection frameworks. When you use these services to deposit or withdraw funds, your financial transaction data is also subject to the relevant provider's privacy terms in addition to this Policy.

13 Changes to This Policy

ac888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform operations. When material changes are made, ac888 will provide reasonable advance notice to registered players via email to the address on file, or via a prominent notice on the platform, no fewer than seven (7) days before the updated Policy takes effect.

The effective date at the top of this Policy will be updated each time a revision is published. Your continued use of the ac888 platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and may request account closure prior to the effective date.

14 Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ac888 handles your personal data, please contact our dedicated privacy team using the details below. All correspondence must be in English.

• Email: [email protected]
• Subject Line: "Privacy Enquiry — [Your Account Username]"
• Response Time: Within 5 business days for general enquiries; within 30 days for formal data rights requests
• Platform: ac888.io