aec67 Privacy Policy

1 Who We Are

aec67 is an online casino and sports betting platform operating at aec67.io. The platform is designed specifically for adult players in the Bangladesh market, providing access to casino games, live dealer tables, premium slot machines, crash games, and a wide range of sports betting markets including cricket BPL, IPL, T20 World Cup, and international football.

For the purposes of this Privacy Policy, aec67 is the data controller responsible for determining how and why your personal data is collected and processed. Any references to "the Platform" in this document refer to the aec67.io website, its associated mobile-optimised pages, and any other digital properties operated under the aec67 brand.

If you have any questions about our identity as a data controller or about any aspect of this Privacy Policy, please contact us at [email protected].

2 Data We Collect

aec67 collects personal data in the following categories. We only collect data that is necessary for the purposes described in this policy.

Special Category Data. aec67 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming or self-exclusion request. Such information is handled with the highest level of care and used solely for the purpose for which it was shared.

3 How We Collect Your Data

3.1 Directly From You. The majority of personal data aec67 holds is provided directly by you during the registration process, during account verification (KYC), when making a deposit or requesting a withdrawal, when contacting the support team, or when completing responsible gaming tools such as deposit limits or self-exclusion requests.

3.2 Automatically via the Platform. When you access and use the aec67 platform, certain technical and usage data is collected automatically via server logs, cookies, and analytics tools. This includes your IP address, the device and browser you use to access the platform, the pages you visit, the games you interact with, and the duration of your sessions. This data is collected whether or not you are logged in to an account.

3.3 From Third-Party Service Providers. aec67 may receive data about you from trusted third-party partners in specific circumstances, including: identity verification agencies used to confirm KYC documents; payment processors used to confirm transaction status; fraud detection services that flag suspicious account activity; and game providers who report game session outcomes to the platform.

3.4 From Public Sources. In limited circumstances related to fraud prevention or legal compliance, aec67 may consult publicly available information such as sanctions screening databases, publicly accessible court records, or official government alerts relevant to the Bangladesh market.

4 How We Use Your Data

aec67 uses the personal data it collects for the following purposes:

• Account Creation and Management: To register your account, verify your identity and age (21+ requirement), maintain your account profile, and deliver account-related communications including security alerts and transaction confirmations.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard, and to maintain accurate financial records of all transactions on your account.
• Platform Delivery: To provide access to casino games, live dealer tables, slot machines, and sports betting markets, and to record and settle all bets placed on your account.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, money laundering, unauthorised account access, multi-accounting, and bonus abuse. This includes automated monitoring of account behaviour patterns.
• Responsible Gaming: To monitor gambling behaviour for signs of problem gambling, to enforce deposit limits and self-exclusion periods set by the player, and to fulfil aec67's commitments to player welfare as described in the Responsible Gaming Policy.
• Legal and Regulatory Compliance: To maintain records required for audit purposes, to respond to lawful requests from law enforcement or regulatory authorities, and to enforce the aec67 Terms and Conditions.
• Customer Support: To respond to enquiries, investigate complaints, resolve disputes, and improve the quality of support provided to Bangladesh-market players.
• Marketing Communications: To send promotional emails and SMS messages regarding bonuses, new games, seasonal offers (such as Eid and Pohela Boishakh promotions), and platform updates — where you have consented to receive such communications.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the design, performance, and game selection of the aec67 platform.

aec67 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

5 Legal Basis for Processing

aec67 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary to deliver the services you have contracted for when registering an aec67 account. Without this processing, we cannot provide the platform.
• Legal Obligation: Certain processing activities — particularly identity verification, transaction record-keeping, and cooperation with law enforcement requests — are required by applicable law and cannot be waived by either party.
• Legitimate Interests: aec67 processes technical data and usage data on the basis of its legitimate interest in operating a secure, fraud-free platform and in improving the player experience. We balance our legitimate interests against your privacy rights and do not allow our interests to override yours.
• Consent: Marketing communications via email and SMS are sent only on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

6 Data Sharing & Third Parties

6.1 Service Partners. aec67 shares personal data with carefully selected third-party service providers who assist in delivering the platform. These include game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Play'n GO, Spribe), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard network partners), identity verification providers, fraud detection services, and cloud hosting infrastructure providers. All service partners are subject to contractual data protection obligations and are permitted to use your data only for the specific purpose for which it was shared.

