ac99 Privacy Policy

ac99 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers on, or uses the ac99 platform at https://ac99.io (the "Platform"). This Privacy Policy describes in plain language the personal data we collect, the purposes for which we use it, the circumstances in which we may share it, the measures we take to keep it secure, and the rights you hold over your own information.

This Privacy Policy applies to all users of the ac99 Platform, including registered Players, visitors who browse without an account, and any individual who communicates with ac99 by email or any other means. It applies regardless of the device or network used to access the Platform.

By registering an account, making a deposit, placing a bet, or otherwise using the ac99 Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform and should contact us at [email protected] to request the closure of any existing account.

For the purposes of this Privacy Policy, ac99 acts as the data controller in respect of all personal data collected through the Platform. As the data controller, ac99 determines the purposes and means by which your personal data is processed.

All data-related enquiries, requests to exercise your rights, and formal complaints regarding the handling of your personal data should be directed to:

• Platform Name: ac99
• Website: https://ac99.io
• Data Privacy Contact: [email protected]
• Operating Hours: Bangladesh Standard Time (BST, UTC+6), Monday to Friday

The categories of personal data that ac99 collects are described below. We collect only the data that is necessary for the specific purpose identified, in accordance with the principle of data minimisation.

3.1 Registration and Identity Data

When you create an ac99 account, we collect the following information to establish and verify your identity:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the 21+ age requirement)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna)
• Email address
• Mobile telephone number
• Username and encrypted password
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

Before processing your first withdrawal request, ac99 is required to complete a Know Your Customer (KYC) verification process. This may involve collecting:

• A copy of your National Identity Card (NID), passport, or other government-issued photo ID
• A proof-of-address document (e.g., a recent utility bill or bank statement)
• A selfie photograph holding your identity document, where requested
• Proof of payment method ownership (e.g., a screenshot of your bKash or Nagad account showing your registered name)

3.3 Financial and Transaction Data

To process deposits and withdrawals, ac99 collects and records:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank)
• Mobile wallet number or bank account details associated with your payment method
• Transaction reference numbers and amounts (denominated in BDT)
• Deposit and withdrawal history
• Running account balance

3.4 Gameplay and Betting Activity Data

ac99 records your activity on the Platform to ensure fair play, detect fraud, and fulfil regulatory obligations. This includes:

• Game history (games played, bet amounts, outcomes, winnings)
• Sports betting history (markets selected, stakes, results)
• Bonus and promotion activity (bonuses claimed, wagering progress, expiry)
• Session duration, login and logout timestamps

3.5 Technical and Device Data

When you access the Platform, our servers automatically collect certain technical information about your device and connection:

• IP address
• Device type, operating system, and browser version
• Screen resolution and device language settings
• Referring URL (the page that linked you to ac99)
• Pages visited on the Platform and time spent on each page

3.6 Communications Data

When you contact ac99 via email or any other channel, we retain a record of that correspondence, including your contact details and the content of the communication. This data is used to resolve your query, improve our support services, and maintain a record of disputes or formal complaints.

ac99 collects your personal data through the following means:

ac99 does not purchase personal data from data brokers or any third-party list providers. All personal data we hold about you was either provided directly by you or generated by your use of the Platform.

ac99 processes your personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing is necessary to perform the contract between you and ac99 — namely, to provide you with access to the Platform and the Services (account creation, deposits, withdrawals, gameplay, and customer support).
• Legal Obligation: Processing is necessary to comply with legal obligations applicable to ac99's operation, including anti-money-laundering (AML) requirements, identity verification obligations, and record-keeping mandates.
• Legitimate Interests: Processing is necessary for ac99's legitimate interests, which include fraud prevention, platform security, responsible gaming monitoring, and the improvement of our Services — provided these interests are not overridden by your privacy rights.
• Consent: For certain non-essential processing activities — in particular, the sending of marketing communications — ac99 relies on your freely given, informed consent. You may withdraw this consent at any time by contacting [email protected].

