Privacy Policy — acf4b8 Bangladesh Betting Platform

About This Policy

This Privacy Policy applies to all Players and visitors who access or use the acf4b8 platform, including all betting markets, casino games, account features, and support channels. By creating an account or continuing to use acf4b8, you acknowledge that you have read and understood this Privacy Policy. If you have any questions about how your data is handled, contact our support team at any time via in-platform live chat or email at [email protected].

Privacy by Design

acf4b8 builds data protection into every layer of its platform architecture. We collect only what we genuinely need to operate the service securely and compliantly — no more. Data minimisation is a principle we take seriously, not a legal formality.

No Data Selling

acf4b8 does not sell, rent, or trade your personal information to third-party marketing companies or data brokers. Your data exists to power your experience on our platform and to meet our legal obligations — not to generate advertising revenue for other organisations.

SSL Encryption

All data transmitted between your device and the acf4b8 platform is protected by industry-standard SSL/TLS encryption. Sensitive information such as payment details and identity documents is encrypted at rest using AES-256 protocols across our secure server infrastructure.

Player Control

We believe your personal data belongs to you. acf4b8 provides clear, accessible mechanisms for Players to access, correct, export, or request deletion of their data. Your rights over your information are detailed in the Your Privacy Rights section of this document.

Compliance-First

acf4b8 adheres to internationally recognised data protection standards. Our KYC and AML data handling practices are aligned with responsible gaming frameworks and financial compliance requirements applicable to our operating licence.

24/7 Support

If you have a question, concern, or formal request related to your privacy or personal data at any time, our English-speaking support team is available 24 hours a day, 7 days a week via in-platform live chat. Data-related requests are escalated to our compliance team within one business day.

Article 1

Data We Collect

acf4b8 collects personal information through several distinct channels: directly from you during registration and account use, automatically through your interaction with the platform, and from trusted third-party sources where required for identity verification and payment processing. The categories of personal data we collect are described in detail below.

Data Category	Specific Data Points	Collection Method
Identity Data	Full legal name, date of birth, gender, nationality, National ID (NID) number, passport number, BRTA Driver's Licence details	Provided by Player during registration and KYC verification
Contact Data	Mobile phone number (Bangladeshi SIM preferred), email address, mailing address (Dhaka, Chittagong, Sylhet, or other BD city)	Provided by Player during registration or account update
Financial Data	bKash account number, Nagad number, Rocket/Upay wallet reference, Visa/Mastercard last four digits, bank name (Dutch-Bangla, City Bank, BRAC Bank, etc.), transaction history, deposit and withdrawal records in BDT	Provided during deposit/withdrawal; automatically recorded by transaction system
Account Data	Username, encrypted password hash, account balance, betting history, game session records, bonus claims, wagering activity	Generated automatically through platform use
Technical Data	IP address, device type, operating system, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6), referral URL	Collected automatically via cookies and server logs on each platform visit
Usage Data	Pages visited, features accessed, game titles played, betting market clicks, session duration, navigation path, search queries within platform	Collected automatically via analytics tools
Communication Data	Live chat transcripts, email correspondence, support ticket content, feedback submissions	Recorded during customer support interactions
Verification Documents	Scanned or photographed copies of government-issued ID, selfie/liveness check images submitted for KYC	Submitted by Player upon request for identity verification

Sensitive Data

acf4b8 does not intentionally collect sensitive personal data such as religious beliefs, political opinions, racial or ethnic origin, or biometric data beyond what is strictly required for identity verification. If KYC processes require a liveness check or facial comparison, this data is handled exclusively by our certified verification partner and is not retained by acf4b8 beyond the completion of the verification review.

Article 2

How We Use Your Data

acf4b8 processes personal data only for legitimate, clearly defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The lawful bases and specific purposes for which we process your data are set out below.

