ach67 Privacy Policy

ach67 collects personal data from you in two primary ways: information you provide to us directly, and information collected automatically through your use of the platform. We are transparent about both categories and explain each below.

Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, contact support, or participate in a promotion, you may provide us with the following types of personal data:

Information Collected Automatically

When you access the ach67 platform — whether via a web browser on your smartphone in Dhaka, a desktop in Chittagong, or any other device anywhere in Bangladesh — our systems automatically collect certain technical data about your session. This data is used to operate the platform reliably, detect fraud, and improve the user experience. It includes:

• Device data: device type, operating system, browser type and version, screen resolution
• Network data: IP address, mobile carrier, internet service provider
• Session data: pages visited, time spent on each page, clicks, scroll depth, game sessions started and completed
• Referral data: the URL or search term that brought you to ach67 (if applicable)
• Cookie data: session tokens, preference identifiers, analytics identifiers — see the Cookies section below for full details

Automatically collected data is primarily technical in nature. On its own, it does not directly identify you by name. However, when combined with account data, it may form part of your overall player profile for the purposes described in the next section.

Data from Third Parties

In limited circumstances, ach67 may receive personal data about you from third-party sources. This occurs when a payment provider such as bKash or Nagad confirms a transaction associated with your registered mobile number, or when a fraud-prevention or identity-verification partner returns a result on an identity check you have initiated. ach67 uses third-party sourced data only in the context of the specific service for which it was obtained and does not purchase marketing lists or data sets from data brokers.

ach67 processes your personal data only where we have a clear, lawful basis for doing so. The following table sets out the primary purposes for which we use your data, the legal basis for each purpose, and examples of the specific activities involved.

Automated Decision-Making

ach67 uses automated systems to flag accounts for review based on certain risk indicators — for example, an unusual pattern of withdrawals, multiple failed login attempts from a new device, or betting behaviour consistent with bonus abuse. These automated flags do not automatically result in account closure or sanction; they trigger a manual review by our compliance team. Where an automated decision directly affects your account (such as a temporary hold being placed on a withdrawal), you have the right to request that the decision be reviewed by a human member of our team. To exercise this right, contact [email protected].

ach67 does not sell, rent, or share your personal data with third parties for their own marketing purposes. Data sharing is strictly limited to the categories below, each of which is necessary to deliver or protect the services you use on ach67.

Payment Service Providers

To process deposits and withdrawals, ach67 shares necessary transaction data with the payment service providers you use. This includes mobile financial services such as bKash, Nagad, Rocket, and Upay, as well as bank partners including Dutch-Bangla Bank, BRAC Bank, and City Bank. These providers receive only the minimum data required to complete the specific transaction — typically your registered mobile number or bank account number and the transaction amount. Payment providers operate under their own privacy policies and are independently responsible for the data they hold.

Identity Verification Partners

When ach67 requires identity or age verification, we may share a copy of your submitted documents (NID, passport) with a trusted third-party verification service. These partners process your data solely for the purpose of confirming your identity on our behalf and are contractually prohibited from using your data for any other purpose.

Game Software Providers

Games on ach67 are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, certain gameplay data — including your player session identifier, bet amounts, and game results — is transmitted to the game server operated by the relevant provider. This data is used to render the game, calculate results, and settle your bet. Game providers do not receive your full personal profile, payment details, or contact information.

Analytics Providers

ach67 uses analytics tools to understand how the platform is used and to improve performance. These tools may collect anonymised or pseudonymised usage data through cookies and similar technologies. Analytics providers do not receive data that directly identifies you by name or mobile number.

Legal & Regulatory Disclosure

ach67 will disclose your personal data to law enforcement authorities, financial intelligence units, or other government bodies where required to do so by applicable law. This includes cases involving suspected money laundering, fraud, underage gambling, or other illegal activity. Where legally permitted to do so, ach67 will notify you of any such disclosure. ach67 will not comply with requests that are not lawfully authorised.

ach67 uses cookies and similar tracking technologies to operate the platform, keep you securely logged in, remember your preferences, and gather analytics data that helps us improve the player experience. This section explains the types of cookies we use and how you can manage them.

What Are Cookies?

A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies allow websites to recognise your device on subsequent visits and remember information about your session. They do not execute code and cannot carry viruses or malware.

Types of Cookies Used by ach67

Managing Your Cookie Preferences

You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to block all cookies, block only third-party cookies, or clear existing cookies. Please be aware that disabling strictly necessary cookies will affect your ability to stay logged in and use the ach67 platform normally. Detailed instructions for managing cookies in popular browsers (Chrome, Firefox, Samsung Internet, and others commonly used in Bangladesh) are available on the browser developer's support pages.

