Your Privacy, Protected by ac77

ac77 ("we", "us", "our") operates the online betting and gaming platform accessible at https://ac77.io (the "Platform"). We are committed to protecting the personal data of every player who registers and uses our services. This Privacy Policy sets out, in full and in plain English, the basis on which any personal data we collect from you, or that you provide to us, will be processed by ac77.

This Policy applies to all users of the ac77 Platform, including registered account holders, visitors who browse the Platform without registering, and any person who contacts ac77's support team. By accessing the Platform and registering an account, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Privacy Policy is incorporated by reference into ac77's Terms & Conditions. In the event of any conflict between the Terms & Conditions and this Privacy Policy in relation to data processing matters, this Privacy Policy shall prevail. ac77 reserves the right to update this Policy from time to time. When material changes are made, registered users will be notified via the email address associated with their account and a prominent notice will be displayed on the Platform for a minimum of 14 days following the update.

ac77 is operated primarily for players located in Bangladesh. References to applicable law in this Policy include data protection and privacy obligations that apply in the jurisdiction in which ac77 operates. Where international data transfers are involved, ac77 takes appropriate contractual and technical measures to ensure that personal data remains adequately protected regardless of where it is processed.

ac77 collects personal data through several channels: directly from you when you register an account, make a deposit or withdrawal, contact support, or interact with our Platform; automatically through your use of the Platform via cookies and server logs; and from third-party identity verification, payment, and fraud prevention partners where necessary.

Registration Data

When you create an ac77 account, we collect the following information:

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address, including district, city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi), and postal code.
• Email address (used for account communications and KYC correspondence).
• Mobile phone number (used for SMS OTP two-factor authentication and account alerts).
• Username and encrypted password.

Identity Verification (KYC) Data

As part of our Know Your Customer process, ac77 may request and retain:

• A copy of a valid government-issued photo ID (National ID card, passport, or driving licence).
• Proof of residential address (utility bill, bank statement, or government correspondence no older than three months).
• Proof of payment method ownership (screenshot of bKash, Nagad, Rocket, or Upay wallet linked to the account).
• Source of funds documentation where deposits exceed internal compliance thresholds.
• Selfie or live photo for biometric verification, where required by our compliance team.

Financial Transaction Data

When you make deposits or request withdrawals, ac77 records:

• Transaction amounts, dates, and times in Bangladesh Standard Time (BST, UTC+6).
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer).
• Transaction reference numbers and confirmation codes issued by the payment provider.
• Account balance history relevant to the transaction.

ac77 does not store full card numbers, CVV codes, or mobile wallet PINs. Payment card data is tokenised and handled exclusively by our PCI-DSS compliant payment processing partners.

Behavioural and Usage Data

ac77 automatically collects the following data when you use the Platform:

• IP address and approximate geolocation (country and city level).
• Device type, operating system, browser type and version.
• Pages visited, time spent on each page, click paths, and navigation patterns.
• Betting and gaming activity logs, including games played, stake amounts, outcomes, and session durations.
• Search queries entered within the Platform.
• Login timestamps and session identifiers.

Communications Data

When you contact ac77 support via email, live chat, or any other channel, we retain records of those communications, including the content of messages, timestamps, and any attachments provided, for the purposes of resolving your query and maintaining a service history.

ac77 uses personal data collected from players solely for the purposes set out in this Policy. We do not use personal data for purposes incompatible with those stated below without first obtaining your explicit consent or where required by law.

Account Management and Service Delivery

• To create, maintain, and manage your ac77 account.
• To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer).
• To verify your identity and age in compliance with our 21+ policy and KYC obligations.
• To provide access to betting markets, casino games, live casino, slots, Pool Rummy, West Hunter Bingo, and all other products available on the Platform.
• To send transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.

Legal and Regulatory Compliance

• To fulfil our obligations under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) frameworks.
• To conduct ongoing monitoring of account activity for suspicious patterns consistent with financial crime.
• To respond to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.
• To maintain records for the retention periods required by applicable law.

Responsible Gaming

• To monitor gameplay patterns that may indicate problem gambling behaviour, such as rapid escalation in stakes, extended session durations, or self-exclusion bypass attempts.
• To enforce deposit limits, cooling-off periods, and self-exclusion requests made by the account holder.
• To proactively reach out to players whose usage patterns suggest they may benefit from responsible gaming support, in accordance with our Responsible Gaming policy.

Security and Fraud Prevention

• To detect, investigate, and prevent unauthorised account access, bonus abuse, multi-accounting, payment fraud, and other prohibited activity.
• To cross-reference device fingerprints, IP addresses, and payment method data against known fraud indicators.
• To enforce the prohibition on under-21 account access.