6.2 Legal Disclosures. aec67 may disclose your personal data to law enforcement agencies, government authorities, financial intelligence units, or regulatory bodies where required to do so by law, court order, or in connection with the prevention or investigation of fraud, money laundering, or other criminal activity. Such disclosures will be made only to the extent strictly required.

6.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of the aec67 business or any part of it, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to data processing that result from it.

6.4 No Sale of Data. aec67 does not sell, rent, or lease your personal data to third-party advertisers, data brokers, or any other commercial entity. Your data is an asset of the relationship between you and aec67, not a commercial product.

6.5 Aggregated & Anonymised Data. aec67 may share aggregated, anonymised statistical data (for example, platform usage trends or game popularity metrics) with partners or for publication. This data cannot be used to identify any individual player and is not considered personal data for the purposes of this policy.

7 Cookies & Tracking Technologies

7.1 What Are Cookies. Cookies are small text files stored on your device by your web browser when you visit the aec67 platform. They allow the platform to recognise your device across sessions, maintain your login state, and remember your preferences. aec67 also uses similar tracking technologies such as web beacons and session tokens.

7.2 Types of Cookies Used. aec67 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for core platform functionality including login sessions, account security tokens, and payment process continuity. These cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Used to remember your preferences such as language settings, game display preferences, and responsible gaming tool configurations.
• Analytics Cookies: Used to collect aggregated data about how players interact with the platform, which pages are visited most frequently, and where technical errors occur. This data helps us improve the platform experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and suspicious login patterns. These cookies are essential to maintaining account security.

7.3 Managing Cookies. You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the aec67 platform. Instructions for managing cookies in common browsers are available through your browser's help documentation.

8 Data Retention

8.1 Retention Periods. aec67 retains personal data for as long as necessary to fulfil the purposes for which it was collected, to maintain an active account, or to comply with legal retention obligations. The following general retention periods apply:

• Account data (active accounts): Retained for the full duration of the account relationship plus a minimum of five (5) years following account closure, to satisfy financial record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the last transaction, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the communication, unless the communication relates to a dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Marketing consent records: Retained for as long as you remain an active marketing subscriber, plus two (2) years after opt-out to demonstrate compliance with consent obligations.
• Technical logs: Retained for twelve (12) months and then automatically purged unless flagged for security or fraud investigation purposes.

8.2 Deletion Requests. You may request deletion of your personal data at any time by contacting [email protected]. aec67 will process deletion requests promptly, subject to any legal obligations that require certain data to be retained. Where data must be retained for legal reasons, aec67 will restrict its use to only those legal purposes.

9 Your Data Rights

As a player on the aec67 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact [email protected] with your registered username and a clear description of your request. aec67 will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data that aec67 holds about you. aec67 will provide this information in a structured, commonly used, and machine-readable format upon request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by aec67. You may also update certain data fields directly within your account profile.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent, or where no overriding legal basis for retention applies.
• Right to Restriction: You have the right to request that aec67 restrict the processing of your personal data in certain circumstances, such as while a data accuracy dispute is being investigated.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a portable, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on aec67's legitimate interests. If you object, aec67 will cease the processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (including marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10 Data Security

10.1 Technical Safeguards. aec67 employs a comprehensive set of technical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, firewalled and access-controlled server infrastructure, intrusion detection systems, and regular third-party security audits.

10.2 Operational Safeguards. Access to player personal data within the aec67 organisation is restricted to personnel who have a genuine need-to-know basis for their role. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training. Access privileges are reviewed periodically and revoked immediately upon staff departure.

10.3 Two-Factor Authentication. aec67 implements two-factor authentication (2FA) via OTP sent to your registered mobile number as a standard security measure during login and for sensitive account actions. Players are strongly encouraged to keep their registered mobile number current to ensure uninterrupted access to 2FA.

