Privacy Policy — ach365

1 Introduction

ach365 ("ach365", "we", "us", "our") operates the online gaming and sports betting platform accessible at https://ach365.app and its associated mobile interfaces (collectively, the "Platform"). We provide casino games, live dealer tables, slot games, crash games, and sports betting markets to players across Bangladesh.

This Privacy Policy ("Policy") describes how ach365 collects, uses, discloses, stores, and protects the personal data of individuals who register for an account, visit the Platform, or otherwise interact with our services ("you", "your", "Player"). This Policy applies to all users of the Platform regardless of the device or method used to access it.

ach365 is the data controller responsible for the personal data processed under this Policy. We take our data protection obligations seriously and are committed to maintaining the privacy, security, and integrity of all personal information entrusted to us by our players in Bangladesh.

This Policy should be read alongside the ach365 Terms & Conditions, which govern the broader contractual relationship between you and ach365. In the event of any inconsistency between this Policy and the Terms & Conditions in respect of data-related matters, this Policy shall prevail.

2 Data We Collect

ach365 collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (required to verify that you are 18 years of age or older);
• Residential address in Bangladesh (including district, division, and postcode);
• National Identity Card (NID) number or Passport number, where requested for KYC verification;
• Username and hashed password (passwords are never stored in plain text).

2.2 Contact Data

• Email address registered to your account;
• Mobile phone number, including bKash, Nagad, or Rocket registered numbers used for payments.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in Bangladeshi Taka (৳), timestamps, and payment method used (bKash, Nagad, Rocket, Upay, or bank transfer);
• Account wallet balance history;
• Bonus claims, wagering activity, and promotional redemption records.

2.4 Gaming & Betting Activity Data

• Game session logs, including game titles played, bet amounts, outcomes, and session duration;
• Sports betting selections, markets, odds accepted, and settlement results;
• Responsible gaming settings you have applied (deposit limits, session reminders, self-exclusion periods).

2.5 Technical & Device Data

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser version;
• Session identifiers and cookie data (see Section 6);
• Platform access logs, including login timestamps and duration.

2.6 Communications Data

• Records of your interactions with our customer support team, including chat transcripts and email correspondence;
• Feedback, complaints, and dispute correspondence.

3 How We Use Your Data

ach365 uses the personal data we collect for the following purposes:

ach365 will not use your personal data for any purpose not listed above without first providing you with notice and, where required, obtaining your consent.

4 Legal Basis for Processing

ach365 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you as a registered player.
• Legal obligation: Certain processing activities, including identity verification, KYC checks, anti-money laundering record-keeping, and reporting to regulatory authorities, are carried out because ach365 is legally required to do so.
• Legitimate interests: Processing carried out for fraud detection, platform security, system analytics, and service improvement is conducted on the basis of ach365's legitimate interest in operating a safe, fair, and functional gaming platform, provided that such interests are not overridden by your rights and freedoms.
• Consent: Where ach365 sends marketing communications or processes optional data not required for platform operation, we do so only on the basis of your explicit consent. You may withdraw consent at any time by contacting [email protected] or updating your account communication preferences.

5 Sharing Your Personal Data

ach365 does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and our banking partners receive the transaction data required to process your deposit or withdrawal. Each payment partner is bound by its own privacy and security obligations.
• Identity verification providers: Third-party KYC and age-verification service providers may receive identity documents submitted by you for verification purposes. These providers are contractually prohibited from using your data for any purpose beyond verification.
• Game content providers: Live casino and slot game studio providers (including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, and others) receive anonymised session data required to deliver the relevant game. Personally identifiable data is not shared with game studios.
• Legal and regulatory authorities: ach365 may disclose personal data to the Bangladesh Financial Intelligence Unit, law enforcement agencies, or other regulatory bodies where required to do so by law or court order.
• Platform security providers: Anti-fraud and cybersecurity service providers may access technical and behavioural data under strict confidentiality agreements to protect the integrity of the Platform.

6 Cookies & Tracking Technologies

ach365 uses cookies and similar tracking technologies to operate the Platform effectively and to understand how players use our services. The following categories of cookies are used:

• Essential cookies: These are strictly necessary for the Platform to function. They maintain your login session, remember your language and currency preferences, and ensure the security of your account. The Platform cannot function correctly without these cookies and they cannot be disabled.
• Functional cookies: These cookies remember your preferences and settings (such as responsible gaming limits you have applied) to provide a more personalised experience. They do not track your activity outside of ach365.
• Analytics cookies: ach365 uses anonymised analytics data to understand traffic patterns, game popularity, and platform performance. No personally identifying information is associated with analytics data. Analytics cookies may be disabled without affecting core platform functionality.
• Security cookies: These cookies support our fraud detection systems by identifying unusual session behaviour or concurrent logins from different locations.

Most web browsers allow you to control cookie settings through the browser menu. Please note that disabling essential cookies will prevent you from logging in to your ach365 account. For full details on managing your cookie preferences, please refer to your browser's help documentation.

