ac71 Privacy Policy — How We Handle Your Personal Data

ac71 ("ac71", "we", "us", "our") operates the online betting and casino platform accessible at https://ac71.io (the "Platform"). For the purposes of this Privacy Policy, ac71 is the data controller responsible for the personal data of players and visitors who interact with the Platform.

This Privacy Policy applies to all personal data collected, processed, and stored by ac71 in connection with the operation of the Platform, including data collected during account registration, identity verification, betting and casino activity, customer support interactions, and general Platform browsing.

This Privacy Policy should be read in conjunction with ac71's Terms & Conditions, which are incorporated herein by reference. By creating an account on the Platform or continuing to use the Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

ac71 collects personal data through several channels, including account registration, verification processes, platform activity, and customer support interactions. The categories of personal data we collect are described below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where this arises incidentally during identity document verification (for example, a photograph on a national ID card). Where such data is incidentally collected, it is used solely for identity verification purposes and is not otherwise processed.

ac71 uses the personal data we collect for the following specific purposes. Each purpose is tied to a lawful basis for processing, which is described in Section 4 of this Policy.

• Account creation and management: To register your ac71 account, maintain your account profile, authenticate your identity at login, and manage account settings and preferences.
• Identity and age verification: To verify that you are aged 21 or above and to confirm your identity in accordance with our Know Your Customer (KYC) procedures. ac71 operates a strict 21+ age policy and will not permit the use of the Platform by individuals who cannot satisfy this requirement.
• Payment processing: To process deposits via bKash, Nagad, Rocket, Upay, and supported bank transfer and card methods, and to process withdrawal requests to your registered payment method. Financial data is handled securely and is never stored in plaintext.
• Betting and gaming services: To allow you to place bets on cricket (BPL, IPL, T20 World Cup, international series), football, kabaddi, hockey, and other sports markets, and to participate in casino games including live dealer, slots, and table games powered by Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe.
• Bonus and promotions administration: To administer bonuses, free bets, and promotional offers you have opted into, including tracking wagering requirements and verifying eligibility for seasonal promotions such as BPL season offers, Eid specials, and Pohela Boishakh promotions.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, collusion, multi-accounting, and other abusive behaviour on the Platform. Technical data such as IP addresses and device fingerprints are used for this purpose.
• Responsible gaming: To administer responsible gaming tools including deposit limits, session reminders, cooling-off periods, and self-exclusion requests. Betting and gaming activity data is used to identify patterns that may indicate problem gambling behaviour.
• Customer support: To respond to your enquiries, process complaints, and deliver account-related assistance via email support at [email protected].
• Platform improvement: To analyse aggregated, anonymised usage data to understand how the Platform is used and to make improvements to the user experience, game selection, and payment processes.
• Legal and regulatory compliance: To comply with applicable anti-money laundering obligations, record-keeping requirements, and to respond to lawful requests from authorities where required.

ac71 processes your personal data on the following legal bases, depending on the purpose for which the data is used:

• Performance of a contract: Processing that is necessary to provide the services described in your agreement with ac71 — including account registration, payment processing, bet settlement, and customer support — is carried out on the basis that it is necessary for the performance of the contract between you and ac71.
• Legal obligation: Processing required for ac71 to comply with applicable legal and regulatory requirements, including AML/KYC obligations, age verification requirements, and record-keeping mandates, is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for the purposes of fraud prevention, Platform security, responsible gaming monitoring, and aggregated analytics is based on ac71's legitimate interests in operating a safe and fair platform. These interests are carefully balanced against your privacy rights and will not override them.
• Consent: Where ac71 seeks to send you marketing communications about promotions, new games, or seasonal offers, this is done on the basis of your consent. You may withdraw consent at any time by contacting us at [email protected] or by using the opt-out mechanism provided in any such communication.

ac71 does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Game providers: In order to deliver casino games, ac71 shares certain technical session data (such as player session tokens and game identifiers) with certified game providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers are contractually bound to process such data only for the purpose of game delivery and are not permitted to use it for any other purpose.
• Payment processors: To process deposits and withdrawals, ac71 shares necessary financial data with payment service partners including bKash, Nagad, Rocket, and Upay, as well as bank and card processing partners. These partners are independent data controllers in respect of the data processed within their own payment infrastructure.
• Identity verification services: ac71 may use third-party identity and document verification services to assist with KYC checks. These providers process identity data solely for the purpose of verification and are subject to strict data processing agreements.
• Fraud and security partners: To protect the Platform against fraud, money laundering, and abuse, ac71 may share certain technical data (IP addresses, device identifiers) with fraud prevention and cybersecurity service providers.
• Legal authorities: ac71 may disclose personal data to law enforcement, regulatory authorities, or other government bodies where required to do so by applicable law, court order, or lawful government request. ac71 will notify affected players of such disclosures where it is legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ac71's business, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

ac71 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit a website. The following types of cookies are used on the ac71 Platform:

• Strictly necessary cookies: These cookies are required for the Platform to function. They manage your login session, remember your account settings, and enable secure payment processing. These cookies cannot be disabled without impairing your ability to use the Platform.
• Performance and analytics cookies: These cookies collect aggregated, anonymised data about how visitors use the Platform — for example, which pages are visited most frequently, how long sessions last, and where users navigate from. This data is used solely to improve the Platform and is not linked to individual identities.
• Functional cookies: These cookies remember your preferences (such as language setting and display preferences) to personalise your experience on the Platform.
• Security cookies: These cookies help ac71 detect and prevent fraudulent activity and enforce account security measures such as unusual login detection.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will affect your ability to log in and use the Platform. For full details of the cookies used on the Platform, please contact us at [email protected].

ac71 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, to comply with AML and KYC record-keeping obligations.
• Transaction and betting records: Retained for a minimum of 5 years from the date of each transaction or bet, consistent with financial record-keeping best practices.
• Customer support communications: Retained for 2 years from the date of the communication, or longer where the communication is relevant to an ongoing dispute or investigation.
• Technical and log data: IP logs and session data are retained for up to 12 months for fraud prevention and security monitoring purposes.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of your account and for 2 years following withdrawal of consent, to demonstrate compliance with consent obligations.

