Your Privacy Matters at acf67

When you register and use the acf67 platform, we collect certain categories of personal information. The information we collect falls into the following categories:

1. Identity & Contact Information

• Full legal name, date of birth, and gender as provided during registration.
• Residential address, city, and country (Bangladesh or other applicable jurisdiction).
• Email address and mobile phone number used to create the account.
• Government-issued identity documents submitted for KYC (Know Your Customer) verification, such as a National Identity Card, passport, or birth certificate.

2. Financial Information

• Mobile banking account references (bKash, Nagad, Rocket, or Upay wallet numbers) or bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank) used for deposits and withdrawals.
• Card details (Visa or Mastercard) where card payments are used — card numbers are tokenised and not stored in full by acf67.
• Transaction history: deposit amounts, withdrawal requests, bonus credits, and wagering activity denominated in BDT ৳.

3. Technical & Usage Data

• IP address, device type, operating system, browser type, and screen resolution at the time of each session.
• Login timestamps, session duration, pages visited within the acf67 platform, games played, bet amounts, and game outcomes.
• Referral source (how you arrived at acf67.app) where determinable.

4. Communication Records

• Messages exchanged with the acf67 support team via email or the on-site contact system.
• Responses to surveys, promotions, or feedback requests where you have voluntarily participated.

acf67 processes your personal information for specific, legitimate purposes. The table below maps each category of data to its processing purpose and the legal basis on which we rely:

acf67 does not use your personal data for automated decision-making that produces significant legal or similarly significant effects on you without human review. Where automated systems flag an account for risk assessment, a member of our compliance team will review the case before any account-level action is taken.

acf67 does not sell your personal information. We may share data with third parties only in the following limited and clearly defined circumstances:

Payment Processing Partners

To process deposits and withdrawals, acf67 shares necessary transaction data with payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks (Visa, Mastercard). These providers operate under their own privacy policies and are bound by strict data handling agreements with acf67.

Identity Verification & Fraud Prevention Services

acf67 may use third-party identity verification and fraud screening services to assist with KYC checks and anti-money-laundering compliance. These providers process identity data on acf67's behalf and are contractually prohibited from using it for any other purpose.

Technology Infrastructure Providers

Our platform relies on cloud hosting, content delivery, and software services operated by third-party technology vendors. These vendors may have incidental access to platform data in the course of providing infrastructure services, subject to data processing agreements.

Game Content Providers

Game studios and content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or session-level data necessary for game delivery and fair play verification. Personal identity data is not shared with game providers beyond what is technically required.

Legal & Regulatory Disclosure

acf67 may disclose personal data to law enforcement agencies, regulators, or courts where required by applicable law, a valid court order, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. We will notify affected players of such disclosures where legally permitted to do so.

acf67 uses cookies and similar technologies (such as web beacons and local storage objects) to operate the platform, improve user experience, and analyse platform performance. A cookie is a small text file placed on your device when you visit a website.

We use the following categories of cookies:

You can manage or delete cookies through your browser settings at any time. Please note that disabling non-essential cookies may affect the functionality of certain platform features. acf67 does not use third-party advertising cookies and does not participate in cross-site behavioural advertising networks.

acf67 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following retention guidelines apply:

• Active account data: Retained throughout the lifetime of your acf67 account and for a minimum period following voluntary account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction records: Financial transaction logs are retained for a minimum of five years from the date of the transaction to comply with applicable financial crime prevention and audit requirements.
• KYC verification documents: Identity and address verification documents are retained for a minimum of five years following account closure or the last transaction, whichever is later.
• Support communication records: Correspondence with the acf67 support team is retained for a minimum of two years to assist with dispute resolution and platform quality assurance.
• Technical log data: Server logs, IP address records, and session data are retained for a shorter period consistent with their security and fraud detection purpose, generally not exceeding 12 months unless required for an ongoing investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data — which cannot be linked back to any individual — may be retained for statistical and research purposes without time limit.

acf67's primary data processing infrastructure is hosted on servers protected by industry-standard physical and logical access controls. Data stored at rest is encrypted. Access to personal data is restricted on a strict need-to-know basis, and all staff with access to personal data are subject to confidentiality obligations.

acf67 recognises and respects the privacy rights of every player. Depending on the laws applicable in your jurisdiction, you may hold some or all of the following rights in relation to the personal data we hold about you:

To exercise any of the above rights, please contact the acf67 privacy team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within five business days and aim to respond in full within 30 days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

acf67 implements a multi-layered approach to information security designed to protect player data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes the following measures:

• Encryption in transit: All communication between your browser or app and acf67's servers is encrypted using TLS (Transport Layer Security). This protects your credentials and financial data from interception on public or shared networks.
• Encryption at rest: Sensitive personal and financial data stored in acf67's databases is encrypted at rest using AES-256 or equivalent symmetric encryption standards.
• Access controls: Logical access to systems containing personal data is governed by role-based access controls. Staff access is granted on a strict need-to-know basis and reviewed periodically. All access is logged and auditable.
• Payment card security: acf67 does not store full card numbers, CVV codes, or card authentication data on its own infrastructure. Card transaction processing is handled via PCI-DSS compliant payment gateways.
• Penetration testing & vulnerability management: acf67 engages periodic security assessments including vulnerability scanning and penetration testing to identify and remediate weaknesses before they can be exploited.
• Incident response: acf67 maintains a documented data breach incident response plan. In the event of a confirmed breach affecting player personal data, affected players will be notified in accordance with applicable notification obligations.

Despite these measures, no digital system can guarantee absolute security. Players are also responsible for maintaining the security of their own account credentials. We strongly recommend using a unique, strong password for your acf67 account and enabling any available two-factor authentication features.

acf67 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform features. When material changes are made, we will update the effective date shown at the top of this document and, where appropriate, notify registered players via the contact details on their account.

We encourage all players to review this Privacy Policy periodically. Continued use of the acf67 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms, to the extent permitted by applicable law.

Previous versions: If you wish to review a previous version of this Privacy Policy, please contact our support team who can provide archived versions on request.

Contact our Privacy Team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy queries: "Privacy Policy Enquiry"
• Response time: We aim to respond to all privacy-related correspondence within five business days (Bangladesh Standard Time, UTC+6).

For questions specifically about your account data, bonus terms, or responsible gaming options, you are also welcome to visit our FAQ page or our Responsible Gaming page for further guidance.