ach67 Privacy Policy — Your Data, Your Rights, Our Commitment

1. Introduction

Welcome to the ach67 Privacy Policy. ach67 operates an online betting and gaming platform accessible at ach67.io, offering cricket sportsbook, live casino, slots, lottery, crash games, and a wide range of other wagering products to players based in Bangladesh. This Privacy Policy applies to all users of the ach67 Platform, including registered account holders, visitors who browse the site without registering, and any individual who contacts ach67 via any support channel.

By accessing or using the ach67 Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection, storage, use, and sharing of your personal data as described herein. If you do not agree with this Privacy Policy, you should not use the ach67 Platform and should contact customer support to close any existing account.

This Privacy Policy should be read alongside ach67's Terms & Conditions, available at ach67.io/terms-conditions, and the Responsible Gaming Policy, available at ach67.io/responsible-gaming. Together, these documents govern your relationship with ach67 as a registered player.

ach67 acts as the data controller in respect of all personal data collected through the Platform. As data controller, ach67 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that such processing complies with applicable data protection standards. If you have any questions about how your data is handled, please refer to Section 15 of this Policy for contact details.

2. Data We Collect

ach67 collects personal data from you in connection with your use of the Platform. The categories of personal data we collect include the following:

2.1 Identity Data

Full legal name, date of birth, gender, and nationality as provided during account registration or KYC verification. This may include copies of official identity documents such as your National Identity Card (NID), passport, or driving licence.

2.2 Contact Data

Email address, mobile phone number, and residential address in Bangladesh, including district, division, and postcode. This information is used for account communications, withdrawal processing, and customer support correspondence.

2.3 Financial Data

Details of the payment methods you use to deposit and withdraw funds from your ach67 account. For mobile financial services such as bKash, Nagad, Rocket, and Upay, this includes the registered mobile number associated with your MFS account. For bank transfers, this includes account name, account number, and bank branch details. For card payments via Visa or Mastercard, ach67 does not store full card numbers — only the last four digits and card type are retained for reference purposes.

2.4 Account & Transaction Data

Your account username, account balance history, deposit and withdrawal transaction records, bet and wager history across all product types (sportsbook, casino, slots, lottery, crash games), bonus claims and wagering progress, and session logs including login timestamps and IP addresses associated with each session.

2.5 Technical Data

Device identifiers, browser type and version, operating system, screen resolution, referring URL, pages visited within the Platform, click and interaction events, and general geographic location data derived from your IP address (city and country level — ach67 does not collect precise GPS-level location data).

2.6 Communications Data

Records of all communications between you and the ach67 customer support team, including live chat transcripts, email correspondence, and any other written communications submitted through the Platform. These records are retained for customer service quality, dispute resolution, and compliance purposes.

2.7 Responsible Gaming Data

Records of any responsible gaming tools you have activated on your account, including deposit limits, cooling-off periods, self-exclusion requests, and session time settings. This data is treated with particular sensitivity and is used exclusively for player protection purposes.

3. How Data Is Collected

ach67 collects your personal data through the following channels and mechanisms:

• Direct Registration: Data you provide when opening an ach67 account, completing KYC verification, or updating your account profile.
• Platform Interactions: Data generated automatically as you use the ach67 Platform, including betting activity, game sessions, navigation behaviour, and feature usage.
• Payment Transactions: Data shared by payment processors including bKash, Nagad, Rocket, Upay, and partnered banks when you initiate deposits or withdrawals.
• Customer Support: Data you provide when you contact ach67 customer support via live chat or email, including details of your query and any supporting documentation you attach.
• Cookies and Tracking Technologies: Data collected automatically via cookies, pixel tags, and similar tracking technologies as described in Section 9 of this Policy.
• Third-Party Identity Verification: Data returned by third-party KYC and identity verification service providers where ach67 uses such services to validate documents submitted by players.
• Fraud Detection Services: Data signals shared by anti-fraud and device fingerprinting providers used by ach67 to identify and prevent fraudulent account activity.

ach67 does not collect personal data from social media platforms, public registries, or any other external source unless explicitly disclosed in this Policy or required for a specific, disclosed compliance purpose.

4. Why We Use Your Data

ach67 uses the personal data it collects for the following specific purposes:

4.1 Account Management

To create and manage your ach67 account, process your registration, authenticate your identity at login, update account settings, and respond to account-related queries from you or your authorised representative.

4.2 Identity Verification and KYC

To verify your age and identity as required by ach67's internal compliance standards. All players must be 21 years of age or older. ach67 is committed to preventing underage gambling and will use your identity data to confirm eligibility before or during account activation.

4.3 Payment Processing

To facilitate deposits into and withdrawals from your ach67 account via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bangladeshi bank transfers. Financial data is used exclusively for transaction processing and fraud prevention — it is never used for marketing or profiling purposes.

4.4 Platform Security and Fraud Prevention

To detect, investigate, and prevent fraudulent transactions, account abuse, multi-accounting, money laundering, and other prohibited activities as defined in the ach67 Terms & Conditions. ach67 employs automated fraud detection systems that analyse technical and behavioural data signals in real time.

