Privacy Policy

Data Controller Information

acce365 operates the online casino and sportsbook platform accessible at acce365.net and is the data controller responsible for the personal information collected through this platform. As data controller, acce365 determines the purposes for which your personal data is processed and the means by which that processing is carried out.

All data protection enquiries, subject access requests, correction requests, deletion requests, and complaints relating to the handling of personal data by acce365 should be directed to the following contact:

• Platform: acce365.net
• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 09:00–24:00 Bangladesh Standard Time (BST, UTC+6)
• Response Time: Data-related requests acknowledged within 24 hours; substantive response within 10 business days

Information We Collect

acce365 collects personal information in three primary ways: information you provide directly during registration and platform use, information generated automatically by your interaction with the platform, and information received from third-party service providers such as payment processors and identity verification services. The categories of data we collect are described below.

2.1 Registration and Account Data

When you create an acce365 account, we collect the following information which is necessary to establish and maintain your player account:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (required for age verification — players must be 18 or older)
• Email address (used for account communications and password recovery)
• Mobile phone number (used for OTP verification and account security)
• Residential address (required for identity and address verification during KYC)
• Username and encrypted password (used for platform authentication)

2.2 Identity Verification (KYC) Data

Before processing any withdrawal, acce365 is required to verify your identity. As part of the KYC process you may be asked to submit copies of the following documents, which are stored securely and used solely for verification purposes:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of residential address dated within the past 90 days
• Proof of payment method ownership (e.g., a screenshot of your bKash, Nagad, or Rocket account showing your registered name and number)

2.3 Financial Transaction Data

acce365 records all deposit and withdrawal transactions conducted through your account. This includes the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, or card), the transaction amount in BDT, the transaction date and time, and the transaction reference number provided by the payment provider. acce365 does not store full card numbers or mobile banking PINs — these are handled exclusively by our payment processing partners using their own PCI-compliant infrastructure.

2.4 Gaming Activity Data

acce365 maintains a record of all gaming and betting activity conducted through your account. This includes game sessions, bet amounts, game results, bonus usage, and wagering history. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention purposes.

2.5 Technical and Device Data

When you access the acce365 platform, our servers automatically collect certain technical information about your device and connection. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and the date and time of each platform request. This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.6 Communications Data

If you contact acce365's support team via email or live chat, we retain a record of that correspondence including the content of your messages and the date and time of each exchange. This data is used to manage and resolve your enquiry and to improve the quality of our support service.

How We Use Your Information

acce365 processes your personal data only for legitimate, defined purposes. We do not process personal data in ways that are incompatible with the purposes for which it was collected. The table below summarises the primary purposes for which each category of personal data is used.

Data Category	Primary Purpose	Legal Basis
Registration and account data	Account creation, authentication, and management	Contractual necessity
KYC / identity documents	Age and identity verification; anti-money-laundering compliance	Legal obligation
Financial transaction data	Processing deposits and withdrawals; fraud prevention	Contractual necessity
Gaming activity data	Account management; responsible gaming monitoring; dispute resolution	Contractual necessity / Legitimate interest
Technical and device data	Security monitoring; fraud detection; platform optimisation	Legitimate interest
Communications data	Support management; service quality improvement	Legitimate interest

3.1 Responsible Gaming Monitoring

acce365 uses your gaming activity data to identify patterns that may indicate problem gambling behaviour. This monitoring is carried out in the interest of player welfare and may result in proactive outreach from our responsible gaming team, the application of account restrictions, or a recommendation that you use the self-exclusion tools available on the platform. This processing is carried out under our legitimate interest in promoting safe gambling and our legal obligation to operate responsibly.

3.2 Marketing Communications

acce365 may send you promotional communications about bonuses, seasonal offers (including BPL season, Eid, and Pohela Boishakh promotions), and new game launches. You will receive marketing communications only if you have opted in to receive them at the time of registration or through your account preferences. You may opt out of marketing communications at any time by contacting support at [email protected] or by updating your communication preferences in your account settings.

Sharing Your Information

acce365 does not sell, rent, or trade your personal information to any third party for commercial purposes. Your data may be shared with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

4.1 Payment Processing Partners

To process your deposits and withdrawals, acce365 shares the minimum necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card payment processors. These partners receive only the data required to execute the transaction and are contractually prohibited from using your data for any purpose beyond payment processing.

4.2 Identity Verification Services

acce365 may engage third-party identity verification providers to assist with KYC processing. These providers receive copies of the identification documents you submit and return a verification result to acce365. They are not permitted to retain your documents beyond the period required to complete the verification check.

4.3 Game Content Providers

The games available on the acce365 platform are provided by certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier in order to load and operate the game client. They do not receive your full personal profile, financial data, or identification documents.

4.4 Legal and Regulatory Disclosure

acce365 may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or official legal process. acce365 will make reasonable efforts to notify you of any such disclosure unless legally prohibited from doing so.

4.5 Business Transfers

In the event that acce365 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, acce365 will take reasonable steps to ensure that your privacy rights continue to be respected under the new ownership and will notify registered players of any material change in data controller.

