ach67 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") describes how ach67 ("ach67", "We", "Us", "Our") collects, uses, stores, shares, and protects the personal information of individuals ("You", "User", "Player") who access or use the ach67 website at ach67.club and any associated subdomains, mobile browser experiences, and related services. By registering an account, making a deposit, placing a wager, or otherwise using any part of the ach67 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal information as described herein. This Policy is incorporated by reference into the ach67 Terms & Conditions, and by agreeing to those Terms you also agree to this Policy.

ach67 is committed to processing personal data in a lawful, fair, and transparent manner, limiting data collection to what is necessary for the purposes described in this Policy, retaining data only as long as required, and implementing appropriate technical and organisational security measures to protect data from unauthorised access, loss, or disclosure. If you have any questions about this Policy or about how ach67 processes your personal data, please contact our support team at [email protected].

ach67 processes your personal data only for the purposes described in this Policy. The primary purposes for which we use your data are as follows:

• To create and maintain your ach67 account, including verifying your identity and age in accordance with the 21+ requirement;
• To process deposits, withdrawals, and wager settlements via bKash, Nagad, Rocket, Upay, and bank transfer;
• To provide customer support and respond to account, payment, or game-related queries submitted to [email protected];
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other violations of the ach67 Terms & Conditions;
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts via SMS or email to your registered contact details;
• To comply with applicable legal obligations, including responding to lawful requests from law enforcement or regulatory authorities.

ach67 does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you without your explicit consent. We do not use your personal data to serve you third-party advertising or to build advertising profiles for sale to other organisations.

ach67 processes your personal data on the following legal bases: (a) Performance of a contract — processing your registration data, payment data, and wagering records is necessary to fulfil the account agreement between you and ach67; (b) Legal obligation — processing may be required to comply with anti-money laundering requirements, age verification obligations, or responses to lawful authority requests; (c) Legitimate interests — we process certain technical and device data to protect the security and integrity of the ach67 platform, detect fraud, and optimise platform performance for players across Bangladesh.

Where ach67 relies on your consent as the legal basis for any processing activity (for example, sending promotional communications beyond transactional notifications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for promotional communications, contact [email protected] or update your preferences in your account settings.

ach67 does not sell, rent, or trade your personal data to any third party. However, we may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, to the extent necessary to process your deposit and withdrawal transactions;
• Game and platform technology providers — third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and platform infrastructure providers, to the extent necessary to deliver the game experience and maintain platform security;
• Fraud prevention and identity verification services — third-party providers used to verify player identity during KYC checks and to monitor for fraudulent account activity;
• Law enforcement and regulatory authorities — where ach67 is required by applicable law, court order, or lawful authority to disclose personal data, we will comply with such requirements and will notify you where permitted to do so.

Any third party to whom ach67 discloses personal data under a service agreement is required by contract to handle that data in accordance with applicable data protection standards, to use it only for the specific purpose for which it was disclosed, and not to retain it longer than necessary. ach67 does not knowingly transfer personal data to jurisdictions with inadequate data protection standards without implementing appropriate safeguards.

ach67 uses cookies and similar browser-based tracking technologies (including local storage and session storage) to maintain your login session, remember your account preferences, detect and prevent fraudulent activity, and monitor platform performance. Cookies are small text files stored on your device by your browser. ach67 does not use cookies to track your browsing activity on third-party websites or to build advertising profiles. The cookies used on ach67 are primarily session cookies (which expire when you close your browser) and short-lived functional cookies (which persist for the duration of your account session to maintain your logged-in state).

Most mobile browsers allow you to control cookie settings through the browser's privacy or settings menu. However, disabling cookies on ach67 may affect your ability to log in and use certain features of the platform. If you are using Chrome on Android or Safari on iOS, cookie settings can be managed through your browser's Settings menu. ach67 does not use third-party advertising cookies or social media tracking pixels.

ach67 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your browser and the ach67 platform; access controls that restrict internal access to personal data to authorised personnel only on a need-to-know basis; encrypted storage of sensitive account data; regular security reviews and vulnerability assessments of platform infrastructure; and secure, access-controlled logging of all account transactions and system events.

Whilst ach67 takes data security seriously and implements the measures described above, no method of electronic storage or transmission over the internet is completely secure. ach67 cannot guarantee absolute security of your personal data. You play an important role in keeping your account secure: use a strong, unique password for your ach67 account, never share your login credentials, and log out from shared or public devices after each session. If you believe your account has been compromised, contact [email protected] immediately.

ach67 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. Specifically: account registration and identity data is retained for the duration of your account and for a minimum of five years following account closure, in line with standard anti-money laundering record-keeping requirements; transaction data (deposits, withdrawals, wagers) is retained for a minimum of five years following the date of each transaction; communications data (support correspondence) is retained for two years from the date of the last exchange; technical and device data collected for security and fraud detection purposes is retained for up to 12 months. When personal data is no longer required, ach67 will delete or anonymise it securely. If you request deletion of your account, ach67 will delete or anonymise your personal data subject to any legal retention obligations that apply.

ach67 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under 21 years of age. The 21+ age requirement is enforced at registration through age declaration, and may be followed by documentary KYC verification at any time. If ach67 becomes aware that personal data has been collected from a person under 21 without parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe a minor has registered on ach67, please contact [email protected] immediately so we can investigate and take appropriate action.

ach67 reserves the right to update this Privacy Policy at any time. When we make changes, we will update the "Last updated" date at the top of this page. Where changes are material — meaning they significantly affect how your personal data is used or your rights as a data subject — ach67 will make reasonable efforts to notify active players via SMS to their registered mobile number prior to the change taking effect. Your continued use of ach67 following the publication of an updated Privacy Policy constitutes acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed of how ach67 handles your personal data.

If you wish to exercise any of your privacy rights, have a question about this Privacy Policy, or want to make a complaint about how ach67 has handled your personal data, please contact our support team at [email protected]. Please include your registered mobile number and a clear description of your request in all correspondence. We aim to acknowledge all privacy-related requests within 24 hours and to resolve them within 10 business days. ach67 support is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).