acu365 Privacy Policy — How We Collect, Use, and Protect Your Data

This Privacy Policy ("Policy") describes how acu365 ("acu365", "we", "us", "our") collects, processes, stores, and shares personal data relating to individuals ("you", "Player", "User") who access or use the acu365 online casino and sports betting platform at https://acu365.net and all associated interfaces and services ("Platform"). This Policy applies to all players, prospective players, and visitors to the Platform, regardless of the device or method of access used.

By registering an account on the Platform or continuing to use the Platform after this Policy is published, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue your use of the Platform immediately.

1. Information We Collect

1.1 Information You Provide Directly

When you register for an account, complete the KYC verification process, contact customer support, or otherwise interact with the Platform, acu365 may collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and nationality as stated on official identity documents.
• Contact Data: Email address, mobile phone number, and residential address (including city, district, and postcode within Bangladesh).
• Identity Document Data: Scans or photographs of your National Identity Card (NID), passport, or driver's licence, submitted during KYC verification.
• Financial Data: Mobile banking account numbers (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard) used to make deposits or receive withdrawals. Full card numbers are never stored by acu365 — payment tokenisation is used for card transactions.
• Account Credentials: Username and hashed password (passwords are never stored in plain text).
• Communications Data: The content of messages you send to the acu365 support team via email, live chat, or any other support channel.

1.2 Information Collected Automatically

When you access and use the Platform, acu365 automatically collects certain technical and behavioural data, including:

• Device Data: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Log Data: IP address, access timestamps, pages visited, referral URLs, session duration, and error logs.
• Geolocation Data: Approximate geographic location derived from your IP address (used solely for fraud prevention and jurisdictional compliance — acu365 does not collect GPS-level location data without your explicit consent).
• Gaming Activity Data: Records of all bets placed, games played, outcomes, deposit and withdrawal transactions, and bonus interactions on the Platform.
• Cookie Data: Data collected via cookies and similar tracking technologies as described in Section 3 of this Policy.

1.3 Information from Third Parties

acu365 may receive personal data about you from the following third-party sources:

• Payment Processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners.
• Identity Verification Services: Confirmation results from third-party KYC verification providers used to cross-check identity documents.
• Fraud Prevention Partners: Risk signals and flagging data from fraud detection services integrated into the Platform.
• Marketing Partners: Where you have consented to receive marketing from a third party and that party shares your contact details with acu365 in accordance with their own privacy policy.

Data Category	Examples	Source
Identity Data	Full name, date of birth, NID number	Provided by player during registration / KYC
Contact Data	Email, phone, address in Bangladesh	Provided by player during registration
Financial Data	bKash number, Nagad number, card token	Provided by player during deposit / withdrawal
Technical Data	IP address, device type, browser	Automatically collected on Platform access
Gaming Activity Data	Bet history, game sessions, transactions	Automatically generated by Platform use
Cookie Data	Session tokens, preference cookies	Automatically set by Platform

2. How We Use Your Data

acu365 processes personal data only where there is a lawful basis for doing so. The following table summarises the primary purposes for which we use your personal data and the corresponding lawful basis for processing:

2.1 Account Management and Service Delivery

We use your identity, contact, and account credential data to create and manage your acu365 player account, verify your identity during the KYC process, process your deposits and withdrawals in BDT, deliver the games and betting markets you access on the Platform, and provide responsive customer support when you contact us.

2.2 Legal and Regulatory Compliance

acu365 is required to collect and retain certain personal data to comply with its anti-money-laundering ("AML") obligations, age verification requirements, and other applicable legal duties. This includes verifying that players are at least 18 years of age, screening transactions against sanctions lists, and maintaining financial records for the minimum periods required by law.

2.3 Fraud Prevention and Platform Security

Technical and identity data is used to detect and prevent fraudulent account registrations, identify patterns consistent with bonus abuse or collusion, monitor for unusual transaction activity that may indicate financial crime, and protect the integrity of games and betting markets on the Platform.

2.4 Responsible Gaming

Gaming activity data and account usage patterns are analysed to identify players who may be exhibiting signs of problem gambling behaviour. This analysis supports the Platform's responsible gaming programme, including the application of deposit limits, session reminders, and self-exclusion tools as described on the acu365 Responsible Gaming page.

2.5 Marketing Communications

Where you have opted in to receive marketing communications, acu365 will use your contact data to send you information about relevant promotions, bonuses, new game releases, and seasonal offers (including Eid promotions, Pohela Boishakh offers, and BPL season specials). You may withdraw your consent to marketing communications at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email we send you. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

2.6 Platform Improvement and Analytics

Aggregated and anonymised usage data is used to understand how players interact with the Platform, identify usability issues, improve game offerings, and optimise the player experience. This analytics processing does not identify individual players and is carried out on the basis of acu365's legitimate interest in improving the Platform.

3. Cookies and Tracking Technologies

3.1 What Are Cookies?

Cookies are small text files placed on your device by the acu365 Platform when you visit or log in. They allow the Platform to recognise your device across sessions, maintain your login state, remember your preferences, and collect usage data for analytics and security purposes.

3.2 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, preserve your security tokens, and enable core features such as the cashier and game launcher. These cookies cannot be disabled without breaking Platform functionality.
• Functional Cookies: These cookies remember your preferences such as language settings, preferred payment method, and game display options. Disabling them will not prevent you from using the Platform but will result in a less personalised experience.
• Analytical Cookies: These cookies collect aggregated data about how players use the Platform, such as which pages are visited most frequently and where players encounter errors. This data is used solely to improve Platform performance. All analytical data is anonymised before processing.
• Security Cookies: These cookies support acu365's fraud detection systems by flagging devices that have been previously associated with suspicious activity. They help protect the Platform and its players from fraudulent account access.

