ac999 Privacy Policy

1 Who We Are

ac999 operates the online casino and sports betting platform accessible at https://ac999.io (the "Platform"). For the purposes of this Privacy Policy, ac999 acts as the data controller in respect of all personal data collected through the Platform.

This Privacy Policy applies to all individuals who access or register an account on the ac999 Platform, including players located in Bangladesh and any other jurisdiction from which access to the Platform is not prohibited by applicable law.

If you have questions about this Privacy Policy or wish to exercise any of your data rights, please contact our Data Protection team using the contact details provided in Section 13 of this document.

2 Personal Data We Collect

ac999 collects personal data from you in the following circumstances: when you register an account, when you use the Platform, when you contact our support team, and when you interact with promotional features. The categories of personal data we collect are described in the table below.

ac999 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data. If you voluntarily disclose such information in a support communication, it will be handled with heightened care and will not be used for any purpose other than resolving the specific matter at hand.

3 How We Use Your Personal Data

ac999 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your ac999 account, including processing your registration and verifying your identity in line with our KYC obligations.
• Transaction Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and other accepted payment methods in BDT.
• Platform Delivery: To provide access to casino games, live dealer tables, sports betting markets, and all other features available on the ac999 Platform.
• Security and Fraud Prevention: To monitor account activity for signs of unauthorised access, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To identify patterns of play that may indicate problem gambling and to enforce self-exclusion requests, deposit limits, and cooling-off periods.
• Legal Compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, record-keeping requirements, and any lawful requests from competent authorities.
• Customer Support: To respond to your queries, process complaints, and improve the overall quality of our support service.
• Marketing Communications: To send you promotional offers and platform updates by email or SMS, where you have provided your consent. You may withdraw consent at any time by contacting support.
• Platform Analytics: To analyse aggregated, anonymised usage data in order to improve the Platform's performance, content, and user experience.

4 Legal Basis for Processing

ac999 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and ac999 — specifically, to provide you with access to the Platform and process your financial transactions.
• Legal Obligation: Processing is required for ac999 to comply with applicable legal obligations, including KYC identity verification, AML record-keeping, and responding to lawful authority requests.
• Legitimate Interests: ac999 processes certain data (such as technical and usage data) to pursue its legitimate interests in fraud prevention, platform security, and service improvement, provided those interests do not override your fundamental privacy rights.
• Consent: For marketing communications and the placement of non-essential cookies, ac999 relies on your freely given, specific, and informed consent. You may withdraw this consent at any time without detriment to your account standing.

5 Sharing Your Personal Data

ac999 does not sell, rent, or otherwise trade your personal data for commercial gain. We may share your data with the following categories of third parties strictly as necessary to operate the Platform:

• Payment Service Providers: Mobile financial services such as bKash, Nagad, and Rocket, as well as card processors and banking partners, receive the minimum financial data necessary to process your transactions.
• Identity Verification Partners: Third-party KYC service providers receive identity and document data to assist with account verification. These providers operate under strict confidentiality agreements.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive anonymised session data required to deliver game content and calculate outcomes. They do not receive your identity or financial data.
• IT Infrastructure and Security Providers: Cloud hosting, cybersecurity, and analytics vendors who support the operation of the Platform. All such vendors are contractually bound to process your data only on our instructions and to maintain appropriate security standards.
• Regulatory and Law Enforcement Authorities: Where required by law or in response to a valid legal request, ac999 may disclose personal data to competent authorities. We will notify you of such disclosures where legally permitted to do so.

All third-party data processors engaged by ac999 are subject to contractual data processing agreements that require them to implement appropriate technical and organisational security measures and to process personal data only for the specific purposes for which it was shared.

6 Data Security

ac999 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Bcrypt hashing for all stored passwords — your password is never stored in plain text and cannot be retrieved by ac999 staff.
• Two-factor authentication (2FA) available for all account holders as an additional login security layer.
• Role-based access controls ensuring that only authorised ac999 personnel can access personal data, and only to the extent required by their specific job function.
• Regular security audits and penetration testing of the Platform infrastructure conducted by independent third-party specialists.
• Automated intrusion detection systems that monitor for unusual account activity in real time.

