ac444 Privacy Policy — How We Protect Your Data

ac444 is an online entertainment and betting platform operating at https://ac444.io and serving the Bangladesh market. For all purposes under this Privacy Policy, ac444 is the data controller responsible for the personal information collected through the Platform.

If you have any questions about how ac444 handles your personal data, or if you wish to exercise any of your data rights, you can contact our dedicated privacy team at [email protected]. We aim to respond to all privacy-related enquiries within 10 business days.

ac444 collects personal data across several categories, depending on the nature of your interaction with the Platform. The following table summarises the categories of data we collect and the context in which each category is gathered.

2.1 Data You Provide Voluntarily

The majority of personal data ac444 holds about you is data you have provided directly — for example, by completing the registration form, submitting KYC documents, making a deposit, or contacting our support team. Providing accurate data is a condition of using the Platform; inaccurate information may result in account suspension.

2.2 Data We Do Not Collect

ac444 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (other than document photographs submitted for KYC purposes), or data concerning health (other than data you voluntarily disclose in the context of a responsible gaming self-exclusion request).

ac444 collects personal data through the following means:

• Direct Interaction: When you register an account, complete identity verification, make a deposit or withdrawal, place a bet, use live chat support, or send us an email, you directly provide personal data to ac444.
• Automated Technologies: As you navigate the Platform, we automatically collect Technical Data including your IP address, browser fingerprint, device identifiers, session timing, and pages visited, using server logs, cookies, and similar technologies.
• Third-Party Payment Providers: When you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, those providers share limited transaction confirmation data (reference number, amount, wallet identifier) with ac444 to facilitate deposit and withdrawal matching. ac444 does not receive your full payment credentials from these providers.
• Identity Verification Partners: For KYC purposes, ac444 may use third-party identity verification services that process copies of your government-issued identity documents on our behalf. These processors operate under strict data processing agreements and are prohibited from using your data for any purpose other than completing the verification task.
• Fraud Prevention Systems: Automated risk-scoring systems analyse behavioral patterns on the Platform to detect fraud and money laundering. These systems may correlate data points such as login location, device, and betting patterns against known risk indicators.

ac444 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing that is required to perform the contract between you and ac444 — including account creation, payment processing, bet settlement, and withdrawal execution.
• Legitimate Interests: Processing carried out in pursuit of ac444's legitimate business interests where those interests are not overridden by your privacy rights — for example, fraud prevention, platform security, abuse detection, and internal business analytics.
• Legal Obligation: Processing required to comply with applicable legal obligations — including anti-money laundering (AML) obligations, identity verification requirements, and cooperation with law enforcement authorities where required by law.
• Consent: Where ac444 processes data on the basis of your consent (for example, for optional marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ac444 uses your personal data for the following specific purposes:

5.1 Account Management

To create and maintain your account, verify your identity at registration and on request, manage your account settings, process password resets, and communicate account-related updates and notices to you.

5.2 Payment Processing

To process deposits and withdrawals via your selected payment method, reconcile transactions, investigate payment disputes, and issue refunds where applicable. All payment transaction data is handled in accordance with the security standards required by our payment partners.

5.3 Delivering Platform Services

To operate the betting and gaming features of the Platform, calculate and settle bets, manage your balance, apply bonus credits, and deliver a personalised and localised experience appropriate for players in Bangladesh.

5.4 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, multiple account creation, and any other misuse of the Platform. This includes automated risk assessment and, where necessary, sharing data with law enforcement authorities.

5.5 Responsible Gaming

To operate and enforce responsible gaming tools including deposit limits, session time controls, cooling-off periods, and self-exclusion. Responsible gaming data is flagged internally to ensure that self-exclusion restrictions are honoured across your account and any future re-registration attempts.

5.6 Customer Support

To respond to your enquiries, resolve complaints, process refunds, and improve the quality of our support services. Support communications may be recorded and retained for quality assurance and audit purposes.

5.7 Legal and Regulatory Compliance

To meet our obligations under applicable law, respond to regulatory requests, cooperate with investigations by competent authorities, and maintain records as required by financial crime legislation.

5.8 Analytics and Service Improvement

To analyse aggregate usage patterns on the Platform for the purposes of improving performance, fixing technical errors, optimising game offerings, and planning future product development. Analytics data is used in aggregate and anonymised form wherever possible.

ac444 does not sell your personal data. We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and card processing networks (Visa/Mastercard) receive the minimum transaction data required to execute deposits and withdrawals. These providers are independent data controllers subject to their own privacy policies.
• Identity Verification Processors: Third-party KYC providers process identity document data on behalf of ac444 under strict data processing agreements. They are contractually prohibited from using your data for any secondary purpose.
• Game Content Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your account identifier and session token for the purpose of delivering game content. They do not receive your full identity or financial data.
• IT Infrastructure and Security Providers: Cloud hosting, server management, and cybersecurity vendors that support the operation of the Platform may process data as part of their service delivery, under contractual obligations to maintain confidentiality.
• Legal and Regulatory Authorities: ac444 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by law or valid legal process, without prior notice to the affected user where legally required.
• Business Successors: In the event of a merger, acquisition, or sale of the ac444 business, personal data held about users may be transferred to the acquiring entity as part of that transaction. Users will be notified of such a transfer prior to their data being governed by a different privacy policy.

ac444 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. The cookies used by ac444 fall into the following categories:

ac444 does not use advertising or retargeting cookies. We do not embed third-party social media pixels or allow social platforms to track your activity on the Platform.