Account Registration and Management: We use your identity and contact data to create and maintain your acf4b8 account, verify your identity, send OTP codes for login authentication, manage your account preferences, and communicate important account-related notices to you.
Processing Bets and Payments: Financial data and account data are used to process your deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to settle winning bets, to calculate and credit bonus funds, and to process withdrawal requests to your verified payment method in BDT.
KYC and Age Verification: Identity and verification document data are processed to confirm that you meet the minimum age requirement of 18 years and to establish your identity as required by our responsible gaming and anti-money laundering compliance obligations.
Legal and Regulatory Compliance: acf4b8 is required by its operating licence and applicable international AML standards to retain certain records of financial transactions, identity verifications, and account activity for defined statutory periods. This processing is carried out on the basis of legal obligation.
Platform Security and Fraud Prevention: Technical data and account data are analysed to detect and prevent unauthorised access, account takeovers, bonus abuse, money laundering, collusion, and other forms of fraud or prohibited conduct as defined in our Terms & Conditions.
Personalisation and Responsible Gaming: Usage and account data are used to monitor gambling patterns, identify signs of potentially problematic gambling behaviour, and proactively offer responsible gaming tools such as deposit limits, cool-off periods, and self-exclusion to Players who may benefit from them.
Platform Improvement and Analytics: Aggregated and anonymised usage data is used to analyse platform performance, understand how Players interact with cricket betting markets, casino games, and slots features, and to guide product development decisions that improve the overall user experience.
Promotional Communications: With your explicit consent (provided during registration or subsequently via account settings), acf4b8 may use your contact data to send you personalised promotional offers, bonus notifications, and information about cricket betting opportunities during BPL, IPL, and other major sporting events. You may withdraw consent at any time via account settings.
Customer Support: Communication data is used to handle your support queries, resolve disputes, investigate complaints, and maintain records of interactions for quality assurance purposes.

Marketing Opt-Out

Receiving promotional communications from acf4b8 is entirely optional. If you no longer wish to receive bonus offers, match day promotions, or seasonal campaign notifications (including BPL, IPL, Eid, and Pohela Boishakh offers), you may opt out at any time by adjusting your notification preferences in your account settings panel, or by contacting our support team via in-platform live chat.

Lawful Basis Summary

Contract performance — account management, bets, payments
Legal obligation — KYC, AML, record retention
Legitimate interest — security, fraud prevention, analytics
Consent — marketing communications (opt-in/out)

Article 3

Data Sharing & Third Parties

acf4b8 does not sell your personal data. We share personal information with third parties only where necessary to operate the platform, comply with legal obligations, or protect the integrity of our services. All third-party partners who receive personal data from acf4b8 are contractually bound to process it only for the purposes specified, in accordance with applicable data protection standards.

Category of Recipient	Purpose of Sharing	Data Shared
Payment Processors	Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard	Financial data, contact data (mobile number), transaction amount in BDT
KYC / Identity Verification Partners	Age verification, identity document authentication, liveness checks	Identity data, verification document images, selfie/liveness data
Game Software Providers	Delivering casino, slots, crash, and card game experiences (e.g., Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe)	Anonymous or pseudonymous Player ID, bet amounts, game session data
Fraud and Risk Analytics	Detecting bonus abuse, money laundering, account takeover, and collusion	Technical data (IP address, device fingerprint), account activity patterns
Cloud Infrastructure Providers	Hosting platform data on secure, encrypted servers	All categories — stored in encrypted form, accessible only to authorised systems
Legal and Regulatory Authorities	Compliance with lawful requests, court orders, AML reporting obligations	Identity data, financial data, account and transaction records — only as legally required
Customer Support Tools	Operating in-platform live chat and support ticketing systems	Communication data, account reference, contact data (no financial data)

International Data Transfers

Some of acf4b8's third-party service providers — including cloud hosting and game software partners — may process data outside of Bangladesh. Where such transfers occur, acf4b8 ensures that adequate safeguards are in place, including standard contractual clauses and data processing agreements that require recipient parties to maintain the same standard of data protection as set out in this Privacy Policy.

Article 4

Cookies & Tracking

acf4b8 uses cookies and similar tracking technologies to operate the platform effectively, maintain your authenticated session, remember your preferences, and gather analytics data that helps us improve your experience. This section explains what cookies we use, why, and how you can manage them.