Despite these measures, no method of internet transmission or electronic storage is completely secure. ac999 cannot provide an absolute guarantee against all security threats. In the event of a personal data breach that is likely to result in a risk to your rights, ac999 will notify affected users without undue delay and will take all reasonable steps to contain and remedy the breach.

7 Cookies and Tracking Technologies

ac999 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a web server. Cookies enable the Platform to function correctly and help us understand how players use our services.

The types of cookies ac999 uses are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies manage your login session, remember your preferences, and maintain account security. They cannot be disabled without impairing your ability to use the Platform.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players navigate the Platform — which pages are visited most often, where errors occur, and how long sessions last. This data helps us improve Platform performance. We use first-party analytics only; we do not use Google Analytics or other third-party analytics platforms that share your data externally.
• Functionality Cookies: These cookies remember choices you make on the Platform, such as your preferred language or display settings, so you do not need to re-enter them on each visit.

ac999 does not use third-party advertising cookies, behavioural profiling cookies, or retargeting pixels. You can manage or delete cookies through your browser settings at any time; however, disabling strictly necessary cookies may prevent you from accessing certain features of the Platform.

8 Data Retention

ac999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, or as required by applicable law. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, in line with AML record-keeping obligations.
• Transaction and Financial Data: Retained for a minimum of seven (7) years following the date of each transaction, in accordance with financial record-keeping requirements.
• Support and Communications Data: Retained for three (3) years from the date of the most recent communication, unless the communication relates to an ongoing dispute, in which case data is retained until final resolution.
• Marketing Consent Records: Retained for the duration of your marketing subscription plus two (2) years following any opt-out, to demonstrate compliance with consent requirements.
• Technical and Usage Data (Anonymised): Anonymised usage and analytics data may be retained indefinitely for platform improvement purposes, as it can no longer be linked to an identifiable individual.

Upon expiry of the applicable retention period, ac999 will securely delete or irreversibly anonymise your personal data. If you request deletion of your data before the retention period expires and we are required by law to retain it, we will restrict further processing of your data to the extent required to fulfil that legal obligation only.

9 Your Data Rights

As an ac999 account holder, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with your full name, registered account username, and a description of the right you wish to exercise. ac999 will acknowledge your request within 2 business days and respond fully within 14 business days.

• Right of Access: You have the right to request a copy of the personal data ac999 holds about you, together with an explanation of how and why it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request that ac999 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 8.
• Right to Restriction of Processing: You may request that ac999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is under review.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the personal data you provided to ac999 and to transmit that data to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on ac999's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

10 Children's Privacy

The ac999 Platform is strictly intended for adults aged 21 years and above. ac999 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, access the Platform, or submit any personal data to ac999.

If ac999 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be deleted, and any winnings or bonuses associated with the account will be forfeited.

If you are a parent or guardian and believe that a minor in your care has registered an account with ac999, please contact our support team immediately at [email protected] so that we can take appropriate action without delay.

11 International Data Transfers

ac999 primarily stores and processes your personal data within secure data centre facilities. Where it is necessary to transfer your personal data to service providers or infrastructure partners located outside Bangladesh, ac999 ensures that appropriate safeguards are in place prior to any such transfer.

These safeguards may include contractual clauses that require the recipient to protect your personal data to a standard equivalent to that applied by ac999, or reliance on the recipient country's adequacy determination where applicable. ac999 will not transfer personal data internationally where doing so would be inconsistent with applicable data protection law or where it would place your personal data at material additional risk.

12 Updates to This Privacy Policy

ac999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered account holders by posting a prominent notice on the Platform and, where reasonably practicable, by sending an email notification to the address associated with your account.

The "Last Updated" date at the top of this Privacy Policy will always reflect the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how ac999 is protecting your personal data. Your continued use of the Platform following the effective date of any update constitutes your acknowledgement of the revised Privacy Policy.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data ac999 holds about you, please contact our Data Protection and Support team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

Data Protection Contact: [email protected]

Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

Response Time: Acknowledgement within 2 business days; full response within 14 business days.

When contacting us regarding a data rights request, please include your registered account username and a clear description of your request to help us locate your records and respond efficiently.