Your Privacy Matters at
ac678
This Privacy Policy explains how ac678 collects, uses, stores, and protects your personal data. We are committed to full transparency about our data practices so every player across Bangladesh can use our platform with confidence.
At ac678, we take the privacy and security of our players' personal data extremely seriously. This Privacy Policy sets out in clear, plain English how we collect information about you, why we collect it, how we use it, who we share it with, how long we retain it, and what rights you have over your own data. This policy applies to all users of the ac678 platform, including the website at ac678.io, its subdomains, and any associated mobile interfaces, regardless of the device used to access them.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference and form part of the overall agreement between you and ac678. If you have any questions about this policy or about how your data is handled, please contact our Data Protection team at [email protected].
Table of Contents
ac678 is an online casino and sports betting platform operating at ac678.io and all associated subdomains and mobile interfaces. We are the data controller responsible for the personal information collected through the ac678 platform. As data controller, ac678 determines the purposes and means by which your personal data is processed.
For all data protection enquiries, including requests to exercise your rights, requests for information, or complaints relating to how your personal data is handled, please contact us using the following details:
Email: [email protected]
Platform: ac678.io
Support availability: 24/7, Bangladesh Standard Time (BST, UTC+6)
ac678 serves players primarily located in Bangladesh, including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh. All data practices described in this policy apply uniformly to all users of the platform regardless of their geographic location within Bangladesh.
ac678 collects several categories of personal data in the course of providing its services. The specific data collected depends on how you interact with the platform. The categories of data we collect include:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, NID / passport number, selfie photograph | Account registration, KYC verification, age verification |
| Contact Data | Email address, mobile phone number, residential address | Account communications, support, notifications |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, Visa / Mastercard details (partial), transaction history | Deposit and withdrawal processing, fraud prevention |
| Technical Data | IP address, device type, browser type, operating system, session tokens, login timestamps | Platform security, fraud detection, service optimisation |
| Usage Data | Pages visited, games played, bets placed, session duration, click patterns | Service improvement, responsible gaming monitoring, personalisation |
| Communications Data | Support chat logs, email correspondence, feedback submissions | Customer support, dispute resolution, quality assurance |
| Responsible Gaming Data | Deposit limit settings, self-exclusion requests, cool-off period records | Responsible gaming compliance, player protection |
We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless you voluntarily provide such information in the context of a responsible gaming self-assessment or a support communication. Any sensitive data received in this context is treated with the highest level of protection.
ac678 collects personal data through a number of different channels and methods. Understanding these collection points helps you manage what information you share with us:
- Account Registration: When you create an ac678 Player Account, you directly provide identity, contact, and security credential data through the registration form.
- KYC Verification: When completing our Know Your Customer process, you upload identity documents such as your National Identity Card (NID) or passport. These documents are processed to verify your identity and age.
- Financial Transactions: When making a deposit or requesting a withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, financial data is collected and processed to complete the transaction.
- Platform Usage: Automated systems collect technical and usage data each time you interact with the ac678 platform, including when you browse games, place bets, or log in and out of your account.
- Cookies and Tracking Technologies: ac678 uses cookies and similar technologies to recognise your device, maintain your session, and improve platform performance. See Section 7 for full details.
- Customer Support: When you contact our support team at [email protected], information shared during that communication is recorded for support and quality purposes.
- Third-Party Sources: In limited circumstances, ac678 may receive data about you from third-party fraud prevention services or payment processors in order to verify your identity or protect against fraudulent activity.
ac678 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not described in this policy without first obtaining your consent:
- Account Management: To create, maintain, and manage your Player Account, including authentication and account security.
- Identity & Age Verification: To verify that you are who you claim to be and that you meet the minimum age requirement of 21 years.
- Payment Processing: To process deposits and withdrawals in Bangladeshi Taka (BDT) via your chosen payment method, and to reconcile transaction records.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the platform.
- Legal & Regulatory Compliance: To fulfil obligations under applicable laws, including anti-money laundering (AML) requirements, Know Your Customer (KYC) standards, and any directions from law enforcement or regulatory authorities.