Cookie Type	Purpose	Duration
Essential	Maintain login session, CSRF protection, load balancing across servers	Session / up to 24 hours
Functional	Remember language preference (English), odds display format, notification settings	Up to 12 months
Analytics	Measure page views, session duration, feature usage, cricket betting market clicks — all anonymised	Up to 24 months
Security	Detect suspicious login attempts, bot traffic, and device fingerprinting for fraud prevention	Up to 6 months
Performance	Monitor page load times, API response speeds, and client-side errors to support platform stability	Up to 30 days

Essential Cookies Cannot Be Disabled

Essential and security cookies are strictly necessary for the platform to function correctly. Without them, you will not be able to log in to your acf4b8 account, place bets, or access any authenticated area of the platform. These cookies do not require your consent as they are technically required to deliver the service you have requested.

Managing Your Cookie Preferences

You may manage your preferences for functional, analytics, and performance cookies via your browser settings at any time. Most modern browsers (Chrome, Firefox, Safari, Samsung Internet on Android) allow you to view, block, or delete cookies through the browser's privacy or settings menu. Note that disabling functional cookies may affect your platform experience, such as resetting preference settings on each visit.

In addition to first-party cookies set directly by acf4b8, certain third-party services embedded in the platform — including game software providers such as Evolution Gaming, Pragmatic Play, and Spribe — may set their own cookies within their game frames. These third-party cookies are governed by the respective providers' privacy policies and are outside the direct control of acf4b8. Players are encouraged to review the privacy documentation of game providers they interact with.

Article 5

Data Retention

acf4b8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods by data category. Once a retention period expires, data is securely deleted or anonymised so that it can no longer be linked to any individual.

Data Category	Retention Period	Basis for Retention
Account & Identity Data	Duration of account + 5 years after closure	AML compliance, dispute resolution, regulatory audit requirements
Financial & Transaction Records	7 years from date of each transaction	International AML standards, financial record-keeping obligations
KYC Verification Documents	5 years from account closure or last verification	Regulatory obligation under operating licence KYC requirements
Betting and Game History	5 years from account closure	Dispute resolution, responsible gaming monitoring, licence compliance
Communication and Support Records	3 years from date of interaction	Quality assurance, legal evidence in dispute proceedings
Marketing Consent Records	Until consent is withdrawn, plus 2 years	Demonstrating lawful basis for marketing communications
Technical / Log Data	Up to 12 months	Security monitoring, platform diagnostics, fraud investigation
Analytics Data (anonymised)	Up to 24 months	Platform improvement — anonymised data is not personal data

Account Closure and Data Deletion

When a Player voluntarily closes their acf4b8 account, their profile is deactivated and access is removed immediately. However, underlying transaction records, KYC documents, and account history are retained for the periods specified above in accordance with our legal obligations. Players may submit a formal data deletion request for data categories not subject to mandatory retention — see the Your Privacy Rights section for how to do this.

Article 6

Data Security

acf4b8 implements a comprehensive, multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security posture is reviewed and updated continuously to address emerging threats and align with best practices in online gaming platform security.

Encryption at Rest and in Transit

All data stored on acf4b8 servers is encrypted using AES-256. All data transmitted between your device and our platform is protected by TLS 1.3. Passwords are never stored in plain text — only salted cryptographic hashes are retained.

Two-Factor Authentication

acf4b8 offers SMS-based two-factor authentication (2FA) for all Player accounts. We strongly recommend enabling 2FA to add a critical second layer of protection to your login process, particularly important for accounts with active bKash or Nagad payment methods linked.

24/7 Security Monitoring

Our security operations team monitors the acf4b8 platform around the clock for anomalous activity, including unusual login patterns, rapid multi-account access from a single IP, and suspicious transaction sequences. Alerts are triaged and acted upon in real time.

Access Controls

Internal access to Player personal data is restricted on a strict need-to-know basis. acf4b8 staff handling personal data undergo regular data protection training. Administrative access to production systems is controlled via multi-factor authentication and comprehensive audit logging.

Secure Cloud Infrastructure

acf4b8 hosts its platform on enterprise-grade cloud infrastructure with ISO 27001-aligned security controls, regular penetration testing, automated vulnerability scanning, and geographically redundant backup systems to ensure both security and availability.

Data Breach Response

In the unlikely event of a data breach affecting Player personal information, acf4b8 has a documented incident response plan. Affected Players will be notified promptly with clear information about what data was involved, what action has been taken, and what steps they should take to protect themselves.