4.5 Responsible Gaming Compliance

To monitor player activity for signs of problem gambling behaviour, enforce responsible gaming tools requested by players (deposit limits, self-exclusion, cooling-off periods), and ensure that players on self-exclusion lists are prevented from accessing the Platform.

4.6 Customer Support

To investigate and resolve support queries, disputes, and complaints submitted by players, and to maintain quality records of all support interactions for training and compliance review purposes.

4.7 Service Improvement

To analyse aggregated, anonymised platform usage data to improve the functionality, performance, and user experience of the ach67 Platform. Individual-level behavioural data used for this purpose is anonymised before analysis and is not used to make decisions about individual player accounts.

4.8 Legal and Regulatory Compliance

To fulfil any legal obligation that requires ach67 to retain, disclose, or process personal data, including cooperation with law enforcement authorities in the investigation of criminal activity, fraud, or money laundering.

4.9 Direct Marketing

Where you have provided consent or where ach67 has a legitimate interest in doing so, ach67 may send you promotional communications about new games, bonuses, seasonal promotions (such as Eid, Pohela Boishakh, or IPL season offers), and platform updates. You may withdraw consent to marketing communications at any time by contacting [email protected] or using the unsubscribe option in any marketing email.

5. Legal Basis for Processing

ach67 processes your personal data on the following legal bases depending on the purpose of processing:

• Contractual Necessity: Processing that is necessary to perform the contract between you and ach67 — including account creation, payment processing, bet settlement, and customer support — is carried out on the legal basis of contractual necessity.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, anti-money laundering monitoring, and service improvement is conducted on the basis of ach67's legitimate interests, provided those interests are not overridden by your data protection rights.
• Legal Obligation: Processing required to comply with applicable legal obligations — including identity verification, record keeping, and cooperation with law enforcement — is carried out on the basis of legal obligation.
• Consent: Processing for direct marketing purposes is carried out on the basis of your freely given, informed, and specific consent. You may withdraw this consent at any time without affecting the lawfulness of any processing that occurred prior to withdrawal.

6. Sharing Your Data

ach67 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be shared only in the following specific, controlled circumstances:

6.1 Payment Service Providers

ach67 shares the minimum necessary financial data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard to facilitate deposit and withdrawal transactions. These providers act as data processors under strict contractual obligations and may only use your data to process your transactions.

6.2 Identity Verification Providers

Where ach67 uses third-party KYC verification services to validate identity documents submitted by players, identity data including document images and personal details are shared with those service providers under data processing agreements. These providers are prohibited from using your data for any purpose other than the verification service requested by ach67.

6.3 Fraud Prevention and Security Services

Technical data and behavioural signals may be shared with anti-fraud, device fingerprinting, and security analytics providers for the purpose of detecting and preventing fraudulent activity on the Platform. All such providers are bound by data processing agreements and strict confidentiality obligations.

6.4 Game Studio Providers

Game sessions on ach67 that are powered by third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may involve the transmission of a session token and account identifier to the game studio's servers to facilitate gameplay. The game studios do not receive your full personal profile; only the minimum data required to run the game session is shared.

6.5 Legal Authorities

ach67 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required or permitted to do so by applicable law — for example, in the investigation of fraud, money laundering, or underage gambling. ach67 will cooperate fully with lawful requests from competent authorities.

6.6 Business Transfers

In the event that ach67 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the way your data is handled as a result.

7. Data Retention

ach67 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention guidelines apply:

• Active Account Data: All personal data associated with an active ach67 account is retained for the full duration of your account's active period.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC Documents: Identity verification documents submitted as part of the KYC process are retained for a minimum of 5 years from the date of account closure or the last transaction, whichever is later.
• Betting and Gaming History: Records of your bets, game sessions, and wagering activity are retained for a minimum of 3 years from the date of each session for dispute resolution and audit purposes.
• Customer Support Records: Records of all support communications are retained for 2 years from the date of the most recent interaction in each support case.
• Self-Exclusion Records: Records of self-exclusion requests and responsible gaming tool activations are retained indefinitely to prevent re-registration by excluded players, unless you request deletion and no legal obligation prevents it.
• Marketing Consent Records: Records of your marketing preferences and consent history are retained for the duration of your account plus 1 year following account closure.

Following the expiry of the relevant retention period, your personal data will be securely deleted or anonymised. Anonymised data — which can no longer identify you as an individual — may be retained indefinitely for statistical and platform improvement purposes.

8. Data Security

ach67 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and the ach67 Platform is protected by 256-bit SSL/TLS encryption. This applies to account login sessions, payment transactions, and all other data exchanges with the Platform.
• Encrypted Data Storage: Sensitive personal data stored on ach67's servers — including identity documents and financial records — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within ach67's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role. All internal access to personal data is logged and audited.
• Two-Factor Authentication: Internal system access by ach67 staff requires multi-factor authentication. Players are also encouraged to enable two-factor authentication on their own accounts for additional security.
• Penetration Testing: ach67 conducts regular security assessments and penetration tests of its Platform infrastructure to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: ach67 maintains a formal data breach response procedure. In the event of a security incident that affects your personal data, ach67 will assess the incident promptly and notify affected players where required.