Platform Improvement and Analytics

• To analyse aggregated, anonymised usage data for the purpose of improving the Platform's functionality, performance, and user experience.
• To conduct A/B testing and product research using anonymised data sets that cannot be traced back to individual users.

Marketing Communications

Where you have provided explicit consent to receive marketing communications, ac77 may use your email address and/or mobile number to send you information about promotions, bonuses, seasonal offers (e.g., BPL season bonuses, Eid promotions, Pohela Boishakh offers), and new product launches. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to the withdrawal.

ac77 processes personal data only where a lawful basis for doing so exists. The legal bases upon which ac77 relies for the processing activities described in this Policy are as follows:

• Contractual Necessity: Processing required to enter into and perform the contract with you — specifically, the creation and management of your ac77 account, the processing of deposits and withdrawals, and the delivery of all Platform services.
• Legal Obligation: Processing necessary for ac77 to comply with applicable legal requirements, including KYC and AML obligations, age verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing carried out in pursuit of ac77's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and internal analytics, provided that those interests are not overridden by your rights and freedoms as a data subject.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in relation to the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without detriment to the services you receive.

ac77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. ac77 shares personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Processing Partners

To process deposits and withdrawals, ac77 shares transaction-relevant data with payment service providers including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). Data shared is limited to what is technically required to authorise and complete the transaction. These providers are contractually bound to handle your data in accordance with applicable data protection standards.

Identity Verification and KYC Partners

ac77 works with third-party KYC and identity verification service providers to validate the documents you submit during the verification process. These providers process your identity documents on ac77's behalf and are bound by strict data processing agreements that prohibit them from using your data for any purpose other than identity verification on ac77's behalf.

Game Content Providers

Casino games available on the Platform are supplied by third-party providers including Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, and Spribe. When you play a game supplied by these providers, limited session and gameplay data (such as stake amounts and game outcomes) may be processed by those providers' systems. These providers operate under independent terms and privacy frameworks in addition to their contractual obligations to ac77.

Fraud Prevention and Security Services

ac77 uses third-party fraud detection and cybersecurity tools that may process IP addresses, device identifiers, and behavioural data to identify and prevent fraudulent activity. These services act as data processors on ac77's behalf and are subject to data processing agreements limiting use to fraud prevention purposes only.

Regulatory and Legal Disclosures

ac77 may disclose personal data to competent authorities, regulators, or courts where required by law or where ac77 has a good-faith belief that such disclosure is necessary to comply with a legal obligation, protect the rights and safety of ac77 or its users, or investigate suspected illegal activity.

ac77 uses cookies and similar tracking technologies (including pixel tags, web beacons, and local storage objects) to operate and improve the Platform. Below is a summary of the categories of cookies ac77 uses.

You may manage your cookie preferences at any time through your browser settings. Disabling strictly necessary or functional cookies may impair the functionality of the Platform, including your ability to log in and access your account. Disabling analytics and marketing cookies will not affect your ability to use any Platform feature.

ac77 does not use third-party advertising network cookies that track your browsing activity across websites other than ac77.io for retargeting purposes.

ac77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where deletion is technically not immediately possible (for example, data held in backup archives), the data is isolated from active systems and deleted at the next scheduled backup purge cycle.

ac77 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, accidental loss, or destruction. These measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and ac77's servers is encrypted using industry-standard TLS 1.2 or higher protocols. This applies to all pages of the Platform, including account login, deposit and withdrawal pages, and KYC document upload interfaces.
• Encryption at Rest: Sensitive personal data stored on ac77's servers, including identity documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised ac77 personnel and approved third-party processors with a legitimate operational need are granted access to personal data. All access is logged and audited.
• Two-Factor Authentication: ac77 offers optional SMS OTP two-factor authentication for all player accounts and mandates 2FA for all internal staff accounts that have access to player data.
• Penetration Testing: ac77's Platform and infrastructure are subject to regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident Response: ac77 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to the rights and freedoms of affected individuals, ac77 will notify affected users and relevant authorities within the timeframes required by applicable law.

As a data subject whose personal information is processed by ac77, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact ac77's support team at [email protected] with a clear description of your request and, where required for identity verification, a copy of a valid government-issued photo identification.

