ac333 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction

ac333 is committed to protecting the privacy and personal data of every player who uses our online cricket betting and live casino platform. This Privacy Policy sets out a clear, honest, and complete account of how ac333 collects personal information, the purposes for which that information is used, the conditions under which it may be shared with third parties, and the rights available to you as a data subject.

This Policy applies to all personal data processed in connection with your use of the ac333 website at ac333.io and all associated services, including account registration, identity verification, payment processing, sports betting, casino gaming, customer support interactions, and any promotional or bonus communications.

ac333 is operated for players located in Bangladesh. This Privacy Policy has been drafted in English and reflects our commitment to transparency with the Bangladeshi player community. Where we reference applicable law, we refer to the general principles of data protection applicable to online services operating in or targeting the Bangladesh market.

2. Data Controller

For the purposes of this Privacy Policy, ac333 acts as the data controller in respect of all personal data collected from players using the ac333 platform. As data controller, ac333 determines the purposes and means by which your personal data is processed.

All queries, requests, and complaints relating to the processing of your personal data should be addressed directly to ac333's support team using the contact details provided in Section 15 of this Policy. We aim to respond to all data-related enquiries within 5 business days of receipt.

3. Data We Collect

ac333 collects personal data across several categories. The specific data collected depends on the nature of your interaction with the platform. The following table provides a clear breakdown of the categories of personal data we collect and specific examples within each category.

3.1 Special Category Data

ac333 does not intentionally collect special category personal data (such as health information, racial or ethnic origin, religious beliefs, or political opinions) from players. However, in limited circumstances — for example, where a player contacts us regarding a gambling-related health concern or requests support through our Responsible Gaming tools — we may receive information that falls into a sensitive category. In such cases, that information is handled with the highest level of confidentiality and used solely for the purpose of providing the requested support.

4. How We Collect Data

ac333 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

The majority of personal data ac333 holds is provided directly by you. This includes information submitted during account registration, identity verification (KYC), payment method registration, customer support interactions, and when you voluntarily update your account profile settings.

4.2 Automated Technical Collection

When you access the ac333 platform, certain technical data is collected automatically by our systems. This includes your IP address, the type and version of the browser and operating system you are using, the pages you visit on ac333, the time and duration of each visit, and referring URLs. This information is collected to ensure the technical stability of the platform, to detect and prevent fraudulent access, and to improve the overall user experience.

4.3 Cookies and Similar Technologies

ac333 uses cookies and similar browser-based tracking technologies to recognise returning users, maintain session states, and gather aggregated analytics data. For a full explanation of the cookies ac333 uses and how to manage your cookie preferences, please refer to Section 8 of this Policy.

4.4 Third-Party Sources

In some cases, ac333 may receive personal data about you from third-party sources, including identity verification partners used in the KYC process and payment service providers such as bKash, Nagad, Rocket, and Upay. Data received from these sources is used only to validate information you have already provided to us and to fulfil our regulatory obligations.

5. How We Use Your Data

ac333 uses the personal data it collects for the following clearly defined purposes:

• Account Management: Creating and maintaining your ac333 player account, authenticating your identity on login, and enabling account settings management including responsible gaming tool configuration.
• Identity Verification (KYC): Confirming that you are who you say you are, that you are aged 21 or above, and that you are not a politically exposed person or subject to any sanctions that would prevent us from providing services to you.
• Payment Processing: Processing deposits from and withdrawals to your registered bKash, Nagad, Rocket, Upay, or bank account. Verifying that payment accounts are registered in your own name, consistent with our anti-money laundering obligations.
• Service Delivery: Enabling you to place bets on sporting events including BPL and T20 cricket, play casino and slots games, access live dealer tables, and use all other features of the ac333 platform.
• Customer Support: Responding to your queries, complaints, and requests submitted via live chat or email. Maintaining records of support interactions to ensure continuity and quality of service.
• Fraud Prevention and Security: Monitoring accounts and transactions for suspicious activity, detecting and preventing unauthorised access, identifying multiple-account abuse, and fulfilling our obligations under applicable anti-money laundering frameworks.
• Responsible Gaming Compliance: Monitoring player activity patterns to identify signs of problem gambling, enforcing self-exclusion requests and deposit limits set by the player, and providing proactive responsible gaming interventions where warranted.
• Platform Improvement: Using aggregated and anonymised usage data to analyse platform performance, identify technical issues, and improve the user experience for all players on ac333.
• Promotional Communications: Where you have opted in to receive marketing communications, sending you information about ac333 bonuses, promotions, and relevant platform updates via your registered email address or mobile number.