- Responsible Gaming: To monitor player activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, and deliver responsible gaming interventions where appropriate.
- Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with your account or transactions.
- Platform Improvement: To analyse aggregated usage data in order to improve the design, performance, and content of the ac678 platform.
- Marketing Communications: To send you information about promotions, bonuses, and platform updates where you have given consent or where we have a legitimate interest to do so. You may opt out of marketing communications at any time by contacting [email protected].
ac678 processes your personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:
- Contractual Necessity: Processing is necessary to perform the contract between you and ac678 — that is, to provide the online casino and sports betting services you have registered to use. This covers account creation, payment processing, and service delivery.
- Legal Obligation: Processing is necessary to comply with legal obligations to which ac678 is subject, including AML/KYC requirements and cooperation with law enforcement authorities.
- Legitimate Interests: Processing is necessary for the legitimate interests of ac678 or a third party, including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided those interests are not overridden by your rights and interests.
- Consent: In cases where we rely on your consent — for example, for certain marketing communications or optional profile data — we will clearly ask for your consent at the relevant point and you may withdraw it at any time without affecting the lawfulness of prior processing.
ac678 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the specific and limited circumstances described below:
- Payment Processors: We share necessary financial data with payment service providers — including bKash, Nagad, Rocket, Upay, and card processing partners — to facilitate deposit and withdrawal transactions. These providers are bound by strict data protection obligations.
- Identity Verification Services: We share identity document data with accredited KYC and AML service providers to complete the verification process required before withdrawals are approved.
- Game Providers: When you play a game on ac678, limited technical data (such as session tokens and game event data) may be shared with certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe to facilitate gameplay. These providers do not receive your identity or contact data.
- Fraud Prevention Partners: We may share technical data with third-party fraud detection services to protect the integrity of the platform and the funds of all players.
- Legal Authorities: ac678 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, or where disclosure is necessary to protect the safety of individuals or the integrity of the platform.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of the ac678 business, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via a notice on the platform.
All third parties with whom ac678 shares personal data are subject to data processing agreements that require them to handle your data in accordance with applicable privacy standards. ac678 remains responsible for ensuring that your data is used only for the purposes described in this policy.
ac678 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that allow the platform to recognise you across sessions and deliver a consistent, personalised experience. The categories of cookies we use are as follows:
- Strictly Necessary Cookies: These cookies are essential for the operation of the ac678 platform. They enable core functions such as user authentication, session management, and secure payment flows. These cookies cannot be disabled without impacting the functionality of the platform.
- Performance & Analytics Cookies: These cookies collect aggregated, anonymised data about how players use the platform — such as which pages are visited most frequently and how long sessions last. This data is used to improve platform performance and user experience.
- Functional Cookies: These cookies allow the platform to remember your preferences, such as language settings, display options, and game history, in order to provide a more personalised experience on future visits.
- Security Cookies: These cookies assist in fraud detection and prevention by recording unusual patterns of activity or multiple failed login attempts associated with a given device or IP address.
ac678 does not use cookies to serve third-party advertising or to track your activity on websites other than ac678.io.
ac678 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years after closure | Legal obligation (AML/KYC compliance) |
| Financial Transaction Records | 7 years from the date of transaction | Legal obligation (financial recordkeeping) |
| KYC Documents | 5 years after account closure or last activity | Legal obligation (AML regulations) |
| Support Communications | 3 years from date of communication | Legitimate interest (dispute resolution) |
| Technical & Usage Data | 13 months from collection | Legitimate interest (analytics, security) |
| Responsible Gaming Records | Duration of self-exclusion plus 5 years | Legal obligation (player protection) |
| Marketing Consent Records | Until consent is withdrawn plus 3 years | Legal obligation (consent management) |
When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
As a user of the ac678 platform, you have a number of rights over your personal data. ac678 is committed to upholding these rights and will respond to any valid request within a reasonable timeframe, and no later than 30 days from receipt of the request. Your rights include:
Right of Access
You have the right to request a copy of all personal data ac678 holds about you. We will provide this in a clear, readable format within 30 days of your verified request.