Your Security Responsibilities

While acf4b8 maintains robust technical and organisational security measures, the security of your account also depends on actions you take. You are responsible for keeping your username and password confidential, enabling 2FA on your account, logging out after each session (especially on shared devices), and promptly notifying acf4b8 support if you suspect any unauthorised access to your account. acf4b8 will never ask for your password through any communication channel.

Article 7

Your Privacy Rights

As a Player on the acf4b8 platform, you hold a defined set of rights over your personal data. acf4b8 is committed to honouring these rights promptly and without undue complexity. All privacy rights requests are handled by our compliance team and acknowledged within 48 hours of receipt. Final responses are provided within 14 working days for straightforward requests, and within 30 working days for requests requiring more extensive data retrieval or legal review.

Right of Access

You have the right to request a copy of all personal data acf4b8 holds about you. We will provide this in a clear, structured format. A summary of your betting history, account data, and transaction records is also accessible directly from your account dashboard.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact details (mobile number, email) directly via account settings, or contact support for corrections to identity data.

Right to Erasure

You may request that acf4b8 delete personal data that is no longer necessary for the purposes it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right does not apply to data we are legally required to retain (e.g., transaction records under AML obligations).

Right to Restrict Processing

In certain circumstances — such as while a data accuracy dispute is being resolved — you may request that acf4b8 restrict the processing of your personal data to storage only. We will notify you before lifting any such restriction.

Right to Data Portability

You have the right to receive personal data you have provided to acf4b8 in a structured, machine-readable format (such as CSV or JSON), and to request that this data be transferred directly to another service provider where technically feasible.

Right to Object

You have the right to object to acf4b8 processing your personal data on the basis of legitimate interest — including profiling for responsible gaming monitoring and direct marketing communications. If you object to marketing, we will stop immediately. Objections to other processing will be assessed against our compelling legitimate grounds.

Right to Withdraw Consent

Where processing is based on your consent — such as receiving promotional offers during BPL, IPL, Eid, or Pohela Boishakh campaigns — you may withdraw that consent at any time via account notification settings or by contacting support. Withdrawal does not affect processing carried out prior to the withdrawal.

How to Submit a Request

To exercise any of the rights listed above, contact acf4b8 via in-platform live chat (available 24/7 in English) or email our compliance team at [email protected]. Please include your registered username and a clear description of your request. We may ask for identity verification before acting on your request to protect account security.

Article 8

Policy Updates & Contact

Updates to This Policy: acf4b8 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, regulatory requirements, or platform features. When material changes are made, registered Players will be notified via their registered mobile number or in-platform notification at least 7 days before the updated policy takes effect. The effective date shown at the top of this document will be updated accordingly.

Continued Use as Acceptance: Your continued use of the acf4b8 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the revised policy, you may close your account free of charge and receive a return of any real-money balance by contacting our support team before the effective date.

Children and Minors: The acf4b8 platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If acf4b8 becomes aware that a minor has created an account or provided personal data, the account will be closed immediately, all data will be deleted as quickly as our legal retention obligations allow, and any deposits made will be returned via the original payment method. If you believe a minor has accessed acf4b8, please contact us immediately at [email protected].

Links to Third-Party Platforms: The acf4b8 platform may contain references to third-party game providers such as Evolution Gaming, Pragmatic Play, and Spribe. When you interact with embedded third-party game content, you may be subject to that provider's own privacy policy and data processing practices. acf4b8 is not responsible for the privacy practices of third-party game providers and encourages Players to review those policies independently.

Governing Language: This Privacy Policy is published and maintained in English. In the event of any inconsistency between the English version and any translated or summarised version, the English version shall prevail in all respects.

Contact Our Privacy Team

For any question, concern, or formal request related to this Privacy Policy or your personal data, please contact the acf4b8 privacy and compliance team:

[email protected]

In-platform live chat is available 24/7 in English. Privacy-specific requests are escalated to our compliance team and acknowledged within 48 hours. We aim to resolve all requests within 14 working days (Bangladesh Standard Time, UTC+6).

Policy Version History

January 2026 — Current version. Updated cookie categories, data retention schedules, and Player rights section to reflect platform updates.
July 2025 — Added payment data handling section for Upay and Dutch-Bangla Bank integrations.
January 2025 — Initial Privacy Policy published at platform launch.

acf4b8 Privacy Policy — Your Data, Protected