When personal data is no longer required for any of the purposes listed above, ac71 will securely delete or anonymise it. Anonymised data (from which individual identity cannot be derived) may be retained indefinitely for aggregated analytical purposes.

ac71 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption: All data transmitted between your device and ac71's servers is encrypted using TLS 1.3 protocol, providing strong protection against interception in transit.
• Password hashing: Player passwords are stored using industry-standard one-way hashing algorithms. Passwords are never stored in plaintext and are never accessible to ac71 staff.
• Access controls: Access to personal data within ac71's systems is restricted to authorised personnel who require it to perform their job functions. All access is logged and subject to regular audit.
• Infrastructure security: ac71's Platform infrastructure is hosted in secure data centre environments with physical access controls, network firewalls, and intrusion detection systems.
• Regular security reviews: ac71 conducts periodic security assessments to identify and address vulnerabilities in its systems and processes.
• Incident response: ac71 maintains a data breach response procedure. In the event of a data security incident that poses a risk to your rights or interests, ac71 will notify affected players without undue delay and take prompt remedial action.

Whilst ac71 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all threats. You are responsible for maintaining the security of your own account credentials. Do not share your ac71 password with any third party. ac71 support staff will never ask you for your password.

As a player whose personal data is processed by ac71, you have the following rights in relation to your data. To exercise any of these rights, please contact us at [email protected], marking your email "Data Rights Request". We will respond within a reasonable timeframe and no later than 30 days of receipt of your request.

• Right of access: You have the right to request a copy of the personal data that ac71 holds about you, together with information about how it is processed.
• Right to rectification: You have the right to request that ac71 correct any inaccurate or incomplete personal data held about you. You may also update certain account details directly through your account dashboard.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where ac71 no longer has a lawful basis for retaining it. This right is subject to ac71's legal retention obligations, as described in Section 7.
• Right to restriction of processing: You have the right to request that ac71 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified, or where you have objected to processing on the basis of legitimate interests.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to request that ac71 provide your personal data in a structured, machine-readable format so that it may be transferred to another service provider.
• Right to object: You have the right to object to the processing of your personal data where ac71 relies on legitimate interests as its lawful basis. ac71 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The ac71 Platform is strictly for individuals aged 21 years and above. ac71 does not knowingly collect personal data from any individual under the age of 21. The Platform is not directed at, and should not be used by, anyone under the minimum age requirement.

If ac71 becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, that account will be immediately suspended, any deposits will be returned to the original payment method, and all personal data associated with the account will be securely deleted.

If you are a parent or guardian and believe that an individual under the age of 21 has created an account on the ac71 Platform, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and take immediate action.

The ac71 Platform integrates with third-party services to deliver games, process payments, and maintain Platform security. These third-party services operate under their own privacy policies and terms of service. ac71 is not responsible for the privacy practices of third-party services, but selects service partners who demonstrate appropriate data protection standards.

Third-party services currently integrated into the ac71 Platform include:

• Game providers: Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe — game session data is shared with these providers solely for the purpose of delivering game content.
• Payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Islami Bank, Sonali Bank, City Bank, Visa, Mastercard — financial transaction data is processed by these partners within their own secure payment infrastructure.
• Platform infrastructure: ac71 uses third-party hosting and cloud infrastructure providers. Data processed within this infrastructure remains subject to this Privacy Policy and is governed by data processing agreements with our infrastructure partners.

Links to third-party websites or services that may appear on the Platform are provided for informational purposes only. ac71 has no control over the content or privacy practices of linked third-party sites and accepts no responsibility for them. Please review the privacy policies of any third-party sites you visit independently of the ac71 Platform.

ac71 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, Platform services, or applicable best-practice standards. When material changes are made to this Policy, ac71 will notify registered players via email to the address on file and/or via a prominent notice on the Platform.

The revised Privacy Policy will be posted at https://ac71.io/privacy-policy with an updated effective date at the top of the document. Your continued use of the Platform following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may request voluntary account closure.

We encourage you to review this Privacy Policy periodically so that you are always aware of the current terms under which your personal data is processed by ac71.

If you have any questions, concerns, or requests relating to this Privacy Policy or ac71's handling of your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line guidance: Please mark your email clearly — for example, "Data Rights Request", "Data Protection Enquiry", "Security Concern", or "Underage Account Report" — so that your message is directed to the correct team promptly.
• Response time: ac71 aims to respond to all data protection enquiries within 5 business days at Bangladesh Standard Time (BST, UTC+6). Complex data rights requests may take up to 30 days to fulfil.
• Language: All privacy-related correspondence is handled in English.