The personal data collected by ac99 is used for the following specific purposes:

• Account Management: Creating, maintaining, and managing your ac99 account, including processing changes to your registered details and handling account closure requests.
• Identity Verification: Verifying your identity and age (21+) in compliance with our KYC obligations, and confirming that you are not subject to any self-exclusion or restriction that would prevent you from using the Services.
• Payment Processing: Processing your deposit and withdrawal requests via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), and maintaining accurate financial records of all transactions.
• Service Delivery: Providing access to casino games, sports betting markets (including cricket — BPL, IPL, T20 World Cup, Bangladesh Tigers), live casino, slots, and fishing games as offered on the Platform.
• Fraud and Security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, multi-accounting, unauthorised account access, and any other activity that violates our Terms & Conditions or applicable law.
• Responsible Gaming: Monitoring gameplay patterns to identify potential indicators of problem gambling and to support the application of responsible gaming tools such as deposit limits and self-exclusion.
• Legal Compliance: Complying with anti-money-laundering (AML) requirements, maintaining records as required by applicable law, and responding to lawful requests from competent authorities.
• Customer Support: Responding to your queries, processing complaints, and maintaining records of support interactions to improve our service quality.
• Marketing (Consent-Based): Where you have given your consent, sending you promotional communications about ac99 bonuses, new games, and seasonal promotions relevant to the Bangladesh market (e.g., Eid promotions, Pohela Boishakh offers). You may opt out at any time.
• Platform Improvement: Analysing aggregated and anonymised usage data to understand how Players interact with the Platform and to improve our game offering, user interface, and payment infrastructure.

ac99 does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

7.1 Payment Service Providers

To process your deposits and withdrawals, ac99 must share relevant transaction data with the payment service providers you select — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers receive only the data required to authorise and record your transaction. They are not permitted to use your data for any purpose other than completing the payment.

7.2 Identity Verification Partners

To complete KYC verification, ac99 may share your identity documents and personal details with trusted third-party identity verification service providers. These partners are contractually required to process your data solely for the purpose of verifying your identity on ac99's behalf and to maintain confidentiality.

7.3 Game Software Providers

The games available on the ac99 Platform are supplied by independent game studios including Pragmatic Play, Microgaming, Evolution Gaming, NetEnt, Ezugi, and Spribe. These providers may receive anonymised session identifiers or technical data necessary to deliver game functionality. They do not receive your name, contact details, or financial data.

7.4 Legal and Regulatory Authorities

ac99 may be required to disclose your personal data to competent law enforcement authorities, regulatory bodies, or courts of law where required by applicable law, a court order, or a lawful formal request. In all such cases, ac99 will disclose only the minimum data required to comply with the legal obligation and will, where legally permitted, notify you of the disclosure.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of ac99's assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, ac99 will notify affected users by email at least 30 days before the transfer takes effect and will ensure that the acquiring entity agrees to be bound by a privacy policy that provides equivalent protections to those set out in this Policy.

ac99 uses cookies and similar tracking technologies on the Platform to ensure the site functions correctly, to remember your preferences, and to analyse how the Platform is used. This section explains what cookies are, which types we use, and how you can manage your preferences.

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your preferences or actions across a session or over time.

8.2 Types of Cookies We Use

8.3 Managing Cookies

You may control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in to your account. Details of how to manage cookies in the most common browsers are available via the help section of your respective browser.

ac99 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the ac99 Platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Encrypted Password Storage: Account passwords are never stored in plain text. They are hashed using a strong cryptographic algorithm so that even ac99 staff cannot retrieve your original password.
• Access Controls: Access to personal data within the ac99 organisation is restricted to staff who require it to perform their job functions. Access is governed by role-based permissions that are reviewed regularly.
• Two-Step Verification: ac99 supports two-step verification (2SV) on user accounts as an additional layer of protection. Players are strongly encouraged to enable this feature in their account settings.
• Regular Security Audits: ac99 conducts periodic security reviews of its systems, infrastructure, and data-handling processes to identify and address potential vulnerabilities.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, ac99 will notify affected users by email within 72 hours of becoming aware of the incident, including information about the nature of the breach, the data involved, and the steps being taken to address it.

ac99 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The key retention periods we apply are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted from ac99's systems or rendered permanently anonymous so that it can no longer be attributed to an identifiable individual.