3.3 Managing Cookie Preferences

You may configure your browser to block or delete cookies at any time. Please refer to your browser's help documentation for instructions. Note that blocking strictly necessary cookies will prevent you from logging in to the Platform. acu365 does not use third-party advertising cookies or tracking pixels for cross-site behavioural advertising.

4. Data Sharing and Disclosure

4.1 Service Providers

acu365 shares personal data with carefully selected third-party service providers who assist in operating the Platform. These providers are permitted to process your data only for the specific purposes set out in their contracts with acu365 and are prohibited from using your data for any other purpose. Categories of service providers who may receive your data include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa and Mastercard processing networks)
• KYC and identity verification service providers
• Fraud prevention and risk management technology providers
• Cloud hosting and infrastructure providers
• Customer support software providers
• Email delivery service providers (for transactional and, where consented to, marketing communications)

4.2 Game Providers

To facilitate the delivery of third-party casino games on the Platform, certain technical data (including your player session identifier and game activity data) may be shared with game studios and providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This sharing is limited to the data strictly necessary for game delivery and player account reconciliation. These providers are not permitted to use your data for their own marketing purposes.

4.3 Legal Disclosure

acu365 may disclose your personal data to law enforcement agencies, regulatory authorities, or other third parties where required to do so by applicable law, court order, or where acu365 believes in good faith that disclosure is necessary to prevent fraud, money laundering, or other criminal activity, or to protect the rights, property, or safety of acu365, its players, or the public.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of acu365's business or assets, personal data held about players may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to data processing arrangements that arise from it.

4.5 No Sale of Personal Data

acu365 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Any sharing of personal data with third parties is conducted solely on the basis of the legitimate purposes described in this Policy and subject to appropriate contractual protections.

5. Data Retention and Storage

5.1 Retention Periods

acu365 retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account and Identity Data: Retained for the duration of the active player account plus a minimum of 5 years following account closure, in accordance with financial record-keeping obligations.
• Transaction and Financial Data: Retained for a minimum of 5 years following the date of each transaction, consistent with AML compliance requirements.
• KYC Documents: Retained for 5 years following account closure or the completion of the last transaction, whichever is later.
• Customer Support Communications: Retained for 3 years from the date of the last interaction, or longer if the communication is relevant to an ongoing dispute or legal matter.
• Gaming Activity Logs: Retained for 5 years for responsible gaming monitoring and dispute resolution purposes.
• Technical and Log Data: Retained for 12 months in standard operational logs, and up to 5 years in security incident records.

5.2 Data Storage Location

acu365 stores personal data on secure servers. Where data is processed or stored outside of Bangladesh, acu365 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection principles, including the use of contractual data transfer mechanisms with third-party processors.

5.3 Data Deletion Requests

You may request the deletion of your personal data at any time by contacting [email protected]. Please note that acu365 is not able to delete data that it is legally required to retain. Where a deletion request cannot be fulfilled in full due to legal retention obligations, acu365 will inform you which categories of data will be retained and for how long.

6. Your Privacy Rights

As a player on the acu365 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact acu365 at [email protected]. acu365 will respond to all valid rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data that acu365 holds about you, along with information about how that data is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held about you be corrected or completed without undue delay.
• Right to Erasure: You have the right to request that acu365 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations that override this right.
• Right to Restriction of Processing: You have the right to request that acu365 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to acu365 in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to other forms of processing carried out on the basis of legitimate interests, although acu365 may be able to demonstrate compelling legitimate grounds that override your objection.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

7. Data Security Measures

7.1 Technical Safeguards

acu365 implements a comprehensive set of technical security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.2 / TLS 1.3 encryption for all data transmitted between your device and the Platform.
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment method information.
• Bcrypt or equivalent hashing algorithms for all stored account passwords — plain-text passwords are never retained.
• Payment tokenisation for card transactions — full card numbers are never stored on acu365's servers.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Real-time intrusion detection and monitoring systems for early identification of security incidents.
• Multi-factor authentication available for player accounts and mandatory for all acu365 staff accessing player data.

7.2 Organisational Safeguards

In addition to technical controls, acu365 maintains organisational measures to protect personal data, including strict access controls that limit employee access to personal data on a need-to-know basis, regular data protection training for all staff, formal data breach response procedures, and data processing agreements with all third-party processors.

7.3 Your Responsibilities

While acu365 takes all reasonable steps to protect your personal data, the security of your account also depends on your own actions. You are responsible for maintaining the confidentiality of your login credentials, using a strong and unique password for your acu365 account, and logging out of your account when using shared or public devices. If you suspect your account security has been compromised, contact [email protected] immediately.

8. Contact and Complaints

8.1 Contacting acu365 About Your Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which acu365 processes your personal data, please contact the acu365 Data Protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Privacy Request — [Your Registered Email Address]
• Response time: acu365 aims to acknowledge all privacy-related contacts within 48 hours and to provide a substantive response within 30 days.

8.2 Complaints Procedure

If you are not satisfied with acu365's response to your privacy concern, you have the right to escalate your complaint. acu365 encourages players to contact the support team in the first instance so that we can attempt to resolve your concern directly. Where a complaint cannot be resolved through the internal process, players may seek independent redress through the appropriate dispute resolution mechanism available in their jurisdiction.

8.3 Changes to This Policy

acu365 periodically reviews and updates this Privacy Policy to reflect changes in our data processing practices, applicable law, or Platform features. The version number and effective date at the top of this page indicate the current version. We encourage you to review this Policy regularly. Where changes are material, registered players will be notified by email at least 7 days before the changes take effect.