acw365 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how acw365 ("we", "us", "our") collects, uses, stores, discloses, and protects personal data provided by or about players and visitors ("you") who access the acw365 platform at acw365.org and any associated mobile or web-based application (collectively, the "Platform").

This Policy applies to all personal data processed in connection with your use of acw365, regardless of whether you are a registered player, a prospective player browsing the Platform, or a person who contacts acw365 support. By registering on or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy. If you disagree with any part of this Policy, you must discontinue use of acw365 immediately.

2. Data Controller

For the purposes of applicable data protection law, acw365 acts as the data controller in respect of all personal data collected through the Platform. This means acw365 determines the purposes for which and the manner in which your personal data is processed.

If you have any questions about this Policy or wish to exercise your data rights, you may contact us using the support email address displayed in the footer of this page. All data-related enquiries are handled by the acw365 compliance team and acknowledged within 48 hours of receipt.

3. Data We Collect

acw365 collects personal data through several channels, including account registration, payment processing, gameplay, customer support interactions, and automated technical means. The categories of data collected are set out below.

4. How We Collect Data

acw365 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, or contacting our support team.
• Automated collection: Technical data (IP address, device identifiers, browser cookies) collected automatically when you visit or interact with the Platform.
• Payment processors: Transaction confirmation data shared by bKash, Nagad, Rocket, and Upay when a deposit or withdrawal is initiated.
• Game providers: Session and outcome data provided by Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe as part of delivering game content.
• Fraud and security tools: Behavioural and device-fingerprint data collected by acw365's internal fraud-detection systems to identify suspicious activity.

5. How We Use Your Data

acw365 processes your personal data only for legitimate, specified purposes. The primary purposes and their corresponding legal bases are:

• Account management: To create, maintain, and close your acw365 account, verify your identity, and authenticate your login sessions. Legal basis: contract performance.
• Payment processing: To execute deposits and withdrawals via mobile wallet channels and to maintain accurate financial records. Legal basis: contract performance.
• Game delivery: To provide access to cricket betting markets, live casino tables, and slot games and to record game outcomes accurately. Legal basis: contract performance.
• Bonus administration: To issue, track, and settle promotional bonuses, free bets, and loyalty rewards in accordance with the applicable promotion terms. Legal basis: contract performance.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling and to apply protective measures such as deposit limits or self-exclusion where appropriate. Legal basis: legitimate interest and legal obligation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised access, and other prohibited activities. Legal basis: legitimate interest and legal obligation.
• Customer support: To respond to your enquiries, complaints, and data-rights requests in a timely and accurate manner. Legal basis: contract performance and legitimate interest.
• Legal compliance: To meet our obligations under applicable anti-money-laundering, know-your-customer, and data retention regulations. Legal basis: legal obligation.
• Marketing communications: To send you promotional offers, seasonal bonuses (e.g., Eid specials, BPL tournament promotions), and platform updates — but only where you have consented to receive such communications. You may withdraw consent at any time by contacting support.

acw365 does not use your personal data to make fully automated decisions that produce significant legal or similarly significant effects on you without a human review step.

6. Data Sharing & Third Parties

acw365 does not sell or rent your personal data. We share data only in the following limited circumstances, and only to the minimum extent necessary:

• Payment processors (bKash, Nagad, Rocket, Upay): We share your mobile wallet number and transaction amount with the relevant payment processor solely to execute and confirm your deposit or withdrawal. The processor's own privacy terms apply to data held on their systems.
• Game content providers (Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe): Session tokens and anonymised player identifiers are shared to authenticate your game session and record outcomes. Providers do not receive your full name, contact details, or financial data.
• Identity verification partners: Where a KYC check is required, document images and identity data may be passed to a vetted verification service operating under a data processing agreement with acw365.
• Fraud and security vendors: Anonymised technical signals (IP ranges, device fingerprints) may be shared with specialist fraud-prevention services to cross-reference known threat indicators.
• Legal and regulatory authorities: acw365 will disclose personal data to competent authorities when required to do so by a valid legal obligation, court order, or regulatory directive. We will notify you of any such disclosure where permitted by law.

All third-party service providers are required to process your data only as instructed by acw365, to maintain appropriate security measures, and to refrain from using your data for their own independent purposes.