Right to Rectification
If any personal data ac678 holds about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Right to Restriction
You may request that we restrict the processing of your personal data in certain circumstances, such as while a dispute about accuracy is being resolved.
Right to Portability
Where processing is based on consent or contractual necessity and carried out by automated means, you may request your data in a structured, machine-readable format.
Right to Object
You have the right to object to processing based on legitimate interests, including direct marketing. We will cease that processing unless we can demonstrate compelling grounds to continue.
ac678 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and the ac678 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. Data is never transmitted in plain text.
- Encrypted Data Storage: Sensitive personal and financial data held in ac678 databases is encrypted at rest using AES-256 encryption standards.
- Access Controls: Access to personal data within ac678 is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
- Intrusion Detection: ac678 employs automated systems to detect and respond to unusual access patterns, brute force attempts, and other security threats in real time.
- Regular Security Audits: The ac678 platform undergoes regular security assessments and vulnerability testing conducted by qualified third-party security professionals.
- Incident Response: In the event of a data security incident that affects your personal data, ac678 will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.
The ac678 platform is strictly intended for adults aged 21 years and above. ac678 does not knowingly collect personal data from individuals under the age of 21. The registration process includes an age declaration requirement, and ac678 reserves the right to request documentary proof of age at any stage of the account lifecycle.
If ac678 becomes aware that personal data has been collected from an individual under the age of 21 — whether through self-reporting, document verification, or any other means — the following steps will be taken immediately:
- The account will be suspended and access to the platform revoked.
- All funds held in the account will be withheld pending investigation.
- Any personal data collected in connection with the underage account will be securely deleted once the investigation is concluded, subject to any legal obligation to retain evidence of the incident.
- The matter may be referred to the relevant authorities where required.
Parents and guardians who believe that a minor under their care may have registered an account on ac678 are encouraged to contact us immediately at [email protected]. ac678 takes underage gambling prevention extremely seriously and will act promptly on any such report.
ac678 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we provide. When we make material changes to this policy, we will:
- Update the "Last Updated" date displayed at the top of this page.
- Post a prominent notice on the ac678 platform informing players that the Privacy Policy has been revised.
- Where the changes are significant, send a notification to your registered email address with a summary of what has changed.
Your continued use of the ac678 platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should cease using the platform and contact us at [email protected] to request account closure.
We encourage you to review this Privacy Policy periodically to stay informed about how ac678 protects your personal data. The current and binding version of this policy is always available at ac678.io/privacy-policy.
How ac678 Protects Your Privacy
Every measure we take is designed to ensure that your personal data stays secure, private, and firmly under your control.
End-to-End Encryption
All data transmitted to and from ac678.io is protected with 256-bit SSL/TLS encryption, the same standard used by leading global financial institutions. Your credentials, payment details, and personal information are never exposed in transit.
Strict KYC Standards
ac678 applies rigorous Know Your Customer verification to protect both players and the platform. Identity documents are verified by accredited third-party services and stored with AES-256 encryption. We never use your ID for any purpose beyond verification.
No Data Selling
ac678 will never sell, rent, or trade your personal data to advertisers or data brokers. Your information is used only for the purposes described in this Privacy Policy. You are a player, not a product.
Full User Control
You can access, correct, export, or request deletion of your personal data at any time by contacting our support team. ac678 is committed to responding to all data rights requests within 30 days.
Secure BDT Payments
Deposits and withdrawals via bKash, Nagad, Rocket, and Upay are processed through encrypted, tokenised payment channels. ac678 never stores full payment credentials on its own servers.
Transparent Retention
ac678 keeps personal data only for as long as legally required or operationally necessary. When the retention period expires, your data is securely and permanently deleted or anonymised — no exceptions.
Explore ac678 With Confidence
Now that you understand how ac678 handles your data, dive into hundreds of games, live cricket betting markets, and exclusive BDT promotions — all on a platform built around your security and privacy.