• Right of Access: You have the right to request a copy of the personal data ac77 holds about you, along with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared. ac77 will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data ac77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may also update certain information directly through your account settings panel.
• Right to Erasure: In certain circumstances, you may request that ac77 delete the personal data it holds about you. This right is not absolute — it does not apply where ac77 is required to retain the data by law (for example, under AML retention obligations) or where the data is necessary for the establishment, exercise, or defence of legal claims.
• Right to Restriction of Processing: You may request that ac77 restrict the processing of your personal data in specific circumstances, for example where you contest the accuracy of the data or where you have objected to processing based on legitimate interests pending the outcome of a balancing assessment.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to ac77 and to transmit that data to another controller.
• Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on legitimate interests. Upon receipt of a valid objection, ac77 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications or non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

ac77 will not charge a fee for the exercise of any of the above rights in the vast majority of cases. Where a request is manifestly unfounded or excessive, ac77 reserves the right to charge a reasonable administrative fee or to decline the request, in which case the reasons for the refusal will be communicated to you in writing. ac77 aims to respond to all data rights requests within 30 calendar days of receipt of a verified request. Where the complexity or volume of requests requires additional time, ac77 will notify you of the extension and the reasons for it.

ac77 operates a strict minimum age policy of 21 years for all account holders. The Platform is not directed at, and is not intended for use by, persons under the age of 21. ac77 does not knowingly collect personal data from persons under 21 years of age.

If ac77 becomes aware that personal data has been collected from a person under the age of 21, the following steps will be taken immediately: the account will be permanently closed; all balances associated with the account will be forfeited; all personal data associated with the account will be deleted as soon as legally permissible, subject to any overriding retention obligations under AML or other applicable law; and, where required, the matter will be reported to relevant authorities.

If you are a parent or guardian and you believe your child has registered an account with ac77 or provided personal data to ac77 without your knowledge, please contact us immediately at [email protected] with the subject line "Underage Account Report". ac77 will investigate and respond within 48 hours of receipt.

The ac77 Platform integrates third-party services to deliver its full range of features. These include casino game providers (Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, Spribe), payment processing services (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), identity verification providers, fraud prevention tools, and analytics platforms.

Each third-party service provider that processes personal data on behalf of ac77 does so under a written data processing agreement that requires the provider to: process personal data only on ac77's documented instructions; implement appropriate technical and organisational security measures; not engage sub-processors without ac77's prior written authorisation; assist ac77 in meeting its data subject rights obligations; and delete or return all personal data upon termination of the service relationship.

ac77 is not responsible for the privacy practices of third-party game providers in relation to data that you submit directly to those providers through interfaces outside the ac77 Platform. Players are encouraged to review the privacy policies of Evolution Gaming, Pragmatic Play, and other game suppliers independently if they have concerns about how those providers handle data.

ac77 reviews this Privacy Policy at least once every twelve months and whenever a material change to our data processing practices occurs. When this Policy is updated, the "Last Updated" date at the top of the document will be revised accordingly.

For material changes — meaning changes that significantly affect the way ac77 collects, uses, or shares your personal data, or that materially affect your rights as a data subject — ac77 will provide advance notice via the email address registered to your account and display a prominent notice on the Platform for a minimum of 14 days prior to the changes taking effect. Your continued use of the Platform after the effective date of any revised Policy constitutes your acknowledgment of the changes and, where the processing is consent-based, your renewed consent to the updated terms.

If you do not agree with any material change to this Privacy Policy, you are entitled to close your ac77 account by contacting [email protected] and requesting account closure. Any cleared real-money balance will be processed for withdrawal to your registered payment method, subject to standard KYC requirements, as set out in the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ac77 processes your personal data, please contact our support team using the details below. ac77 is committed to addressing all privacy-related enquiries promptly, professionally, and in full accordance with your rights as a data subject.

Email: [email protected]

Subject Line Guidance: To help us route your enquiry to the correct team, please use one of the following subject line prefixes when emailing ac77 about a privacy matter:

• Data Access Request — to request a copy of the personal data ac77 holds about you.
• Data Deletion Request — to request erasure of your personal data.
• Data Correction Request — to request rectification of inaccurate or incomplete data.
• Marketing Opt-Out — to withdraw consent for marketing communications.
• Underage Account Report — to report a suspected underage account.
• Privacy Complaint — to raise a complaint about ac77's data handling practices.
• General Privacy Enquiry — for all other privacy-related questions.

ac77 aims to acknowledge all privacy-related correspondence within 2 business days and to provide a full substantive response within 30 calendar days. Where additional time is required due to the complexity of the request, you will be notified in writing with an explanation and a revised expected response date.

All privacy correspondence is handled in English. Support is also available in Bengali for players who prefer to communicate in their native language — simply indicate your language preference in your initial message and a Bengali-speaking support agent will be assigned to your case.