6. Legal Basis for Processing

ac333 processes personal data on the basis of one or more of the following recognised legal grounds:

• Contractual Necessity: Processing that is necessary to perform the contract between ac333 and you — specifically, the Terms & Conditions you accept at registration. This covers account creation, payment processing, service delivery, and customer support.
• Legal Obligation: Processing that is required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) identity verification standards, and age verification obligations.
• Legitimate Interests: Processing carried out in pursuit of ac333's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud detection, platform security, responsible gaming monitoring, and aggregated analytics.
• Consent: Where we rely on your consent as the legal basis for processing — most notably for the sending of direct marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the point of withdrawal.

7. Data Sharing

7.1 With Whom We Share Data

ac333 does not sell your personal data. We share personal data with third parties only in the following tightly defined circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — shared to the minimum extent necessary to process deposits and withdrawals.
• Identity Verification Partners: Third-party KYC and document verification service providers engaged by ac333 to validate player identity and age. These partners are contractually bound to process data only on ac333's instructions and to maintain equivalent data protection standards.
• Game Technology Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive certain technical session data necessary to deliver their games within the ac333 platform environment.
• Legal and Regulatory Authorities: ac333 will disclose personal data to law enforcement, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or in response to a valid legal process.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by ac333 under duties of confidentiality, where access to personal data is necessary for the provision of their professional services.

7.2 International Transfers

Some of ac333's technology and service partners may be located outside of Bangladesh. Where personal data is transferred to processors or controllers in other jurisdictions, ac333 takes steps to ensure that appropriate safeguards are in place, including contractual obligations binding those recipients to data protection standards consistent with the principles in this Policy.

8. Cookies & Tracking Technologies

8.1 What Cookies Are

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, to remember user preferences, and to provide information to website operators about how their site is being used. ac333 uses cookies and similar technologies including local storage objects and session identifiers.

8.2 Types of Cookies ac333 Uses

• Strictly Necessary Cookies: Essential for the ac333 platform to function. These include session authentication cookies that keep you logged into your account and security cookies that help detect and prevent fraudulent activity. These cookies cannot be disabled without preventing core platform functionality.
• Functional Cookies: Remember your preferences such as your preferred language settings and recently viewed game categories to improve your experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use the ac333 platform — which pages are visited most often, how long users spend on different sections, and where users navigate to and from. This data is used exclusively to improve the platform.
• Session Cookies: Temporary cookies that exist only for the duration of your browser session. They are deleted automatically when you close your browser and are used to maintain your logged-in state during active play.

8.3 Managing Cookies

Most browsers allow you to manage cookie settings through their preferences or settings menus. You can typically choose to block all cookies, block third-party cookies only, or delete cookies that have already been set. Please be aware that blocking strictly necessary cookies will prevent you from using core features of the ac333 platform, including logging into your account.

9. Data Security

ac333 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and ac333's servers.
• Bcrypt hashing for all stored passwords, ensuring that even in the unlikely event of a data breach, raw passwords cannot be recovered.
• Tokenisation of payment method references so that full payment account numbers are never stored on ac333 servers.
• Role-based access controls that restrict internal employee access to personal data on a strict need-to-know basis.
• Comprehensive audit logging of all internal data access events, with automated alerts for anomalous access patterns.
• Regular independent security assessments and penetration testing of platform infrastructure.
• Two-factor authentication (2FA) available to all players for additional account security.

