ac8 Privacy Policy

ac8 operates the online casino and sports betting platform available at ac8.bio (the "Platform"). As the data controller for information collected through this Platform, ac8 is fully committed to protecting the privacy and personal data of every registered player. This Privacy Policy sets out the legal basis on which we process your personal data, the purposes for which it is used, and the safeguards we have in place to keep it secure.

This Policy applies to all individuals who register an account on the ac8 Platform, visit the ac8 website, interact with our customer support team, or participate in any promotional activity offered by ac8. By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy in full.

1 Data We Collect

ac8 collects personal data through multiple channels during the course of your relationship with the Platform. The categories of data we collect are described in the table below, along with the source and lawful basis for each category of collection.

ac8 does not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has provided personal data to ac8, please contact us immediately at [email protected] so that the relevant data can be located and deleted without delay.

2 How We Use Your Data

ac8 uses the personal data it collects strictly for the purposes outlined in this section. We do not sell, rent, or trade your personal data to any third party for their own independent marketing purposes.

• Account creation and management: To register your account, verify your identity, manage your profile, and provide you with access to the full range of ac8 gaming and betting services.
• Transaction processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, and to maintain an accurate financial record of all transactions associated with your account.
• KYC and age verification: To verify that you meet the 18+ age requirement and to comply with our anti-money-laundering (AML) and Know Your Customer (KYC) obligations. All players must be verified before their first withdrawal is processed.
• Customer support: To respond to your queries, complaints, and requests submitted via live chat or email, and to maintain a record of those interactions for quality assurance and training purposes.
• Responsible gaming: To monitor gaming patterns for indicators of problem gambling behaviour, to administer deposit limits, session reminders, cool-off periods, and self-exclusion requests, and to contact you where our responsible gaming algorithms flag a potential concern.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multiple account creation, and other prohibited conduct, using both automated systems and manual review processes.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or platform features — but only where you have provided consent or where we have a legitimate interest basis and you have not opted out. You may withdraw your marketing consent at any time via your account settings or by emailing [email protected].
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the functionality, performance, and user experience of the ac8 Platform.
• Legal and regulatory compliance: To comply with all applicable legal and regulatory obligations, including responding to lawful requests from government authorities or law enforcement agencies.

3 Data Sharing & Disclosure

ac8 may share your personal data with carefully selected third parties only where necessary to deliver our services or to comply with our legal obligations. In all cases, data sharing is governed by appropriate data processing agreements that require third parties to handle your data with the same standard of care as ac8.

• Payment service providers: Your financial data is shared with payment processors such as bKash, Nagad, Rocket, Upay, and banking partners solely to facilitate deposit and withdrawal transactions. These providers operate under their own regulated privacy and data security frameworks.
• Game providers: Limited technical data (session tokens, game result seeds) may be shared with licensed game studios such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi to ensure correct game delivery, RTP auditing, and dispute resolution.
• Identity verification services: Your identity documents may be processed by third-party KYC/AML verification providers to meet our regulatory obligations. These providers are contractually bound to use your data solely for verification purposes.
• Fraud prevention platforms: Aggregated and pseudonymised data may be shared with industry-standard fraud detection services to identify and prevent known patterns of platform abuse.
• Law enforcement and regulatory bodies: ac8 will disclose personal data to law enforcement, regulatory bodies, or government authorities where required to do so by law, court order, or in response to a lawful statutory request. ac8 will, where legally permitted, notify you of such disclosure.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of ac8's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms that will apply to your data going forward.

4 Cookies & Tracking

The ac8 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by our web server when you visit the Platform. The following categories of cookies are used by ac8:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They manage your login session, maintain your account authentication state, and ensure that your deposit and withdrawal requests are routed securely. These cookies cannot be disabled without breaking core Platform functionality.
• Performance cookies: These cookies collect anonymised information about how users interact with the Platform — which pages are visited most frequently, which game categories attract the longest sessions, and where players encounter navigation difficulties. The data is used solely to improve Platform performance and user experience.
• Functional cookies: These cookies remember your preferences, such as your preferred language setting, display timezone (Bangladesh Standard Time, BST/UTC+6), and game filter selections, so that you do not need to re-enter them on each visit.
• Analytics cookies: ac8 uses privacy-respecting analytics tools to measure aggregate Platform traffic and engagement. All data processed by our analytics tools is pseudonymised and is not used to identify individual users.

