acd77 Privacy Policy — How We Protect Your Personal Data

acd77 is an online betting and casino platform operating at acd77.io and serving players primarily located in Bangladesh. In this Privacy Policy, references to "acd77", "we", "us", or "our" refer to the acd77 platform and its operating entity. References to "you" or "Player" refer to any individual who accesses, registers with, or uses any service provided through the acd77 platform.

acd77 acts as the data controller in respect of the personal information collected through the platform. This means we are responsible for determining the purposes and means by which your personal data is processed. If you have any questions about how your data is handled, you may contact our support team at any time via live chat or at support [at] acd77.io.

The following categories of personal data may be collected by acd77 in the course of your use of the platform:

Data Category	Examples	When Collected
Identity Data	Full name, date of birth, national ID number, photograph	Registration & verification
Contact Data	Mobile number, email address, city or district of residence	Registration & account updates
Financial Data	bKash or Nagad mobile number, transaction history, deposit and withdrawal amounts in BDT	Deposit, withdrawal & verification
Technical Data	IP address, device type, browser type, operating system, session timestamps	Automatically on each visit
Usage Data	Games played, bets placed, wagering history, login frequency, pages visited	During active platform use
Communications Data	Live chat transcripts, support emails, feedback submissions	When you contact support
Responsible Gaming Data	Self-exclusion requests, deposit limit settings, session time configurations	When player tools are activated

acd77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless specifically required by law or with your explicit consent.

acd77 collects personal data through the following means:

• Direct Interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, or contacting customer support.
• Automated Technologies: Technical and usage data collected automatically via server logs, session tracking, and cookies when you visit or interact with the acd77 platform.
• Third-Party Sources: Identity and fraud-risk data received from identity verification providers and payment processors such as bKash, Nagad, Rocket, and Upay, where necessary to validate your account or process a transaction.
• Compliance Checks: Publicly available information or data from compliance databases that acd77 may access as part of its anti-fraud and anti-money laundering obligations.

acd77 processes personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil the agreement between acd77 and the Player, including account registration, transaction processing, and delivering platform services.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including identity verification, anti-money laundering checks, and retention of financial records.
• Legitimate Interests: Processing carried out to pursue the legitimate operational interests of acd77, including fraud prevention, security monitoring, platform improvement, and responsible gaming compliance, where those interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent, particularly in relation to optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

acd77 uses collected personal data for the following specific purposes:

• To create, manage, and maintain your player account on the acd77 platform.
• To verify your identity and age (21+) in compliance with our age verification obligations and to prevent underage gambling.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other accepted payment methods in Bangladeshi Taka (BDT).
• To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct as defined in the acd77 Terms & Conditions.
• To personalise your platform experience, including presenting game recommendations and promotional offers that are relevant to your activity and preferences.
• To administer responsible gaming tools including deposit limits, session time controls, self-exclusion requests, and reality check notifications.
• To communicate with you regarding account-related matters, transaction confirmations, security alerts, and support interactions.
• To send marketing communications about acd77 promotions, new games, or seasonal offers — only where you have provided consent or where a soft opt-in applies.
• To analyse platform usage, diagnose technical issues, and improve the quality and performance of acd77 services.
• To comply with applicable legal, regulatory, and compliance obligations including financial record-keeping requirements.

acd77 does not sell, rent, or trade your personal data. We share personal data only with the following limited categories of third parties, and only to the extent strictly necessary:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card processing partners (Visa/Mastercard) receive transaction-relevant data to process your deposits and withdrawals securely. These providers operate under their own privacy policies and are bound by contractual data protection obligations.
• Identity Verification Providers: Third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) service providers may receive identity data to facilitate account verification checks. Data shared is limited to what is required for the specific verification purpose.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and JILI may receive a pseudonymous player identifier and session data necessary to operate their games on the acd77 platform. These providers do not receive your full personal profile.
• Technology & Infrastructure Partners: Hosting, cloud infrastructure, and cybersecurity service providers that support the operation of the acd77 platform may process technical data under strict data processing agreements with acd77.
• Legal & Regulatory Authorities: acd77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by law, court order, or in the legitimate defence of legal claims.

