Privacy Policy — How ac666 Collects, Uses, and Protects Your Data

Introduction

ac666 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://ac666.io (the "Platform"). We are committed to processing your personal data responsibly, transparently, and securely. This Privacy Policy ("Policy") explains how ac666 collects, uses, stores, shares, and protects the personal information of all users who access or register on the Platform.

By registering an account on ac666 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

This Policy should be read together with the ac666 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

Data Controller

ac666 is the data controller responsible for the personal data you provide when using the Platform. As data controller, ac666 determines the purposes and means of processing your personal data and is accountable for ensuring that processing activities comply with applicable data protection principles.

If you have any questions about how ac666 processes your personal data, or if you wish to exercise any of your rights described in Section 11 of this Policy, please contact our Data Protection team using the contact details provided in Section 15.

Personal Data We Collect

ac666 collects personal data through various interactions with the Platform. The categories of personal data we collect, and the circumstances in which they are collected, are set out in the table below:

ac666 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes.

How We Use Your Personal Data

ac666 uses your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The primary purposes for which we process your personal data are:

• Account creation and management: To create, maintain, and administer your ac666 player account, including processing your registration, authenticating your identity at login, and managing your account settings;
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate financial records of all transactions on your account;
• Identity verification and fraud prevention: To verify that you meet the 21+ age requirement, to conduct KYC checks, and to detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct;
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance through live chat and email;
• Platform improvement: To analyse aggregated usage data in order to improve the performance, design, and content of the ac666 platform;
• Responsible gaming: To monitor play patterns that may indicate problem gambling behaviour and to enforce any self-exclusion or deposit limit requests you have made;
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or features — but only where you have provided consent to receive such communications. You may withdraw this consent at any time;
• Legal compliance: To meet our obligations under applicable laws, respond to lawful requests from regulators or law enforcement authorities, and enforce our Terms & Conditions.

Legal Basis for Processing

ac666 processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and ac666, including account creation, transaction processing, and customer support;
• Legal obligation: Processing that is necessary to comply with applicable laws, including age verification requirements, anti-money laundering obligations, and responses to lawful regulatory requests;
• Legitimate interests: Processing for purposes such as fraud prevention, platform security, and internal analytics, where those interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and optional analytics cookies, where you have provided clear, freely given, and specific consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

ac666 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other financial institutions involved in processing your deposits and withdrawals. These providers receive only the transaction data necessary to complete the payment;
• Identity verification providers: Third-party KYC and fraud detection services that assist ac666 in verifying player identities and detecting suspicious activity. These providers are contractually bound to process data solely for this purpose;
• Technology and hosting providers: Cloud infrastructure and server providers that host the ac666 platform and database systems. All providers are required to maintain appropriate security standards;
• Game content providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive aggregated, anonymised usage data to support game performance monitoring. No personally identifiable data is shared with game studios;
• Law enforcement and regulatory authorities: ac666 may disclose personal data where required by law, court order, or lawful request from a competent authority. We will notify affected users of such disclosures where we are legally permitted to do so.

All third parties with whom ac666 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only in accordance with ac666's instructions and applicable data protection law.

International Data Transfers

The ac666 platform primarily serves players in Bangladesh, and the majority of data processing takes place on servers located in the Asia-Pacific region. In some cases, data may be transferred to or accessed from locations outside Bangladesh in connection with the third-party service providers described in Section 6.

Where personal data is transferred internationally, ac666 ensures that appropriate safeguards are in place, including contractual clauses that require the receiving party to protect your data to an equivalent standard. If you have questions about the safeguards applied to international transfers of your personal data, you may contact us using the details in Section 15.

Data Retention

ac666 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The general retention periods applicable to each category of data are as follows:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, to meet financial record-keeping and anti-money laundering obligations;
• Transaction records: Retained for a minimum of seven years following the date of the transaction in accordance with financial regulatory requirements;
• KYC verification documents: Retained for five years following the completion of the verification process, or longer if required by applicable law;
• Support communications: Retained for three years from the date of the last communication, to enable resolution of any future disputes;
• Technical and usage data: Retained in anonymised or aggregated form indefinitely for platform analytics purposes. Raw, identifiable technical data is retained for 12 months from collection;
• Marketing consent records: Retained until you withdraw consent plus one year, as evidence of lawful marketing.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request early deletion of certain categories of data by contacting support, subject to any overriding legal obligations that require retention.