While ach67 takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. Never share your ach67 password with anyone, and contact [email protected] immediately if you suspect unauthorised access to your account.

9. Cookies & Tracking Technologies

ach67 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow ach67 to recognise your device across sessions, maintain your login state, and analyse how the Platform is used.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in during a session and security cookies that help detect fraudulent activity. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences within the Platform, such as your preferred language setting, display preferences, and last-viewed game category. These improve your experience but are not essential to basic Platform operation.
• Analytics Cookies: Used to collect anonymised data about how visitors navigate and use the Platform, including pages visited, time spent on each page, and interaction events. This data is used to improve Platform performance and user experience. Individual users are not identified through analytics data.
• Fraud Prevention Cookies: Used by ach67's fraud detection systems to identify device fingerprints, detect automated bot activity, and flag suspicious account access patterns. These cookies are necessary for Platform security and cannot be disabled.

9.2 Managing Cookies

You can control the use of non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the browser's privacy or security settings. Please note that disabling certain cookies may affect the functionality of the ach67 Platform, including your ability to stay logged in during a session.

10. Your Data Rights

As a player on the ach67 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ach67 at [email protected] with your account username and a description of your request.

• Right of Access: You have the right to request a copy of the personal data ach67 holds about you. ach67 will provide a response within a reasonable timeframe and at no charge for reasonable requests.
• Right to Rectification: If any personal data ach67 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic contact information directly from within your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing on legitimate interests grounds and your interests override those of ach67. Note that ach67 may be required to retain certain data for legal compliance purposes even after an erasure request.
• Right to Restrict Processing: You have the right to request that ach67 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing pending verification of ach67's legitimate grounds.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to ach67 in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of ach67's legitimate interests. ach67 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Marketing Consent: Where ach67 sends you marketing communications based on your consent, you have the right to withdraw that consent at any time without detriment to your account.

ach67 aims to respond to all data rights requests within 30 days. Where a request is complex or there are a high volume of requests, ach67 may extend this period by up to a further 60 days and will notify you accordingly.

11. Minors

The ach67 Platform is strictly for adults aged 21 years and above. ach67 does not knowingly collect, store, or process personal data from individuals under the age of 21 under any circumstances. If ach67 discovers or has reason to believe that personal data has been collected from a person under the age of 21, that data will be deleted immediately, the associated account will be permanently closed, and any funds on the account will be frozen pending investigation.

If you are a parent or guardian and believe that a minor in your care has registered an account on the ach67 Platform or has otherwise submitted personal data to ach67, please contact [email protected] immediately. ach67 will investigate your report promptly and take appropriate action.

12. Third-Party Links

The ach67 Platform may contain references to third-party game studios, payment providers, and other external services. Where links to third-party websites or services are present, please be aware that ach67 has no control over the content, privacy practices, or data handling of those third parties. This Privacy Policy applies exclusively to the ach67 Platform and does not govern any third-party website or service that you may access via a reference on the Platform.

ach67 recommends that you review the privacy policy of any third-party service before submitting personal data to it. Visiting a third-party site via the ach67 Platform is at your own risk, and ach67 accepts no responsibility for the privacy practices of any third party.

13. International Data Transfers

ach67 primarily processes personal data within the geographic region in which the Platform operates. However, in certain circumstances — for example, where a game studio server, KYC provider, or fraud detection service is hosted outside Bangladesh — your personal data may be transferred to and processed in a jurisdiction other than your own.

Where such international transfers occur, ach67 takes steps to ensure that appropriate safeguards are in place to protect your personal data, including the use of contractual data processing agreements that require overseas recipients to apply data protection standards equivalent to those applied by ach67. ach67 will not transfer your personal data to a jurisdiction that does not provide an adequate level of protection for personal data without putting appropriate safeguards in place first.

If you require further information about the specific safeguards applied to any international data transfer involving your personal data, please contact [email protected].

14. Changes to This Privacy Policy

ach67 reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made to this Policy, ach67 will notify registered players by email and/or by a prominent notification displayed on the Platform. The updated Privacy Policy will take effect on the date specified in the notification, which will be no less than 7 days after notification for material changes.

Your continued use of the ach67 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should stop using the Platform and contact customer support to close your account. Remaining account balances will be returned to you in the normal course subject to completed KYC verification.

The version of this Privacy Policy currently in force is the version displayed on this page. The "Last Updated" date at the top of this page reflects the date of the most recent revision. If you would like to review a prior version of this Policy, please contact [email protected].

15. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ach67 handles your personal data, please contact the ach67 Data Support team. All privacy-related enquiries are handled by a dedicated member of the support team and are treated with priority and confidentiality.

Email: [email protected]

Live Chat: Available directly through the ach67 Platform when you are logged in to your account. Live chat is the fastest channel for urgent data-related concerns.

ach67 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days. If you are not satisfied with the response you receive from ach67, you retain the right to escalate your complaint to a relevant data protection authority or seek independent legal advice.