10.4 Data Breach Response. In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, aec67 will notify affected players without undue delay and will take immediate remedial action. Breaches will be assessed, documented, and handled in accordance with aec67's internal incident response procedures.

10.5 Player Responsibility. While aec67 implements robust security measures on the platform side, you are also responsible for maintaining the security of your account credentials. Do not share your password, do not use the same password across multiple sites, and always log out of shared devices. aec67 is not liable for data breaches caused by a player's own failure to maintain adequate credential security.

11 Children & Minors

11.1 Strict 21+ Policy. The aec67 platform is strictly for adults aged 21 years and above. aec67 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the registration and KYC process, and aec67 actively employs measures to prevent underage registration.

11.2 Discovery of Minor's Data. If aec67 discovers or has reason to believe that personal data has been provided by or on behalf of a person under the age of 21, that data will be immediately deleted, the account will be permanently closed, and the matter may be referred to relevant authorities where appropriate.

11.3 Parental Concerns. If you believe a minor may have registered or attempted to register on the aec67 platform, please contact us immediately at [email protected]. We take all such reports seriously and will investigate and respond promptly.

12 Third-Party Links

The aec67 platform may contain references to third-party game providers whose game interfaces are embedded within the platform. While aec67 takes care to work only with reputable, certified providers, we are not responsible for the privacy practices of third-party studios or their data handling outside of what is explicitly covered by our data processing agreements with them.

The aec67 platform does not link to external websites, and no outbound links to third-party sites are present on the platform. This Privacy Policy applies solely to data processed by aec67 in the context of the aec67.io platform. If you interact with any third-party service accessible through embedded game content, the privacy policy of that third-party provider will govern the processing of any data collected in that context.

13 International Data Transfers

13.1 Primary Data Location. Personal data collected by aec67 from Bangladesh-market players is processed and stored on secured server infrastructure. Where data must be transferred to, or accessed by, service providers located outside Bangladesh — for example, international game providers or global payment network partners — aec67 ensures that appropriate data transfer safeguards are in place.

13.2 Transfer Safeguards. Where personal data is transferred internationally, aec67 requires that the receiving party provides an equivalent level of data protection through one or more of the following mechanisms: standard contractual data protection clauses incorporated into service agreements; the receiving party's adherence to a recognised data protection framework; or, where necessary and appropriate, your explicit consent to the specific transfer.

13.3 Player Enquiries. If you wish to obtain further information about the specific international transfers of your personal data or the safeguards in place, please contact [email protected].

14 Changes to This Privacy Policy

14.1 Right to Update. aec67 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in data processing practices, the introduction of new platform features, changes in applicable law, or other legitimate reasons. The effective date displayed at the top of this page will always reflect the date of the most recent revision.

14.2 Notification of Material Changes. When changes to this Privacy Policy are material — meaning they meaningfully affect how your personal data is collected, used, or shared — aec67 will notify registered players by email to their registered address and will display a prominent notice on the platform for a minimum of seven (7) days before the revised policy takes effect.

14.3 Continued Use as Acceptance. Continued use of the aec67 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Privacy Policy, you must stop using the platform and may request account closure by contacting [email protected] before the revised policy takes effect.

14.4 Previous Versions. Previous versions of this Privacy Policy are available upon request by contacting the aec67 support team. Requests for prior versions will be fulfilled within ten (10) business days.

15 Contact & Complaints

15.1 How to Contact Us. If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by aec67, please contact our support team using the details below. We aim to respond to all privacy-related enquiries within five (5) business days.

Email: [email protected]

Platform: aec67.io

Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

15.2 Complaints. If you are not satisfied with aec67's response to a privacy concern or data rights request, you have the right to escalate the matter. aec67 takes all privacy complaints seriously and will investigate every escalation through a formal internal review process. Please submit any formal complaints in writing to [email protected] with the subject line "Formal Privacy Complaint" along with a clear description of the issue, any previous correspondence, and the outcome you are seeking.

15.3 Response Timeframes. aec67 will acknowledge receipt of a formal privacy complaint within two (2) business days and will provide a substantive response within thirty (30) days of receipt. Where a complaint is complex or requires extensive investigation, we will notify you of any extension to this timeframe along with the reason for the delay.