Your Privacy at
365ach

1. Information We Collect

365ach collects personal data only where there is a clear and lawful basis for doing so. The categories of information we collect fall into three broad groups: information you provide to us directly, information we collect automatically as you use the platform, and information we receive from third parties in connection with payment processing and identity verification.

1.1 Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, or contact our support team, you provide us with information that may include:

• Identity data: Full legal name, date of birth, gender, and nationality as recorded on your official identification documents.
• Contact data: Email address, mobile phone number, and residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or elsewhere in Bangladesh).
• Account credentials: Username and encrypted password. We do not store your password in plain text.
• KYC documentation: Scanned copies or photographs of your National Identity Card (NID), passport, driving licence, or other government-issued identification, as required for age and identity verification.
• Payment data: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay) and bank account details (bank name, account number, account holder name) as required to process deposits and withdrawals in Bangladeshi Taka (৳).
• Communications data: Messages, emails, and live chat transcripts exchanged with our customer support team.

1.2 Information Collected Automatically

When you visit or use the 365ach platform, certain technical data is collected automatically by our systems and infrastructure:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifier.
• Usage data: Pages visited, time spent on each page, games launched, bet amounts, wager history, session start and end times, and navigation paths through the platform.
• Location data: General geographic location derived from your IP address (country and city level). We do not collect precise GPS coordinates.
• Log data: Server access logs recording requests made to our platform, error events, and security-relevant events such as failed login attempts.

1.3 Information Received from Third Parties

We may receive supplementary personal data from third parties in specific circumstances:

• Payment processors: bKash, Nagad, Rocket, and Upay may confirm transaction status, wallet ownership, and — where required for fraud prevention — basic account holder details.
• Banking partners: BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank, and other Bangladeshi financial institutions may provide transaction confirmation data for bank transfer deposits and withdrawals.
• Identity verification services: Where we use a third-party KYC provider to verify identity documents, that provider may return a verification status and any discrepancies flagged during the check.
• Fraud and risk platforms: We may receive risk scores or flagged indicators from fraud-prevention services that help us protect the integrity of the platform.

2. How We Use Your Data

365ach processes your personal data for specific, defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process personal data are set out in the table below:

Purpose	Data Categories Used	Legal Basis
Account registration and management	Identity, contact, credentials	Contract performance
Age and identity verification (KYC)	Identity, KYC documents	Legal obligation
Processing deposits and withdrawals	Payment data, identity	Contract performance
Fraud detection and prevention	Usage, device, payment, location	Legitimate interest
Customer support	Identity, contact, communications	Contract performance
Platform analytics and improvement	Usage, device data (aggregated)	Legitimate interest
Responsible gaming monitoring	Usage, wager history	Legal obligation / legitimate interest
Marketing and promotions (opt-in only)	Contact, usage preferences	Consent

2.1 Marketing Communications

365ach will only send you promotional emails, SMS notifications, or in-platform messages about bonuses, tournaments, or seasonal offers (such as Eid promotions, Pohela Boishakh specials, or BPL cricket season offers) where you have given explicit opt-in consent during registration or through your account settings. You may withdraw consent at any time by updating your communication preferences in your account dashboard or by contacting our support team.

2.2 Responsible Gaming Use

We use your gaming activity data — including session frequency, bet sizes, deposit patterns, and time played — to monitor for signs of problem gambling. Where our monitoring systems flag a concern, we may reach out proactively with information about responsible gaming resources, impose temporary deposit limits, or suggest a cooling-off period. This processing is conducted in your best interests and in compliance with our responsible gaming obligations. See our Responsible Gaming page for full details.

3. Data Sharing & Third Parties

365ach does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your personal data only in the following limited and controlled circumstances:

3.1 Service Providers and Partners

We engage trusted third-party service providers to help us operate the 365ach platform. These providers are given access only to the data they need to perform their specific function, and all are required to process that data in accordance with our instructions and applicable data protection standards. Current categories of service provider include:

• Payment processors: bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners for transaction processing.
• KYC and identity verification: Third-party providers that verify the authenticity of identity documents submitted during account verification.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate the game engines that power our casino and sports betting products. These providers process limited session data required to deliver and certify game outcomes.
• IT infrastructure and hosting: Cloud and server infrastructure providers that host the 365ach platform and store encrypted data.
• Fraud and risk management: Specialist platforms that help us detect and prevent fraudulent account activity, bonus abuse, and money laundering.

3.2 Legal and Regulatory Disclosure

We may disclose your personal data to competent authorities, law enforcement bodies, or regulatory agencies where we are required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent imminent harm, fraud, or criminal activity.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the 365ach business, your personal data may be transferred as part of that transaction. In such circumstances, you will be notified via the email address associated with your account, and the receiving entity will be required to honour this Privacy Policy or present you with a revised policy for acceptance.