Most web browsers allow you to control cookie settings through the browser's settings menu. Disabling strictly necessary cookies will prevent the Platform from functioning correctly. For queries about cookies used on ac444, contact [email protected].

ac444 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines:

• Account Data: Retained for the lifetime of your account plus a minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by financial crime legislation.
• KYC Documents: Retained for the duration of your account and for 5 years after closure. Copies of identity documents are held in encrypted storage with strict access controls.
• Support Communications: Live chat transcripts and email correspondence are retained for 2 years for quality assurance and dispute resolution purposes.
• Technical and Log Data: Server logs and IP address records are retained for up to 12 months and are used solely for security monitoring and fraud investigation purposes.
• Self-Exclusion Records: Retained indefinitely to prevent re-registration during an active exclusion period and to honour long-term exclusion commitments.

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

ac444 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the ac444 Platform is encrypted using current Transport Layer Security (TLS) protocols.
• Encrypted Data Storage: Sensitive data including identity documents and financial records are stored in encrypted form on access-controlled infrastructure.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis. Staff with access to sensitive data undergo background checks and mandatory data protection training.
• Intrusion Detection: ac444 employs automated intrusion detection and anomaly monitoring systems to identify and respond to potential security threats in real time.
• Penetration Testing: The Platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: ac444 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, ac444 will notify affected users and relevant authorities in accordance with applicable legal requirements.

As a user of ac444, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of Access: You may request a copy of the personal data ac444 holds about you, along with information about how it is used, where it was obtained from, and with whom it has been shared.
• Right to Rectification: If any personal data ac444 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request that ac444 delete your personal data. This right is subject to limitations — for example, we may be legally required to retain transaction records even after an account is closed.
• Right to Restriction: You may request that ac444 restricts the processing of your personal data in certain situations — for example, while a rectification request is being assessed.
• Right to Object: You may object to processing carried out on the basis of legitimate interests (including profiling for fraud prevention) where you believe your privacy interests override those interests.
• Right to Data Portability: Where data is processed on the basis of your consent or contractual necessity and by automated means, you may request a machine-readable copy of your personal data for transfer to another provider.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

ac444 will respond to all verified data rights requests within 30 days. Where a request is complex or involves large volumes of data, we may extend this period by up to a further 60 days with notice to you.

ac444 operates a strict 21+ age policy. The Platform is not intended for use by any person under the age of 21 years, and ac444 does not knowingly collect personal data from minors.

During account registration, users are required to confirm their date of birth. ac444 may request documentary proof of age at any time during the account lifecycle. Any account found to have been registered by a person under the age of 21 will be suspended immediately, all transactions will be reversed where possible, and any data collected will be deleted in accordance with our data retention procedures.

If you believe that a minor has registered an account on ac444 or that personal data about a child has been collected without appropriate consent, please contact us immediately at [email protected] so we can investigate and take corrective action.

The ac444 Platform does not contain links to third-party websites for general browsing purposes. Game content provided by studios such as Pragmatic Play, Evolution Gaming, and others is delivered within the ac444 Platform environment and does not redirect you to external websites during normal gameplay.

In the limited event that any third-party link appears on the Platform — for example, within a promotional communication — ac444 is not responsible for the privacy practices of that third-party website. We encourage you to review the privacy policy of any website you visit independently of ac444.

ac444 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect the way we handle your personal data or your rights as a data subject — we will notify registered users by email and by a prominent notice on the Platform at least 14 days before the changes take effect.

For minor amendments — such as clarifications of existing provisions, corrections of typographical errors, or updates to contact information — changes may take effect immediately upon publication without advance notice.

The "Last Updated" date at the top of this Privacy Policy will always reflect the date of the most recent revision. We encourage you to review this page periodically to stay informed about how ac444 protects your data. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

For all privacy-related enquiries — including data access requests, rectification requests, erasure requests, objections to processing, complaints about data handling, or general questions about this Privacy Policy — please contact the ac444 privacy team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request — [Your Username]"
• Subject Line for Privacy Complaints: "Privacy Complaint — [Your Username]"
• Response Time: Within 10 business days for general privacy enquiries; within 30 days for formal data rights requests
• Support Languages: English and Bengali
• Availability: 24 hours a day, 7 days a week

When contacting us with a data rights request, please include your registered email address and username so we can verify your identity promptly. Do not include your password or full payment card details in any communication.