While ac333 takes all reasonable technical precautions, no online platform can guarantee absolute security. You also play an important role in keeping your account secure: use a strong, unique password for your ac333 account, enable two-factor authentication, and never share your login credentials with any other person.

10. Data Retention

ac333 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following retention principles:

• Active Account Data: Personal data associated with an active player account is retained for the full duration that the account remains open and active.
• Closed Account Data: Following account closure, ac333 retains identity and transaction records for a minimum period of 5 years. This retention period is necessary to comply with anti-money laundering obligations, to resolve any disputes that may arise after closure, and to fulfil any applicable regulatory reporting requirements.
• KYC Verification Documents: Identity documents submitted during the KYC process are retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Customer Support Records: Records of customer support interactions, including live chat transcripts and email correspondence, are retained for 3 years from the date of the interaction.
• Technical and Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely as it no longer constitutes personal data once it has been fully anonymised. Raw technical log data is retained for up to 12 months.
• Marketing Consent Records: Where you have provided consent to receive marketing communications, a record of that consent is retained for as long as you remain subscribed and for 3 years following any opt-out, to demonstrate compliance with consent obligations.

At the end of the applicable retention period, personal data is securely and permanently deleted from ac333's systems or irreversibly anonymised so that it can no longer be attributed to any individual.

11. Your Rights

As a player whose personal data is processed by ac333, you have the following rights with respect to that data:

• Right of Access: You have the right to request a copy of the personal data that ac333 holds about you. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data ac333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many of your basic account details directly from within your account settings.
• Right to Erasure: In certain circumstances you have the right to request that ac333 delete the personal data it holds about you. This right is subject to limitations where retention is required to comply with a legal obligation or to establish, exercise, or defend legal claims.
• Right to Restrict Processing: You have the right to request that ac333 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being disputed.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis and is carried out by automated means, you have the right to receive a copy of the personal data you provided to ac333 in a structured, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on ac333's legitimate interests. You also have an unconditional right to object to the use of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. To opt out of marketing communications, contact our support team at [email protected].

To exercise any of the rights listed above, please contact our support team using the details in Section 15. We may need to verify your identity before processing your request. We will respond to all rights requests within 30 days, and will notify you if additional time is needed for complex requests.

12. Children's Privacy

The ac333 platform is strictly intended for adults aged 21 and above. ac333 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21 without the knowledge of that fact at the time of collection, we will take immediate steps to delete that data and suspend the associated account.

13. Third-Party Links

The ac333 platform may contain references to or integrations with third-party services, including game providers such as Pragmatic Play, Evolution Gaming, and Ezugi, and payment providers such as bKash and Nagad. While ac333 takes care in selecting its technology and service partners, we do not control the privacy practices of third-party organisations and this Privacy Policy does not extend to any third-party website, application, or service.

We encourage you to review the privacy policies of any third-party services with which you interact in connection with your use of ac333. ac333 is not responsible for the data handling practices of third parties, even where those third parties provide services that are accessed via or in connection with the ac333 platform.

14. Policy Updates

ac333 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulatory guidance, or changes to the services we offer. All updates will be published on this page with a revised effective date displayed prominently at the top of the Policy.

Where updates are material — meaning they represent a significant change to how we collect or use your personal data — ac333 will make reasonable efforts to notify registered players by email to the address on file at least 7 days before the updated Policy takes effect. We encourage you to review this Privacy Policy periodically to stay informed about how ac333 protects your personal information.

Your continued use of the ac333 platform following the posting of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the updated Policy, you must discontinue use of the platform and may request account closure by contacting our support team.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ac333 holds about you, please contact us through one of the following channels. All data protection enquiries are handled by our dedicated privacy team.

• Email: [email protected] — please include "Data Privacy Request" in the subject line
• Live Chat: Available 24 hours a day, 7 days a week via the ac333 platform
• Response Time: Data protection queries are answered within 5 business days; urgent data security concerns are escalated within 24 hours

ac333 is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with the response you receive, you may escalate your complaint by requesting a formal review, and we will provide a written response within 10 business days of escalation.