acr365 Privacy Policy

1. Introduction

1.1 acr365 is committed to protecting the privacy of all users who interact with its platform. We understand that your personal data is sensitive, and we take our obligations as a data handler seriously. This Privacy Policy has been drafted to give you a clear and complete picture of our data practices.

1.2 This policy applies to all personal data collected through the acr365 website (acr365.net), mobile browser interface, account registration and verification processes, deposit and withdrawal transactions, customer support interactions, and any other service channels operated by acr365.

1.3 This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall framework governing your relationship with acr365. Together, these documents establish the full scope of your rights and our obligations.

1.4 If you do not agree with the data practices described in this Privacy Policy, you should not register for or continue using the acr365 platform. For questions or concerns, please contact us at [email protected].

2. Data We Collect

2.1 acr365 collects personal data in several categories depending on how you interact with the platform. The categories are described below.

2.1 Identity and Registration Data

When you create an acr365 account, we collect: full name, date of birth, gender, nationality, residential address (including city, district, and postal code), mobile phone number, and email address. This information is required to create and verify your account identity.

2.2 Verification Documents

To comply with our know-your-customer (KYC) and anti-money laundering (AML) obligations, we may request copies of government-issued identification documents such as a National ID card, passport, or driving licence, as well as proof of address documents such as a utility bill or bank statement issued within the last three months.

2.3 Financial and Payment Data

When you make deposits or request withdrawals, we collect transaction records including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank), the mobile number or account identifier associated with the payment method, transaction amounts in Bangladeshi Taka (BDT / ৳), and timestamps of all financial activity. We do not store full payment card numbers on our servers.

2.4 Platform Usage Data

As you use acr365, we automatically collect technical and behavioural data, including: IP address, device type and operating system, browser type and version, pages visited, games played, bet history, session duration, and in-platform navigation patterns. This data is used to improve platform performance, detect fraud, and personalise your experience.

2.5 Communications Data

If you contact acr365 via email or the support system, we retain records of those communications, including the content of messages and any attachments provided. This data is used to manage and resolve your queries and to maintain a record of our support interactions.

2.6 Cookies and Tracking Data

acr365 uses cookies, web beacons, and similar tracking technologies to maintain session state, remember your preferences, and gather anonymised analytics. Please refer to Section 7 of this policy for full details on our cookie practices.

3. How We Use Your Personal Data

3.1 acr365 uses the personal data we collect for the following specific purposes:

Purpose	Data Used	Legal Basis
Account creation and management	Identity data, contact data	Contract performance
Identity verification (KYC)	Identity data, verification documents	Legal obligation
Processing deposits and withdrawals	Financial data, identity data	Contract performance
Fraud detection and AML compliance	Financial data, usage data, IP address	Legal obligation / Legitimate interest
Customer support	Communications data, identity data	Contract performance
Platform analytics and improvement	Usage data, cookies data	Legitimate interest
Responsible gaming monitoring	Usage data, financial data	Legal obligation / Legitimate interest
Promotional communications (opt-in)	Contact data, usage data	Consent

3.2 acr365 will not use your personal data for any purpose materially different from those listed above without first obtaining your explicit consent or establishing a fresh lawful basis for the new processing activity.

3.3 Where acr365 processes your data on the basis of legitimate interest, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms.

4. Legal Basis for Processing

4.1 acr365 processes personal data only where a valid legal basis exists. The primary legal bases we rely on are:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered acr365 player, including account management, transaction processing, and customer support.
• Legal Obligation: Processing is required to comply with applicable laws and regulatory requirements, including KYC, AML, and responsible gaming obligations.
• Legitimate Interests: Processing is necessary for the legitimate interests of acr365, such as fraud prevention, platform security, and service improvement, provided those interests are not overridden by your data protection rights.
• Consent: Where we rely on consent (for example, for marketing communications), you are free to withdraw that consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

5.1 acr365 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. We share personal data only in the circumstances described below.

5.1 Service Providers

We share data with trusted third-party service providers who assist in delivering the acr365 platform, including payment processors (bKash, Nagad, Rocket, Upay), identity verification services, cloud hosting providers, fraud detection services, and customer support tools. All such providers are bound by data processing agreements that restrict their use of your data to the services they provide to acr365.

5.2 Game Studios and Content Providers

When you play games on acr365, technical session data may be shared with the relevant game provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, or Spribe) to facilitate gameplay, record results, and process winnings. Game providers handle this data in accordance with their own privacy and data security standards.

5.3 Legal and Regulatory Disclosure

acr365 may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by law, court order, or regulatory directive. We will notify you of such disclosure where permitted by law.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of acr365's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting changes to your data controller.

5.2 In all cases, acr365 ensures that data shared with third parties is limited to what is strictly necessary and is protected by appropriate contractual safeguards.