You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent certain features of the ac8 Platform — including login and payments — from functioning correctly. Your continued use of the Platform following your first visit constitutes acceptance of our use of strictly necessary cookies.

5 Data Security

ac8 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, alteration, or destruction.

• SSL/TLS encryption: All data transmitted between your device and the ac8 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols. The padlock icon in your browser confirms that your connection is encrypted at all times.
• At-rest encryption: Sensitive personal and financial data stored in ac8's databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated on a regular schedule.
• Access controls: Access to personal data within ac8's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo data protection training and are bound by confidentiality agreements.
• Two-factor authentication: ac8 supports OTP-based two-factor authentication (2FA) for all player accounts and enforces 2FA for all internal staff accounts that have access to player data.
• Security monitoring: ac8 operates continuous 24/7 security monitoring of its Platform infrastructure. Intrusion detection systems and anomaly-detection algorithms flag unusual activity for immediate review by our security team.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, ac8 will notify affected users without undue delay and will take immediate remedial steps to contain and mitigate the breach.

6 Data Retention

ac8 retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or for as long as we are required to retain it by applicable law or regulatory obligation. The following retention periods apply:

• Active account data: Personal data associated with an active ac8 account is retained for the duration of the account's active status. This includes identity, contact, financial, and gaming activity data.
• Closed account data: Following the closure of an account — whether at your request or as a result of a terms violation — ac8 retains transaction records, KYC documents, and gaming activity logs for a minimum period of five years from the date of closure to satisfy anti-money-laundering regulatory requirements.
• Self-excluded accounts: Where an account has been self-excluded, the account record and associated data are retained for the full duration of the self-exclusion period plus a five-year regulatory compliance tail period. This retention prevents circumvention of self-exclusion by re-registration.
• Marketing data: Where you have provided consent for marketing communications, your contact details and preferences are retained until you withdraw consent, after which they are promptly removed from active marketing lists.
• Support interaction records: Records of customer support interactions (chat logs, email threads) are retained for three years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical and log data: Server logs, IP addresses, and session data are retained for a maximum of 12 months, after which they are deleted or anonymised.

At the end of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be linked to an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

7 Your Privacy Rights

As a data subject, you have a number of rights in relation to the personal data that ac8 holds about you. To exercise any of the rights described below, please contact our privacy team at [email protected] with the subject line "Privacy Rights Request" and include your registered account username and a description of the right you wish to exercise.

• Right of access: You have the right to request a copy of all personal data that ac8 holds about you, together with information about how it is processed, the lawful basis for processing, and the third parties with whom it has been shared.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by ac8 be corrected or completed without undue delay. You may update many of your account details directly via your account settings page.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. Note that this right is subject to our legal obligation to retain certain data for AML/KYC compliance periods.
• Right to restrict processing: You have the right to request that ac8 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You have the right to receive a copy of the personal data you provided to ac8 in a structured, commonly used, machine-readable format, and to request that this data be transmitted directly to another data controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where ac8 relies on legitimate interests as the lawful basis for processing, and where your particular situation gives rise to grounds for objection. You have an absolute right to object to processing for direct marketing purposes at any time.
• Rights related to automated decision-making: ac8 uses automated systems for fraud detection and responsible gaming monitoring. You have the right to request human review of any automated decision that significantly affects you, to express your point of view, and to contest the decision.

ac8 will respond to all privacy rights requests within 30 days of receipt. Where a request is particularly complex or numerous, we may extend this period by a further two months, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

8 Contact & Complaints

If you have any questions about this Privacy Policy, about the personal data ac8 holds about you, or about our data processing practices, please contact our privacy team using the details below. We aim to respond to all privacy enquiries within five business days.

• Email: [email protected] — please use the subject line "Privacy Enquiry" for faster routing.
• Live chat: Available 24/7 within the ac8 Platform after login. Our support agents can handle general privacy questions and escalate formal data rights requests to the privacy team.

If you are not satisfied with ac8's response to your privacy concern or believe that ac8 has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

ac8 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email or an on-platform notification prior to taking effect. The effective date at the top of this page will be updated with each revision. Your continued use of the ac8 Platform after any update constitutes your acceptance of the revised Privacy Policy.