Security Measures

ac666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL encryption over TLS 1.3 for all data in transit between your device and ac666 servers;
• AES-256 encryption at rest for sensitive stored data including identity documents, financial records, and authentication credentials;
• Multi-factor authentication for internal ac666 staff systems that have access to personal data;
• Role-based access control ensuring that personal data is accessible only to authorised personnel whose job function requires it;
• Regular penetration testing and vulnerability assessments conducted by independent security professionals;
• Intrusion detection and prevention systems monitoring for suspicious access patterns in real time;
• Secure data backups stored in geographically separate, encrypted locations.

Despite these measures, no system is entirely immune to security incidents. In the event of a data breach that is likely to pose a risk to your rights and freedoms, ac666 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

You are responsible for maintaining the security of your account credentials. If you suspect that your ac666 account has been accessed without your authorisation, contact support immediately via live chat.

Cookies & Tracking Technologies

ac666 uses cookies and similar technologies to operate the Platform and improve your experience. Cookies are small text files stored on your device by your browser. We use the following categories of cookies:

• Strictly necessary cookies: These are essential to the operation of the Platform. They include session cookies that maintain your login state, security tokens that prevent cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without significantly impairing your ability to use ac666;
• Performance and analytics cookies: These cookies collect anonymised information about how players interact with the Platform — for example, which pages are visited most frequently and where errors occur. This data helps us identify areas for improvement. These cookies are set only where you have provided consent;
• Functional cookies: These remember preferences such as your selected language or display settings to personalise your experience. They do not track activity across other websites.

ac666 does not use advertising cookies, behavioural tracking cookies, or any cookie that shares data with third-party advertising networks. You can manage and delete cookies through your browser's settings at any time. Disabling strictly necessary cookies may affect your ability to log in and use the Platform.

Your Privacy Rights

As a player registered with ac666, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all valid requests within five business days:

• Right of access: You may request a copy of the personal data ac666 holds about you, together with information about how it is processed;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. For basic account details, you can update these directly in your account settings;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal obligations that require us to retain it;
• Right to restrict processing: You may request that ac666 restrict the processing of your data in certain circumstances, for example while the accuracy of your data is being contested;
• Right to data portability: You may request that ac666 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider;
• Right to object: You may object to the processing of your personal data where that processing is based on legitimate interests. You may also object at any time to the use of your data for direct marketing purposes;
• Right to withdraw consent: Where processing is based on your consent (for example, marketing emails or optional analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

ac666 will not charge a fee for handling data subject requests unless the request is manifestly unfounded or excessive. In such cases, a reasonable administrative fee may apply, and you will be informed in advance.

Children & Minors

The ac666 Platform is strictly intended for adults aged 21 years and above. ac666 does not knowingly collect or process personal data belonging to any person under the age of 21. Age verification is conducted at the point of registration via SMS one-time passcode, and additional KYC checks may be applied before withdrawal processing.

If ac666 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, any funds held will be dealt with in accordance with our Terms & Conditions, and the personal data will be deleted as soon as reasonably practicable.

If you believe that a minor has registered an account on ac666, please contact our support team immediately at the details provided in Section 15 so that we can investigate and take appropriate action.

Third-Party Links

The ac666 Platform does not contain links to third-party websites. All content accessible through ac666 is hosted and operated by ac666 directly or through contracted technology and game content partners operating under ac666's data processing agreements.

If you independently navigate to any third-party website — for example through a search engine result, a social media post, or a referral — ac666 is not responsible for the privacy practices or data protection standards of that third party. We encourage you to review the privacy policy of any website you visit independently of the ac666 Platform.

Policy Updates

ac666 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players by email to the address associated with their account and by posting a prominent notice on the Platform at least seven days before the change takes effect. The "Last updated" date at the top of this document will be revised accordingly.

Your continued use of the ac666 Platform following the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must stop using the Platform and may request account closure by contacting support.

We encourage you to review this Policy periodically to stay informed about how ac666 is protecting your personal data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ac666 processes your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please use "Privacy Request — [Your Username]" to ensure your message is routed to the correct team
• Live chat: Available 24 hours a day, 7 days a week via the chat widget on the Platform
• Response time: ac666 aims to acknowledge all privacy-related enquiries within two business hours and to provide a substantive response within five business days
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

For requests to exercise your data subject rights (access, erasure, portability, etc.), please include your registered username, the email address associated with your account, and a clear description of the right you wish to exercise. This helps our team process your request efficiently and verify your identity before releasing or deleting any personal data.