Privacy Policy — How ac356 Collects, Uses, and Protects Your Data

This Privacy Policy describes how ac356 ("we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "player", "user") who access or use the ac356 online betting and casino platform available at https://ac356.io and all associated interfaces and services. This policy applies to all registered players and to visitors who browse the Platform without creating an account.

ac356 is committed to handling your personal data with transparency, integrity, and respect. We process personal data only for defined, legitimate purposes and retain it only for as long as necessary to fulfil those purposes or to comply with applicable legal obligations.

By registering an account, making a deposit, placing a bet, or otherwise using any service available on the ac356 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this policy, you should not use the Platform.

For the purposes of this Privacy Policy, ac356 acts as the data controller in respect of the personal data collected and processed through the Platform. As data controller, ac356 determines the purposes for which and the means by which your personal data is processed.

All enquiries relating to the processing of your personal data, including requests to exercise your data rights, should be directed to the ac356 data protection contact by email at [email protected] (plain text — not a clickable link). ac356 will acknowledge data-related enquiries within 48 hours Bangladesh Standard Time (UTC+6) and will endeavour to resolve all requests within 30 calendar days.

ac356 collects personal data from you in several ways: directly when you provide it during registration or support interactions, automatically when you use the Platform, and from third-party payment providers in the course of processing your transactions. The categories of personal data we collect are set out below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity verification documents submitted during KYC incidentally contain such information — in which case that information is not extracted, processed, or stored separately from the verification document itself.

ac356 uses the personal data it collects for the following defined purposes only. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your explicit consent.

• Account Management: To create, maintain, and administer your ac356 player account, including authentication and account security.
• Service Delivery: To enable you to place bets, play casino games, make deposits and withdrawals, and use all features available on the ac356 Platform.
• Identity Verification (KYC): To verify your identity and age in compliance with our obligations to prevent underage gambling and to conduct appropriate anti-money-laundering (AML) checks.
• Transaction Processing: To process and record your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladesh bank partners, and to maintain accurate financial records.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, cheating, multi-accounting, money laundering, and other prohibited conduct on the Platform.
• Customer Support: To respond to your enquiries, complaints, and support requests, and to maintain a record of those interactions.
• Responsible Gaming: To monitor player activity for indicators of problem gambling behaviour and to deliver responsible gaming interventions, deposit limit tools, and self-exclusion where requested or required.
• Platform Improvement: To analyse how players use the Platform, identify technical issues, and improve the overall user experience, game selection, and service quality.
• Legal Compliance: To comply with applicable laws, regulatory requirements, and lawful requests from competent authorities.
• Communications: To send you service-related communications such as account activity notifications, security alerts, and policy update notices. We do not send unsolicited marketing communications.

ac356 processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to perform the contract between you and ac356 — including account creation, service delivery, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, AML transaction monitoring, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for the legitimate interests of ac356, where those interests are not overridden by your privacy rights — including fraud prevention, Platform security, and Platform performance analytics.
• Consent: Processing based on your freely given, specific, and informed consent — such as the placement of non-essential analytics cookies. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

ac356 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your personal data only with the following categories of recipients, and only to the extent necessary for the specified purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — to process your deposits and withdrawals. These providers receive only the transaction data necessary to complete the payment.
• KYC & Identity Verification Partners: Third-party identity verification service providers who assist ac356 in validating player identity documents and performing AML screening.
• Game Content Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Hacksaw Gaming, and Ezugi may receive a session token and player ID for the purpose of delivering game content. These providers do not receive your full name, payment details, or other identifying personal data.
• Technology Service Providers: Cloud hosting, server infrastructure, and cybersecurity service providers who support the operation of the ac356 Platform under strict data processing agreements.
• Legal and Regulatory Authorities: Competent governmental authorities, law enforcement agencies, or regulatory bodies where ac356 is required to disclose information by applicable law, court order, or regulatory direction.
• Fraud Prevention Agencies: Shared fraud intelligence networks that assist in identifying and preventing financial crime, multi-accounting, and bonus abuse across the online gaming industry.

All third-party service providers with whom ac356 shares personal data are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection principles.

ac356 does not store, process, or transmit full payment credentials such as complete bKash or Nagad account numbers, bank account numbers, or card numbers on its own servers. All payment transactions are routed through PCI-DSS compliant payment gateway partners who handle sensitive payment credential data directly.

ac356 retains only the following transaction-level data for account record, reconciliation, and dispute resolution purposes: payment method type (e.g., bKash, Nagad), transaction reference number, transaction amount in BDT, transaction date and time (Bangladesh Standard Time, UTC+6), and transaction status.