7. Cookies & Tracking Technologies

acw365 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and detect fraudulent activity. The types of cookies used are:

• Strictly necessary cookies: Required for core Platform functionality such as session authentication and maintaining your login state. These cannot be disabled.
• Performance cookies: Collect anonymised data about page load times, error rates, and navigation paths to help us improve Platform performance.
• Functional cookies: Remember your preferences such as language settings and notification choices across sessions.
• Security cookies: Support fraud detection by recording device characteristics and login patterns for comparison against known threat signatures.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to or using acw365. Disabling performance or functional cookies will not affect your ability to place bets or access games, but may degrade the overall experience.

8. Data Retention

acw365 retains personal data for as long as your account is active and for a defined period thereafter, depending on the category of data and the purpose for which it was collected. Our standard retention schedule is as follows:

• Account and identity data: Retained for the lifetime of your account plus 5 years after account closure, to satisfy anti-money-laundering record-keeping requirements.
• Financial transaction records: Retained for 7 years from the date of each transaction to comply with financial record-keeping obligations.
• Gaming history: Retained for 3 years from the date of each game session. Aggregated statistical data (with all identifiers removed) may be retained indefinitely for analytical purposes.
• Support correspondence: Retained for 2 years from the date of the last message in each support thread.
• Technical and cookie data: Session cookies are deleted on browser close. Persistent cookies expire within 12 months of being set.
• Self-excluded accounts: Where a Player has requested self-exclusion, sufficient data is retained throughout the exclusion period to prevent re-registration in breach of the exclusion.

When the applicable retention period expires, data is securely deleted or permanently anonymised. Anonymised data (from which no individual can reasonably be identified) is not subject to these retention limits.

9. Data Security

acw365 implements a layered set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS 1.2 and above) on all data in transit between your device and acw365 servers.
• AES-256 encryption for sensitive data fields stored at rest, including password hashes and identity document references.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Regular security vulnerability assessments and penetration testing of Platform infrastructure.
• Intrusion detection systems and 24/7 automated monitoring of server access logs for anomalous activity.
• Two-factor authentication options for Player accounts to reduce the risk of unauthorised login.

Despite these measures, no data transmission over the internet or storage system can be guaranteed as absolutely secure. If acw365 becomes aware of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable law.

10. Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by acw365:

• Right of access: You may request a copy of all personal data acw365 holds about you. We will provide this within 30 days of a verified request.
• Right to rectification: You may ask us to correct any inaccurate or incomplete personal data. For account details such as your registered mobile number, you may update these directly within your account settings.
• Right to erasure: You may request that acw365 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may ask us to pause processing of your data in certain circumstances — for example, while a rectification request is being resolved.
• Right to data portability: You may request a structured, machine-readable export of the personal data you have provided to acw365.
• Right to object: You may object to processing based on legitimate interests, including processing for direct marketing purposes. We will cease marketing communications immediately upon request.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the acw365 support team at the email address shown in the footer of this page. We may need to verify your identity before processing your request. We will not charge a fee for reasonable requests, though we reserve the right to charge a reasonable administration fee for manifestly unfounded or repetitive requests.

11. Children's Privacy

acw365 is strictly an adults-only platform. We do not knowingly collect or process personal data from any person under the age of 21. If you are under 21, you must not register or attempt to use acw365.

If acw365 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, the personal data will be deleted, and any associated funds or winnings will be handled in accordance with our Terms & Conditions. Parents or guardians who believe their child has created an acw365 account should contact our support team immediately.

12. International Data Transfers

acw365 operates infrastructure and engages service providers located in multiple countries. As a result, your personal data may be transferred to and processed in jurisdictions outside Bangladesh. Where such transfers occur, acw365 takes appropriate steps to ensure that your data receives an equivalent level of protection to that required under applicable Bangladeshi data protection principles, including through the use of data processing agreements with overseas service providers.

Specifically, personal data shared with game content providers (Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe) may be processed on servers located in their respective countries of operation. Each such transfer is governed by a contractual arrangement that imposes data protection obligations on the recipient.

13. Changes to This Policy

acw365 may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal requirements, or business operations. When we make material changes, we will update the Last updated date at the top of this page and, where appropriate, notify registered players by email or in-platform notification.

Your continued use of acw365 after a revised Policy has been published constitutes your acceptance of the updated terms. If you do not agree with any changes, you must discontinue use of the Platform and may request account closure via the support team.

14. Contact & Complaints

If you have any questions, concerns, or complaints about how acw365 handles your personal data, please contact our support team at the email address displayed in the footer of this page. We aim to acknowledge all data-related enquiries within 48 hours and to resolve them within 30 days.

If you are not satisfied with our response, you have the right to escalate your complaint in accordance with the dispute resolution process set out in our Terms & Conditions. acw365 is committed to resolving all privacy concerns fairly and transparently.