acv365 Privacy Policy

For the purposes of this Privacy Policy, the data controller responsible for your personal information is acv365, operating the platform accessible at https://acv365.app. acv365 is the entity that determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to this Policy or to the handling of your personal data, you may contact our dedicated privacy team at any time using the contact details provided at the end of this document. We aim to respond to all privacy-related enquiries within five business days.

acv365 collects personal data in two principal ways: information you provide to us directly, and information collected automatically through your use of the Platform. The categories of personal data we may collect include:

Information you provide directly:

• Identity data — full name, date of birth, gender, and nationality as provided during registration or KYC verification.
• Contact data — email address, mobile phone number, and residential address in Bangladesh (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other divisions).
• Identity verification documents — National Identity Card number, passport number, or driving licence details submitted during the KYC process.
• Payment data — mobile financial service account references (bKash, Nagad, Rocket, Upay) and transaction records. We do not store full payment credentials; transactions are processed through the respective payment provider's secure systems.
• Communications data — the content of any messages you send to our customer support team, including live chat transcripts and email correspondence.

Information collected automatically:

• Technical data — IP address, device type, operating system, browser type and version, and mobile network information.
• Usage data — pages visited, games played, bet amounts and outcomes, session duration, click behaviour, and navigation paths within the Platform.
• Cookie and tracking data — session cookies, preference cookies, and analytics identifiers. See Section 9 for full details on our use of cookies.
• Geolocation data — approximate geographic location derived from your IP address, used to verify that you are accessing the Platform from a permitted location.

acv365 processes your personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which we use each category of data:

acv365 will not process your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

acv365 does not sell, rent, or trade your personal data to any third party. We may, however, share your data with carefully selected third parties in the following limited circumstances:

• Payment processors — bKash, Nagad, Rocket, Upay, and other approved payment service providers, strictly for the purpose of processing your financial transactions. Each of these providers operates under their own privacy framework and is bound by applicable financial regulations.
• Identity verification partners — third-party KYC and anti-fraud service providers engaged to verify the accuracy of identity documents you submit. These providers are contractually bound to process your data only for verification purposes.
• Game software providers — licensed game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming may receive anonymised or pseudonymised game session data to facilitate gameplay and resolve technical disputes. These providers do not receive identifiable personal data beyond what is technically necessary.
• Analytics providers — aggregated, non-identifiable usage data may be shared with analytics platforms to help acv365 understand Platform usage and improve the member experience.
• Legal and regulatory authorities — where acv365 is required to disclose personal data pursuant to a lawful order, court direction, or applicable regulatory requirement, we will comply with that obligation and, where legally permissible, will notify you of such disclosure.
• Business successors — in the event of a merger, acquisition, or sale of all or part of the acv365 business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections remaining in place.

All third parties with whom acv365 shares personal data are required to maintain appropriate technical and organisational security measures and to process that data only in accordance with acv365's instructions and applicable privacy law.

acv365 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data — retained for the duration of your active membership and for a period of five years following account closure, to meet anti-money laundering (AML) and KYC record-keeping obligations.
• Transaction and financial records — retained for a minimum of five years from the date of each transaction in accordance with financial record-keeping requirements.
• Customer support communications — retained for up to three years following the resolution of the relevant support case.
• Technical and usage data — typically retained in anonymised or aggregated form for up to 24 months for analytics purposes; identifiable technical logs are retained for up to 12 months.
• Marketing and communications preferences — retained until you withdraw your consent or request deletion, whichever is earlier.

Where acv365 has a legal obligation to retain data beyond these standard periods — for example, in connection with an ongoing investigation or regulatory inquiry — data will be retained for the duration of that obligation. At the end of the applicable retention period, data is securely deleted or anonymised.

acv365 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the acv365 Platform.
• Encrypted at-rest storage for all personal and financial data held on acv365 servers.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular security audits and penetration testing conducted by qualified information security professionals.
• Two-factor authentication options available to members to further secure account access.
• Automated fraud detection systems that monitor transactions and account activity for patterns indicative of unauthorised access or financial crime.

While acv365 employs all reasonable and industry-appropriate security measures, no platform can guarantee absolute security against all threats. In the event of a data breach that poses a significant risk to your rights, acv365 will notify affected members promptly and take immediate remedial action.

You also have a responsibility to keep your account credentials secure. Never share your password with anyone. If you suspect your account has been accessed without your authorisation, contact support immediately at [email protected].

As a member of acv365 and a data subject under applicable privacy frameworks, you have the following rights with respect to your personal data:

• Right of access — you may request a copy of all personal data acv365 holds about you, along with information about how it is being processed.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data held by acv365.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction — you may request that acv365 temporarily restrict the processing of your personal data while a dispute or correction request is being resolved.
• Right to data portability — where processing is based on consent or contractual necessity, you may request that your data be provided to you in a structured, machine-readable format.
• Right to object — you may object to processing carried out on the basis of legitimate interests, including direct marketing communications.
• Right to withdraw consent — where processing is based solely on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the acv365 privacy team at [email protected]. We will respond to all verified requests within 30 days. In some cases, we may need to verify your identity before processing a data rights request to prevent unauthorised access to another person's information.

acv365 may send you promotional communications about new games, bonuses, seasonal offers (such as Eid specials, Pohela Boishakh promotions, or BPL cricket season offers), and platform updates. We will only do so where you have given your explicit consent to receive such communications during registration or at a subsequent point via your account settings.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your acv365 account settings.
• Clicking the unsubscribe link included at the bottom of any promotional email.
• Contacting the support team at [email protected] and requesting removal from all marketing lists.

Please note that opting out of marketing communications does not affect the delivery of transactional or operational messages — such as deposit confirmations, withdrawal notifications, security alerts, and account verification requests — which are necessary for the operation of your account and will continue regardless of your marketing preferences.

acv365 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and improve your experience. The cookies we use fall into the following categories:

• Strictly necessary cookies — essential for the operation of the Platform, including session management, login authentication, and security functions. These cannot be disabled without impairing Platform functionality.
• Functional cookies — used to remember your preferences, such as language settings, display preferences, and previously selected payment methods, so you do not need to re-enter them on each visit.
• Analytics cookies — used to collect anonymised data about how visitors use the Platform, including pages visited, session duration, and device type. This data helps acv365 identify areas for improvement.
• Security cookies — used to detect and prevent fraudulent activity, including session hijacking and account takeover attempts.

acv365 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on external websites. On your first visit to the Platform, you will be presented with a cookie consent notice. You may manage your cookie preferences at any time through your browser settings; however, disabling certain cookies may affect the functionality of the Platform.

The acv365 platform is strictly intended for adults aged 21 and above. acv365 does not knowingly collect, process, or store personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under the minimum age, we will immediately delete that data and close the associated account.

If you believe that a minor has registered on the acv365 platform or has submitted personal data through our services, please notify us immediately at [email protected] so that we can take prompt corrective action.

acv365 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, new sharing arrangements with third parties, or changes to your data rights — acv365 will update the "Last Updated" date at the top of this page and, where appropriate, notify active members via email or an in-platform message.

Your continued use of the acv365 platform following the publication of any revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how acv365 protects your data. The most current version of this Policy is always accessible at https://acv365.app/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have concerns about the way acv365 handles your personal data, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live chat: available 24/7 via the acv365 platform
• Response time: we aim to acknowledge all privacy enquiries within 2 business days and to resolve them fully within 30 days

acv365 takes all privacy concerns seriously and is committed to resolving any issues you may have in a fair, transparent, and timely manner. If you remain unsatisfied with our response, you may have the right to escalate your concern to a relevant data protection authority.