Disabling analytics or marketing cookies will not affect your ability to place bets or access your account. It will simply mean that ach67 receives less data about your browsing session for improvement and promotional measurement purposes.

ach67 retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

When the retention period for a category of data expires, ach67 will either securely delete the data or anonymise it so that it can no longer be attributed to any individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Where your account is closed due to a suspected breach of our Terms and Conditions — including suspected fraud or money laundering — ach67 may retain relevant data for a longer period as required to support any ongoing investigation or legal proceedings.

As a player on ach67, you hold a set of rights regarding the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, contact our support team at [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise. We will respond within 30 calendar days of receiving a verified request.

Right to Access

You have the right to request a copy of the personal data ach67 holds about you. We will provide this in a clear, structured format. The first copy is provided free of charge. For additional copies or unusually complex requests, a reasonable administrative fee may apply.

Right to Rectification

If any personal data held by ach67 is inaccurate or incomplete, you have the right to request that it be corrected. For data you can update yourself — such as your email address or mobile number — you can make changes directly through your account settings. For data that requires verification (such as your legal name or date of birth), contact support and we will guide you through the correction process.

Right to Erasure

You may request that ach67 delete your personal data. We will honour erasure requests where there is no longer a lawful basis for us to hold the data — for example, where you have closed your account and the applicable retention period has expired. Where we are required by law to retain certain data (such as financial transaction records), we will explain why erasure is not possible for those specific data categories and what can be deleted in the interim.

Right to Restrict Processing

In certain circumstances — for example, while you are disputing the accuracy of data we hold — you may ask ach67 to restrict how we use your data while the matter is being investigated. During a restriction period, we will continue to store your data but will limit our use of it to the purposes you have agreed to or to defending any legal claims.

Right to Object

You have the right to object to our processing of your personal data where we rely on legitimate interests as our legal basis. This is particularly relevant for direct marketing — if you object to receiving promotional communications from ach67, we will stop sending them immediately. You can also object to being subject to automated decision-making that significantly affects you.

Right to Data Portability

Where ach67 processes your personal data on the basis of your consent or a contract with you, and the processing is carried out by automated means, you have the right to receive a copy of that data in a structured, machine-readable format. You may also request that we transmit that data to another platform where technically feasible.

ach67 takes the security of your personal data seriously. We implement a layered approach to security that covers the infrastructure on which the platform runs, the application layer through which you interact with it, and the operational processes our team follows when handling sensitive data.

Technical Safeguards

All data in transit between your device and ach67 servers is encrypted using TLS (Transport Layer Security), the same standard used by banks and financial institutions worldwide. Data stored on our servers — including your account details, transaction history, and verification documents — is encrypted at rest. Access to production systems and databases is restricted to a small number of authorised personnel and is protected by multi-factor authentication.

Operational Safeguards

ach67 staff who handle personal data are subject to strict confidentiality obligations. Access to player data is granted on a need-to-know basis — a customer support agent can see what is needed to resolve your query, but does not have access to your financial transaction history or verification documents unless those are directly relevant to the support case. All data access by internal staff is logged and subject to periodic audit.

Incident Response

In the event of a data security incident that is likely to result in a risk to the rights and freedoms of affected players, ach67 will notify affected individuals as promptly as is practicable, and in no case later than 72 hours after becoming aware of the breach. Notifications will be sent to the email address or mobile number registered on your account and will include a description of the nature of the breach, the categories and approximate number of records affected, and the steps we are taking to address it.

Your Role in Security

While ach67 maintains robust security measures, the security of your account also depends on actions on your end. We strongly recommend: using a strong, unique password that is not reused across other websites or apps; never sharing your login credentials with anyone — including persons claiming to be ach67 staff; logging out of your account when using a shared device; and keeping the mobile number associated with your bKash or Nagad account secure, since it is linked to your ach67 wallet.

ach67 reviews this Privacy Policy periodically and updates it when our data practices change, when we introduce new services, or when applicable laws require us to do so. The effective date shown at the top of this page reflects the date of the most recent revision.

Notification of Changes

When we make a material change to this Privacy Policy — such as a change to the categories of data we collect, the purposes for which we use it, or the third parties we share it with — we will notify registered players by email or in-app notification at least 14 days before the change takes effect. For minor, non-material changes (such as clarifying existing language or correcting a typographical error), we will update the effective date without advance notification.

Your continued use of ach67 after a Privacy Policy update takes effect constitutes your acceptance of the revised terms. If you do not agree with any changes to this policy, you may close your account by contacting [email protected] and requesting account closure. Any personal data subject to a deletion request following account closure will be handled in accordance with the Data Retention section above.

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how ach67 handles your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Response time: within 3 business days for general queries; within 30 calendar days for formal privacy rights requests
• Operating hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Time zone: Bangladesh Standard Time (BST, UTC+6)

ach67 is committed to resolving all privacy-related concerns fairly and efficiently. If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection or consumer protection authority in your jurisdiction.