7 Data Security

ach365 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ach365 platform, including login sessions, payment processing, and game data;
• Password hashing using industry-standard cryptographic algorithms. Your password is never stored in plain text and cannot be retrieved by ach365 staff;
• Access controls limiting access to personal data to authorised ach365 personnel on a strict need-to-know basis, with all access logged and audited;
• Intrusion detection systems that monitor the Platform continuously for suspicious activity, unauthorised access attempts, and potential data breaches;
• Regular security audits and penetration testing conducted by independent third-party security professionals;
• Secure data storage with all personal data stored in encrypted databases hosted in geographically secure facilities.

Despite these measures, no system connected to the internet can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, ach365 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

You also have an important role in keeping your data secure. Please ensure that you use a strong, unique password for your ach365 account, do not share your login credentials with anyone, and report any suspected unauthorised access to [email protected] immediately.

8 Data Retention

ach365 retains your personal data for the periods set out below, after which data is securely deleted or anonymised:

• Active account data: Retained for as long as your account remains active and for a period of two years following account closure, to allow for the resolution of any outstanding disputes or queries.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction in accordance with anti-money laundering legal obligations applicable in Bangladesh.
• KYC and identity verification documents: Retained for a minimum of five years following account closure, or longer if required by applicable law or pending regulatory investigation.
• Customer support communications: Retained for three years from the date of the interaction to support dispute resolution and service quality management.
• Marketing consent records: Retained for as long as you hold an active account and for two years after withdrawal of consent, to demonstrate compliance with consent obligations.
• Analytics and technical logs: Anonymised after 12 months and retained in aggregated form for platform improvement purposes without any personal identifiers.

Where you request deletion of your account and personal data, ach365 will action the request within 30 days, subject to any legal retention obligations that require us to retain specific data categories for a longer period. You will be informed of any such exceptions at the time of your request.

9 Your Rights

As a player whose personal data is processed by ach365, you have the following rights in relation to your data:

• Right of Access: You may request a copy of the personal data that ach365 holds about you, along with information about how it is used and with whom it is shared.
• Right to Correction: You may request that inaccurate or incomplete personal data be corrected. You may also update certain personal details directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds. Deletion requests are subject to applicable legal retention requirements.
• Right to Data Portability: You may request that ach365 provide your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, in which case ach365 will assess whether its interests override your rights in the specific circumstances.
• Right to Restrict Processing: In certain circumstances, you may request that ach365 restrict the processing of your personal data while a complaint or correction request is being resolved.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our data protection team by email (plain text — not a link): [email protected]. Please include your registered username and a description of your request. ach365 will respond to all rights requests within 10 business days of receipt. There is no charge for exercising your rights, unless a request is manifestly unfounded or excessive, in which case a reasonable fee or refusal may apply.

10 Children's Privacy

ach365 is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 18. The Platform is not directed at, and is not intended for use by, minors.

As part of our account registration process, ach365 requires all applicants to confirm that they are 18 years of age or older. Age verification checks are conducted on accounts where there is any doubt as to the account holder's age. Any account found to belong to a person under 18 will be closed immediately, all associated data will be handled in accordance with applicable law, and any deposits, winnings, or bonuses associated with the account will be forfeited.

If you are a parent or guardian and believe that a minor in your care has registered an account on ach365 or provided personal information without your knowledge, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

11 Third-Party Links

The ach365 Platform does not include links to third-party websites for navigational or informational purposes. However, game content delivered via third-party studio providers (such as live casino environments operated by Evolution Gaming or Ezugi) may be rendered within iframes or similar embedded interfaces that are technically operated by those providers.

When you interact with third-party game studio environments embedded within ach365, your gameplay data within that environment may be processed by the respective studio provider under their own data processing policies. ach365 does not control the data practices of third-party game studios in respect of data they independently collect. We recommend reviewing the privacy documentation of any third-party service provider whose embedded content you interact with.

ach365 accepts no responsibility or liability for the privacy practices of third-party providers operating embedded content within the Platform. Any concerns regarding data processed by a game studio provider should be directed to that provider directly.

12 Policy Updates

ach365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The date on which this Policy was last updated is displayed at the top of this document.

Where we make a material change to this Policy — one that significantly affects your rights or the way in which we process your data — we will provide advance notice via a prominent notification on the Platform and, where possible, by email to your registered address. We encourage you to review this Policy periodically so that you remain informed about how ach365 handles your personal data.

Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you may request closure of your account and deletion of your data by contacting our support team.

13 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which ach365 processes your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, operating in Bangladesh Standard Time (BST, UTC+6).

Email (plain text — not a link): [email protected]

When contacting us regarding a data protection matter, please include your registered username, a description of your concern, and any relevant reference numbers so that we can assist you as efficiently as possible. ach365 treats all data protection queries with the utmost seriousness and will respond to all enquiries within 10 business days of receipt.

ach365 is committed to resolving all privacy concerns directly and transparently. We value the trust that players across Bangladesh place in our platform, and we are dedicated to maintaining the highest standards of data protection in everything we do.