6. Data Retention

6.1 acr365 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account relationship with acr365, and for a minimum of five (5) years following account closure, in compliance with AML and financial record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless a longer retention period is required to resolve an ongoing dispute.
• Platform usage and analytics data: Retained in anonymised or aggregated form for up to three (3) years for trend analysis and platform improvement purposes.
• Marketing consent records: Retained for the duration of your consent, plus one (1) year following withdrawal of consent.

6.2 Where personal data is no longer required, acr365 will securely delete or anonymise it in accordance with our internal data disposal procedures.

7. Cookies and Tracking Technologies

7.1 acr365 uses cookies and similar technologies (including web beacons and local storage objects) to operate the platform effectively and to understand how users interact with our services. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: These are essential for the platform to function. They enable core features such as session authentication, account login state, and security token validation. These cookies cannot be disabled without affecting platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use acr365, including which pages are visited most frequently and where users encounter errors. This data helps us improve the platform experience. No personally identifiable information is captured in analytics cookies.
• Preference Cookies: These remember your platform settings and preferences, such as your selected language or display options, so you do not need to reconfigure them on every visit.
• Marketing Cookies (Opt-In Only): If you have consented to marketing communications, certain cookies may be used to measure the effectiveness of promotions shown to you on the acr365 platform. These are only active with your explicit consent.

7.2 You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the acr365 platform, including account login and transaction processing.

8. Your Data Protection Rights

8.1 As a user of the acr365 platform, you hold the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data acr365 holds about you at any time. We will provide this information within thirty (30) days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update basic account information directly through your account dashboard.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. We cannot delete data that is required to be retained under AML or financial regulatory rules.
• Right to Restriction: You may request that acr365 restrict the processing of your personal data in certain circumstances, for example if you contest the accuracy of the data or object to our processing.
• Right to Data Portability: Where processing is based on consent or contract performance and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where acr365 relies on legitimate interests as its legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

8.2 To exercise any of the above rights, please contact us at [email protected]. We will respond to all valid requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

9. Children's Privacy

9.1 The acr365 platform is strictly intended for adults aged 18 and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 18. 18+

9.2 If acr365 discovers or is notified that personal data has been collected from a person under the age of 18, we will immediately suspend the associated account, delete the relevant data, and take appropriate steps to prevent further access by that individual.

9.3 If you believe that a minor has accessed or registered on the acr365 platform, please notify us immediately at [email protected] so that we may investigate and take appropriate action without delay.

10. Security Measures

10.1 acr365 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and acr365 servers.
• Encrypted storage of all sensitive personal data and financial records at rest.
• Role-based access controls ensuring that only authorised personnel can access player data, and only to the extent required for their role.
• Regular security audits and vulnerability assessments of platform infrastructure.
• Multi-factor authentication options for player accounts and mandatory two-factor authentication for internal administrative access.
• Automated fraud detection and anomaly monitoring systems that flag unusual account or transaction activity for review.

10.2 While acr365 takes all reasonable precautions to protect your data, no internet transmission or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your own account credentials and for notifying us promptly of any suspected unauthorised access to your account.

11. Third-Party Links and Services

11.1 The acr365 platform may reference or interact with third-party service providers such as payment processors and game studios. These third parties operate their own platforms and privacy policies that are independent of acr365. acr365 is not responsible for the privacy practices or data security standards of third-party providers.

11.2 We encourage you to review the privacy policies of any third-party service you interact with in connection with your acr365 account, particularly payment service providers such as bKash, Nagad, and Rocket.

12. International Data Transfers

12.1 acr365 primarily processes and stores data in secure data centres. In some cases, personal data may be transferred to or processed by service providers located outside Bangladesh, including cloud hosting providers and game studios operating internationally.

12.2 Where such transfers occur, acr365 ensures that appropriate safeguards are in place to protect your data, including contractual clauses requiring the recipient to apply data protection standards equivalent to those described in this Privacy Policy.

12.3 By using the acr365 platform, you acknowledge and consent to the transfer of your personal data to countries outside Bangladesh where necessary for the delivery of platform services, subject to the safeguards described above.

13. Updates to This Privacy Policy

13.1 acr365 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When material changes are made, we will post the updated policy on this page with a revised effective date and, where appropriate, notify registered players by email.

13.2 The effective date at the top of this policy indicates when the current version was last updated. We encourage you to review this page periodically to remain informed about how we handle your personal data.

13.3 Your continued use of the acr365 platform following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should discontinue use of the platform and request account closure.

14. Contact Us

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data acr365 holds about you, please contact our data support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Website: acr365.net

14.2 We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within thirty (30) days. Where a request involves complex data retrieval or deletion, we will keep you informed of progress throughout the process.