Cookies and Tracking Technologies

acce365 uses cookies and similar tracking technologies to maintain platform functionality, improve the player experience, and monitor platform performance. A cookie is a small text file stored on your device by your web browser when you visit a website. The cookies deployed by acce365 fall into the following categories:

Cookie Type	Purpose	Duration	Can Be Disabled?
Essential / Session	Maintain your login session; protect against CSRF attacks; remember language preference	Session (deleted on browser close)	No — required for platform to function
Functional	Remember your game preferences, lobby filters, and display settings	Up to 12 months	Yes — disabling may affect experience
Analytics	Measure page visits, session duration, and feature usage to improve the platform	Up to 24 months	Yes — opt out via account settings
Fraud Prevention	Identify unusual access patterns and protect your account from unauthorised access	Up to 6 months	No — required for account security

acce365 does not deploy third-party advertising cookies, social media tracking pixels, or behavioural profiling technologies on our platform. You may manage your cookie preferences through your browser settings. Please note that disabling essential or fraud prevention cookies may impair the security and functionality of your acce365 account.

Data Retention

acce365 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply to the principal categories of personal data held by acce365:

• Active account data: Retained for the full duration of your account being active on the platform.
• Account data following closure: Retained for a period of five years from the date of account closure to comply with anti-money-laundering record-keeping obligations.
• KYC and identity documents: Retained for five years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for five years from the date of each transaction in accordance with financial record-keeping requirements.
• Support correspondence: Retained for two years from the date of the final message in a support thread.
• Technical and device logs: Retained for 12 months from the date of generation, after which they are automatically deleted.
• Marketing preferences: Retained until you withdraw your consent to receive marketing communications, at which point your opt-out preference is recorded and maintained indefinitely.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for platform analytics and improvement purposes.

Security of Your Data

acce365 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to the following:

• Transport Encryption: All data in transit between your device and acce365's servers is encrypted using TLS 1.3 with 256-bit AES encryption. Our platform enforces HTTPS on all pages without exception.
• At-Rest Encryption: Personal data stored in acce365's databases is encrypted at rest. Encryption keys are managed separately from the data they protect and are subject to regular rotation.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel only, using role-based access control and multi-factor authentication. All access events are logged and subject to regular audit review.
• Password Security: Player passwords are stored using one-way cryptographic hashing with salting. acce365 does not have access to your plain-text password and will never ask you to share it.
• Penetration Testing: acce365's platform undergoes regular security assessments and penetration testing conducted by independent security professionals. Identified vulnerabilities are remediated according to their severity rating.
• Incident Response: acce365 maintains a documented data breach response procedure. In the event of a confirmed personal data breach affecting your information, acce365 will notify you without undue delay and will provide clear information about the nature of the breach and the steps taken in response.

Your Privacy Rights

acce365 respects your rights over the personal data you have shared with us. The following rights are available to all registered acce365 players and may be exercised by contacting support at [email protected]:

8.1 Right of Access

You have the right to request a copy of the personal data that acce365 holds about you. Upon receiving a valid subject access request, acce365 will provide you with a structured summary of your personal data within 10 business days. There is no charge for a standard subject access request.

8.2 Right to Rectification

If any personal data held by acce365 is inaccurate or incomplete, you have the right to request that it be corrected. Please contact support with the specific correction you require, and acce365 will update your records within 5 business days of verifying the correction.

8.3 Right to Erasure

You may request that acce365 delete your personal data. acce365 will comply with erasure requests where the data is no longer necessary for the purposes for which it was collected and where no legal obligation requires its continued retention. Please note that data subject to anti-money-laundering record-keeping obligations cannot be deleted before the end of the applicable five-year retention period, even upon request.

8.4 Right to Data Portability

You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format and to request that acce365 transmit that data to another data controller where technically feasible. Portability requests apply to data that you provided directly to acce365 and that is processed on the basis of your consent or contractual necessity.

8.5 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receiving a marketing opt-out request, acce365 will cease sending promotional communications to you within 3 business days. Transactional and operational communications will continue to be sent as these are necessary for the management of your account.

8.6 Right to Withdraw Consent

Where acce365 processes your personal data on the basis of your consent (for example, consent to receive marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal was communicated to acce365.

Third-Party Services and Links

The acce365 platform is a self-contained online gaming environment. While the games hosted on the platform are provided by third-party studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), these game clients operate within the acce365 platform environment and are subject to the data handling arrangements described in Section 4.3 of this Privacy Policy.

acce365 does not include links to external third-party websites within the platform's navigation, footer, or content areas. If you independently navigate to a third-party website — for example, a payment provider's own website to manage your bKash or Nagad account — that website will be governed by its own privacy policy, over which acce365 has no control. acce365 is not responsible for the privacy practices of any third-party website or service.

Any promotional material or affiliate traffic that leads players to the acce365 platform originates from third parties operating under separate arrangements with acce365. Once you arrive at acce365.net, your data is governed solely by this Privacy Policy regardless of how you arrived at our platform.

Updates to This Policy

acce365 reviews this Privacy Policy on a regular basis and reserves the right to update or amend it at any time. When material changes are made, acce365 will update the effective date displayed at the top of this page and will make reasonable efforts to notify registered players via the email address associated with their account.

Your continued use of the acce365 platform following notification of a change to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with any amendment, you should cease using the platform and request account closure by contacting support at [email protected].

For all privacy-related enquiries, subject access requests, or complaints, please contact acce365 at [email protected]. Our data protection team will acknowledge your communication within 24 hours and provide a substantive response within 10 business days.