In accordance with our AML obligations, transaction records are retained for a minimum period of five (5) years from the date of the transaction, regardless of whether the associated player account remains active.

The ac356 Platform uses cookies and similar tracking technologies to ensure Platform functionality, maintain session security, and gather anonymous analytics data about how players interact with the Platform. The categories of cookies used by ac356 are as follows:

• Strictly Necessary Cookies: These cookies are essential to the operation of the Platform. They include session management tokens, security cookies, and load balancing identifiers. The Platform cannot function correctly without these cookies and they cannot be disabled.
• Analytics Cookies: These cookies collect anonymous, aggregated information about how players navigate the Platform — such as which pages are visited most frequently, session duration, and error rates. This data is used solely to improve the Platform experience. No personal identity is attached to this data.
• Preference Cookies: These cookies remember your Platform preferences such as display settings or language selection so that you do not have to re-enter them on each visit.

ac356 does not use third-party advertising cookies, retargeting pixels, social media tracking cookies, or cross-site tracking technologies. You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core features of the Platform, but may affect the accuracy of preference retention.

ac356 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal, regulatory, or contractual retention requirements. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your account being active on the Platform plus a minimum period of five (5) years following account closure, to meet AML and financial record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Retained for three (3) years from the date the support interaction was closed.
• Analytics & Usage Data: Retained in anonymised, aggregated form for up to two (2) years for Platform improvement purposes.
• Self-Exclusion Records: Retained for the full duration of the self-exclusion period plus five (5) years following its expiry to prevent re-registration in contravention of the exclusion.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with ac356's data destruction procedures.

As an ac356 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact ac356 support at [email protected] (plain text — not a clickable link) with your full name, registered account username, and a description of your request.

• Right of Access: You have the right to request a copy of the personal data ac356 holds about you, together with information about how it is being used.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data we hold about you be corrected or completed without undue delay.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ac356's legal retention obligations which may require us to retain certain data.
• Right to Restrict Processing: You have the right to request that ac356 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to our processing.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where processing is based on your consent or on a contract with you.
• Right to Object: You have the right to object to the processing of your personal data where processing is based on our legitimate interests, including profiling carried out for fraud prevention purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ac356 will respond to all valid data rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, this period may be extended by a further 30 days, in which case ac356 will notify you of the extension within the initial 30-day period.

ac356 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls:

• TLS 1.3 encryption for all data in transit between your device and the ac356 Platform.
• AES-256 encryption for sensitive personal data stored at rest on ac356 servers.
• Role-based access controls ensuring that ac356 personnel can access personal data only on a strict need-to-know basis.
• Multi-factor authentication requirements for all ac356 internal systems that handle player personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Continuous intrusion detection and security event monitoring across all Platform infrastructure components.
• Formal incident response procedures to contain, investigate, and remediate any data security incident.

In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of affected players, ac356 will notify affected players without undue delay, providing details of the nature of the breach, the data affected, and the steps ac356 has taken or is taking to address it.

The ac356 Platform is strictly intended for adults aged 21 years and above. ac356 does not knowingly collect personal data from individuals under the age of 21. If ac356 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, any balance will be reviewed in accordance with our Terms & Conditions, and all associated personal data will be deleted from our systems.

If you have reason to believe that a minor has registered an account on the ac356 Platform, please notify us immediately at [email protected] (plain text — not a clickable link) so that we can take prompt action. For information on protecting minors from gambling-related harm, please visit our Responsible Gaming page.

ac356 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal obligations. When material changes are made to this policy, ac356 will update the "Last Updated" date at the top of this document and will notify registered players via the contact method on record for their account where the changes materially affect how their data is used.

Your continued use of the ac356 Platform after any revised Privacy Policy has been published constitutes your acceptance of the updated policy. We encourage you to review this page periodically so that you remain informed about how ac356 handles your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to ac356's handling of your personal data, please contact the ac356 data protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response Target: Within 48 hours Bangladesh Standard Time (UTC+6)
• Data Rights Request Resolution: Within 30 calendar days of receipt
• Support Hours: 24 hours a day, 7 days a week
• Language: English