All third parties with whom acd77 shares personal data are contractually required to maintain the confidentiality and security of that data and to use it only for the purposes for which it was disclosed.

acd77 uses cookies and similar tracking technologies to ensure the proper functioning of the platform and to gather usage data that helps us improve the player experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and cookies that remember your login state. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, game layout choices, and responsible gaming configurations you have set within your account dashboard.
• Analytics Cookies: Help acd77 understand how players interact with the platform — which pages are visited most, where sessions begin and end, and how players navigate between game categories. This data is used in aggregate and pseudonymised form only.
• Performance Cookies: Enable acd77 to monitor platform performance, identify and diagnose technical errors, and optimise page loading speeds and server response times.

You may adjust your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to log in and use core platform features. acd77 does not use third-party advertising or retargeting cookies.

acd77 employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the acd77 platform.
• Encryption of sensitive data fields — including financial data and identity document references — at rest within our databases.
• Role-based access controls that restrict internal access to personal data to authorised personnel with a legitimate operational need.
• Regular security audits, penetration testing, and vulnerability assessments conducted on the acd77 platform infrastructure.
• Multi-factor authentication requirements for internal systems that process personal data.
• Incident response procedures to detect, contain, and notify affected parties in the event of a confirmed data breach, in accordance with applicable legal obligations.

While acd77 takes all reasonable precautions to protect your personal data, no digital platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying acd77 immediately if you suspect that your account has been compromised.

acd77 retains personal data for the period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable legal, regulatory, or compliance obligations. The following general retention principles apply:

• Active Account Data: Retained for the full duration of your account's active status on the acd77 platform.
• Post-Closure Retention: Following account closure, identity, financial, and transaction data is retained for a minimum of five years to satisfy anti-money laundering, fraud prevention, and financial record-keeping obligations.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, at which point it is deleted from active marketing lists within 30 days.
• Support Communications: Live chat and email records are retained for up to two years from the date of the interaction to support quality assurance and dispute resolution.
• Technical & Usage Logs: Server and session logs are retained for a maximum of 12 months, after which they are permanently deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.

As a player on the acd77 platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact the acd77 support team via live chat or email:

• Right of Access: You may request a copy of the personal data acd77 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data held by acd77 is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations that require acd77 to retain specific records.
• Right to Restriction: You may request that acd77 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request a structured, machine-readable copy of the personal data you provided to acd77.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will stop using your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

acd77 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly. We will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

acd77 may send promotional communications — including offers, bonus notifications, new game announcements, and seasonal promotions related to events such as BPL, IPL, Eid, and Pohela Boishakh — to players who have opted in to receive such communications.

You may opt out of marketing communications at any time by:

• Using the unsubscribe link included in any marketing email sent by acd77.
• Adjusting your communication preferences from within your acd77 account dashboard.
• Contacting the acd77 support team directly via live chat or email with a request to be removed from marketing lists.

Please allow up to 5 business days (Bangladesh Standard Time, UTC+6) for opt-out requests to take effect across all communication channels. Please note that opting out of marketing communications does not affect transactional or account-related communications, such as deposit confirmations, withdrawal notifications, or security alerts, which are necessary for the operation of your account.

12.1 Policy Updates. acd77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, acd77 will publish the revised policy on this page with an updated effective date and will endeavour to notify registered players via the platform or by email. Your continued use of the acd77 platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy.

12.2 Governing Language. This Privacy Policy is written in English. In the event of any conflict between the English version and any translated version, the English version shall prevail at all times.

12.3 Contact Us. If you have any questions, concerns, or complaints regarding this Privacy Policy or acd77's data practices, please contact our support team. We are committed to resolving all privacy enquiries promptly and transparently.