Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by aca77 ("aca77", "we", "us", "our") and applies to all personal information collected from registered players, visitors, and users of the aca77 online betting and casino platform accessible at aca77.io and all associated mobile interfaces, APIs, and sub-domains (collectively, the "Platform").

This Policy explains what personal data aca77 collects, the lawful basis on which we process that data, how we use and protect it, the circumstances in which we share it with third parties, and the rights available to you regarding your personal information. By accessing the aca77 Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy in its entirety.

aca77 is committed to conducting all data processing activities in a manner consistent with applicable Bangladesh data protection regulations, international best practices for personal data security, and the principles of transparency and user control. This Policy is reviewed and updated periodically to reflect changes in our data practices, legal obligations, or operational requirements. The "Last Updated" date at the top of this document reflects the most recent revision.

2. Data We Collect

2.1 Information You Provide Directly

When you register for an aca77 account, you provide personal information that we require to create and manage your account, verify your identity, process financial transactions, and deliver our services. The categories of information you provide directly include:

• Identity Information: Full legal name as it appears on government-issued identification, date of birth, nationality, and gender.
• Contact Information: Residential address (street, city, district, and postal code in Bangladesh), email address, and mobile phone number.
• Account Credentials: Username, password (stored in hashed form — never in plain text), and security question answers.
• Financial Information: Mobile banking account identifiers for bKash, Nagad, Rocket, and Upay; bank account details for bank transfers; cryptocurrency wallet addresses for USDT and other supported crypto deposits. We do not store full payment credentials — tokenization is used for all payment processing.
• Identity Verification Documents: Copies of government-issued photo identification (National ID Card, Passport, Driving License), proof of address documentation, and proof of payment method ownership as required by our Know Your Customer (KYC) procedures.
• Communication Records: Messages sent to and received from aca77 customer support via live chat, email, or our help center ticketing system.

2.2 Information We Collect Automatically

When you use the aca77 Platform, our systems automatically collect certain technical and behavioral data to ensure platform security, detect fraud, improve performance, and personalize your experience. This automatically collected data includes:

• Device Information: Device type (mobile phone, tablet, desktop computer), operating system (Android, iOS, Windows, macOS, Linux), browser type and version, screen resolution, and device identifiers.
• IP Address and Location Data: Internet Protocol (IP) address, Internet Service Provider (ISP), approximate geographic location derived from IP geolocation (city and region level, not precise GPS coordinates), and time zone.
• Gameplay and Betting Data: Complete record of all bets placed including bet type, stake amount, odds, selection details, bet status (pending, won, lost, void), settlement time, and payout amounts; casino game sessions including game title, spin count, bet sizes, wins and losses, session duration, and RTP performance; sports betting history across cricket, slots, and other categories.
• Account Activity Logs: Login timestamps, logout events, password change records, deposit and withdrawal transaction history, bonus claims and wagering progress, session duration, pages visited, and features accessed.
• Cookies and Tracking Technologies: Session cookies to maintain login state, preference cookies to remember your settings, analytics cookies to understand Platform usage patterns, and functional cookies to deliver personalized content. Full cookie details are available in our Cookie Policy accessible from your account settings.

2.3 Information from Third Parties

aca77 receives limited information from trusted third-party service providers that assist us in operating the Platform securely and compliantly:

• Payment Processors: Transaction confirmation details, payment method validation status, and fraud risk scores from bKash, Nagad, Rocket, Upay payment gateways, and cryptocurrency payment providers.
• Identity Verification Services: Age verification results, document authenticity checks, and identity fraud risk assessments from third-party KYC verification partners.
• Game Providers: Anonymized gameplay statistics and aggregated performance metrics from casino game suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe.

Data Category	Purpose	Retention Period
Identity Documents	KYC compliance, age verification, fraud prevention	5 years after account closure
Transaction Records	Financial compliance, dispute resolution, anti-money laundering	7 years per Bangladesh financial regulations
Gameplay History	Bet settlement, dispute resolution, responsible gaming monitoring	3 years after bet settlement
Support Communications	Customer service quality assurance, dispute resolution	2 years after last interaction
Login & Session Logs	Security monitoring, fraud detection, performance optimization	12 months rolling basis

3. How We Use Your Data

aca77 processes your personal information for the following specific, legitimate purposes. We do not use your data for any purpose beyond what is disclosed in this Policy without obtaining your explicit consent first.

3.1 Account Management and Service Delivery

• Creating and maintaining your aca77 player account
• Authenticating your identity when you log in
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfers, and cryptocurrency
• Delivering sports betting, live casino, slots, and other gaming services
• Settling bets and crediting winnings to your account balance
• Managing bonus offers, free bets, and promotional campaigns
• Providing customer support via live chat, email, and ticketing system

3.2 Compliance and Security

• Verifying that you are at least 21 years of age and legally eligible to gamble
• Conducting Know Your Customer (KYC) identity verification as required by Bangladesh financial regulations
• Detecting and preventing fraud, money laundering, and other illegal activities
• Enforcing our Terms & Conditions including detecting multi-accounting and bonus abuse
• Complying with legal obligations including responding to lawful requests from Bangladesh authorities
• Protecting aca77 Platform integrity, user security, and intellectual property

3.3 Platform Improvement and Personalization

• Analyzing Platform usage patterns to identify and fix technical issues
• Conducting A/B testing to improve user interface and user experience design
• Personalizing game recommendations based on your betting and gameplay preferences
• Optimizing Platform performance, load times, and mobile responsiveness
• Developing new features and services tailored to Bangladesh player needs

3.4 Marketing and Communication (With Consent)

• Sending promotional emails about new games, bonuses, and special offers (opt-out available)
• Delivering SMS notifications about account activity, deposit confirmations, and withdrawal updates
• Displaying personalized banner promotions on the Platform based on your gaming activity
• Conducting player satisfaction surveys to gather feedback on aca77 services

4. Data Sharing and Disclosure

aca77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share data only in the limited circumstances described below, and only with trusted partners who are contractually bound to protect your information.