4. Cookies & Tracking Technologies

365ach uses cookies and similar tracking technologies (such as web beacons and local storage) to deliver a functional, personalised, and secure platform experience. Cookies are small text files stored on your device when you visit a website.

4.1 Categories of Cookies We Use

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Session management, authentication, security tokens, fraud prevention. Required for the platform to function.	No — core functionality
Functional / Preference	Remembering language preferences, game lobby layout preferences, and recently played games.	Yes — via browser settings
Analytics	Aggregate, anonymised usage data to help us understand how players navigate the platform and where improvements can be made.	Yes — via browser settings

4.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling strictly necessary cookies may prevent certain platform features from working correctly, including your ability to log in and maintain a session.

Instructions for managing cookies in common browsers:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data.
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
• Safari (iOS / macOS): Settings → Safari → Privacy & Security.
• Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data.

We do not use third-party advertising cookies or cross-site tracking cookies. Our analytics data is processed in aggregate form and is not used to build individual user profiles for advertising purposes.

5. Data Retention

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. The following retention periods apply as a general guide:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal obligation, dispute resolution
KYC / identity documents	Duration of account + 5 years after closure	Anti-money laundering (AML) compliance
Transaction records	7 years from transaction date	Financial record-keeping obligations
Wager and game history	5 years from the date of activity	Responsible gaming monitoring, disputes
Customer support communications	3 years from last interaction	Quality assurance, complaint resolution
Marketing consent records	Until consent withdrawn + 2 years	Demonstrating lawful marketing basis
Server and access logs	12 months from creation	Security monitoring and incident response

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised. Anonymised aggregate data (for example, statistical reports on platform usage) may be retained indefinitely as it can no longer be linked to any individual.

6. Security Measures

365ach employs a layered security approach to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• TLS/SSL encryption: All data transmitted between your browser or mobile device and the 365ach platform is encrypted using Transport Layer Security (TLS). Look for the padlock icon in your browser address bar when visiting 365ach.net.
• Encrypted password storage: Account passwords are hashed using a modern one-way cryptographic algorithm. We never store your password in readable form, and our staff cannot retrieve your password — only reset it.
• Access control: Access to personal data within 365ach's internal systems is restricted on a strict need-to-know basis. Staff with access to customer data are subject to confidentiality obligations.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts to add an additional layer of protection against unauthorised access.
• Fraud monitoring: Automated systems monitor account activity in real time for unusual patterns, flagging potential compromise or fraudulent use for immediate investigation.
• Regular security reviews: Our platform infrastructure undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

While we take all reasonable precautions, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights and interests, we will notify affected users via the email address registered to their account without undue delay.

7. Your Privacy Rights

As a player on the 365ach platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Request — [Right Type]".

7.1 Right of Access

You have the right to request a copy of the personal data we hold about you. Upon receipt of a valid access request, we will provide you with a summary of the data we hold, the purposes for which it is processed, and the categories of recipients with whom it has been shared. We will respond to access requests within 30 days.

7.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your email address, mobile number, or residential address, you can update these directly through your account settings. For identity and KYC data, contact support with the correct information and supporting documentation.

7.3 Right to Erasure

You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that certain data must be retained for the minimum periods specified in Section 5 above to comply with legal obligations — such data cannot be erased on request until the retention period has elapsed.

7.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing and we are assessing whether our legitimate interests override your rights.

7.5 Right to Data Portability

Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive the personal data you provided to us in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that this data be transmitted directly to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to processing of your personal data where that processing is based on our legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing for that purpose immediately. Where you object to legitimate interest processing, we will assess whether our interests are overridden by your rights and freedoms and respond accordingly.

7.7 Withdrawing Consent

Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time through your account preferences or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

8. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 365ach processes your personal data, please contact our support team using the details below. All privacy correspondence is treated with strict confidentiality.

Email:
[email protected]

Support Hours:
24/7 Live Chat available via the platform • Email responses within 2–6 hours (BST, UTC+6)

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. 365ach is committed to resolving privacy concerns fairly and transparently, and we encourage you to contact us directly in the first instance so that we have the opportunity to address your concern before it is escalated.

8.1 Changes to This Privacy Policy

365ach reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made, we will notify registered players via their registered email address or via an in-platform notification. The "Effective" date at the top of this page will be updated accordingly.

Your continued use of the 365ach platform after an updated Privacy Policy is published constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you may close your account in accordance with the procedure described in our Terms & Conditions.

Last reviewed and updated: January 2026. For historical versions of this Privacy Policy, please contact [email protected].