As a user of the ac99 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please send a written request to [email protected] with the subject line "PRIVACY REQUEST — [Right You Wish to Exercise]". ac99 will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data that ac99 holds about you, together with information about the purposes for which it is processed and the categories of third parties with whom it has been shared.
• Right to Rectification: You have the right to request the correction of any personal data that is inaccurate or incomplete. For minor corrections (such as a typographical error in your registered address), you may update your details directly in your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing and there are no overriding legitimate grounds. This right is subject to ac99's legal obligations to retain data for compliance purposes.
• Right to Restriction: You have the right to request that ac99 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and ac99 is assessing whether its legitimate interests override your objection.
• Right to Data Portability: Where ac99 processes your data on the basis of your consent or in the performance of a contract, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format and to request that it be transmitted directly to another data controller where technically feasible.
• Right to Object: You have the right to object at any time to ac99's processing of your personal data on the basis of legitimate interests. You may also object at any time to the use of your data for direct marketing purposes, in which case ac99 will cease all such processing immediately.
• Right to Withdraw Consent: Where ac99 processes your data on the basis of your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The ac99 Platform is strictly intended for individuals who are 21 years of age or older. ac99 does not knowingly collect personal data from individuals under the age of 21 and does not direct any of its Services, marketing communications, or content at minors.

If ac99 becomes aware that personal data belonging to a person under the age of 21 has been collected — whether through registration, a payment transaction, or any other means — we will immediately close the associated account, delete or securely anonymise all personal data collected from that individual, return any real-money deposits where operationally possible, and forfeit any Bonus Funds and associated winnings.

If you are a parent or guardian and believe that your child or a minor in your care may have registered an account on the ac99 Platform without authorisation, please contact us immediately at [email protected] with the subject line "MINOR ACCOUNT REPORT". We will investigate and take prompt remedial action.

The ac99 Platform may on occasion contain links or references to third-party websites, services, or resources that are not owned or controlled by ac99. This Privacy Policy applies solely to the ac99 Platform and does not extend to any third-party website or service.

ac99 has no control over, and accepts no responsibility for, the privacy practices, content, or data-handling policies of any third-party website. We strongly encourage you to review the privacy policy of any third-party site you visit before providing any personal information.

The inclusion of a link to a third-party website on the ac99 Platform does not constitute an endorsement, recommendation, or approval of that website or its privacy practices by ac99.

ac99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this Privacy Policy, we will notify you by:

• Posting a prominent notice on the ac99 Platform homepage for a minimum of 14 days prior to the changes taking effect
• Sending an email notification to your registered email address at least 14 days before the revised Policy comes into force
• Updating the "Last updated" date displayed at the top of this Privacy Policy document

Your continued use of the ac99 Platform after the revised Privacy Policy has come into force constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the Platform and may request the closure of your account by contacting [email protected] before the effective date of the changes.

Where a change to this Privacy Policy requires your fresh consent under applicable law — for example, where we intend to process your data for a materially new purpose — we will seek that consent explicitly before the new processing begins. We will not rely on the "continued use" acceptance mechanism for such changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which ac99 handles your personal data, please reach out to us using the contact details below. We are committed to responding to all privacy-related enquiries within 30 days of receipt.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Privacy Matters: PRIVACY REQUEST — [describe your query]
• Response Time: Within 30 days of receiving a valid, verifiable request
• Operating Hours: Monday to Friday, Bangladesh Standard Time (BST, UTC+6)

For urgent matters relating to a suspected data breach affecting your account, please email us immediately with the subject line "URGENT — DATA SECURITY". We operate a dedicated incident response process for security-related reports and will acknowledge receipt within 24 hours.