4.1 Service Providers

We share personal data with carefully vetted third-party service providers who assist us in operating the aca77 Platform. These providers process data on our behalf under strict confidentiality agreements and include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and cryptocurrency payment gateways to process deposits and withdrawals.
• Identity Verification Services: KYC verification partners to validate government-issued ID documents and confirm player age and identity.
• Cloud Infrastructure Providers: Hosting services, content delivery networks (CDNs), and database management systems that store and deliver Platform content securely.
• Customer Support Tools: Live chat software, email service providers, and ticketing system vendors that enable our support team to assist you effectively.
• Analytics and Monitoring: Performance monitoring tools and security threat detection services that help us identify and resolve technical issues.
• Game Suppliers: Casino game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe who deliver the games you play on aca77.

4.2 Legal and Regulatory Obligations

aca77 may disclose your personal information when required by law or when we have a good-faith belief that such disclosure is necessary to:

• Comply with legal processes including court orders, subpoenas, or lawful requests from Bangladesh law enforcement authorities
• Respond to regulatory inquiries from Bangladesh financial regulators or gaming authorities
• Enforce our Terms & Conditions and investigate violations including fraud, multi-accounting, or bonus abuse
• Protect the rights, property, or safety of aca77, our players, or the public as required by law
• Detect, prevent, or address fraud, security vulnerabilities, or technical issues that pose risk to users

4.3 Business Transfers

In the event that aca77 undergoes a merger, acquisition, corporate reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity as part of the transaction. In such circumstances, we will notify you via email and display a prominent notice on the aca77 Platform before your data is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

aca77 implements industry-leading technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using bank-grade SSL/TLS protocols.
• Hashed Password Storage: Player passwords are stored using bcrypt or SHA-256 hashing with unique salts — we never store passwords in plain text or reversible formats.
• Payment Tokenization: Credit card numbers, mobile banking account details, and cryptocurrency wallet addresses are tokenized and never stored in plain text.
• Firewall Protection: Multi-layer firewall architecture protects our servers from unauthorized access attempts and distributed denial-of-service (DDoS) attacks.
• Access Controls: Strict role-based access controls ensure that only authorized aca77 personnel with legitimate business need can access player data.
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments on a quarterly basis.
• Data Backup and Recovery: Encrypted backups are maintained in geographically distributed data centers to ensure business continuity and data integrity.
• Employee Training: All aca77 staff members undergo mandatory data protection and information security training annually.

While we employ comprehensive security measures, no method of transmission over the internet or electronic storage is 100 percent secure. We cannot guarantee absolute security, but we continuously invest in security technologies and practices to protect your data to the highest standard achievable.

6. Your Privacy Rights

As an aca77 player, you have the following rights regarding your personal information. To exercise any of these rights, please contact our privacy team at [email protected] with "Privacy Rights Request" in the subject line.

6.1 Right to Access

You have the right to request a copy of the personal information aca77 holds about you. We will provide this information in a commonly used electronic format within 30 days of your verified request.

6.2 Right to Correction

You have the right to correct inaccurate or incomplete personal information. You can update most account details yourself through your aca77 account settings, or contact support for assistance.

6.3 Right to Erasure

You have the right to request deletion of your personal data, subject to legal retention requirements. Transaction records and identity verification documents must be retained for 5-7 years per Bangladesh financial regulations even after account closure.

6.4 Right to Data Portability

You have the right to request export of your personal data in a structured, machine-readable format that can be transferred to another service provider.

6.5 Right to Object

You have the right to object to certain types of data processing including direct marketing communications, profiling for personalized advertising, and automated decision-making that significantly affects you.

6.6 Right to Withdraw Consent

Where we process your data based on consent (such as marketing communications), you have the right to withdraw that consent at any time through your account settings or by contacting support.

7. Children's Privacy

aca77 services are strictly for individuals aged 21 years and above. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that we have inadvertently collected data from a person under 21, we will immediately delete that data and close the associated account. Parents or guardians who believe their child has provided personal information to aca77 should contact us immediately at [email protected].

8. International Data Transfers

aca77 primarily stores and processes personal data within Bangladesh and in secure cloud infrastructure providers' data centers in regions with adequate data protection frameworks. When data is transferred outside Bangladesh for technical reasons (such as cloud hosting or payment processing), we ensure that appropriate safeguards are in place including standard contractual clauses, encryption in transit and at rest, and compliance with international data protection standards.

9. Changes to This Privacy Policy

aca77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated via email to your registered email address and announced through a prominent banner notification on the aca77 Platform at least 14 days before the changes take effect. Your continued use of aca77 services after the effective date of an updated Privacy Policy constitutes acceptance of those changes. We encourage you to review this Policy periodically to stay informed about how we protect your information.

10. Contact Information and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or how aca77 handles your personal information, please contact our dedicated privacy team:

• Email: [email protected] (mark subject line as "Privacy Inquiry")
• Live Chat: Available 24/7 through your aca77 account dashboard
• Response Time: We aim to respond to all privacy inquiries within 48 hours

If you are not satisfied with our response to a privacy complaint, you have the right to lodge a complaint with the relevant Bangladesh data protection authority or consumer protection agency.