acv99 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how acv99 ("acv99", "we", "us", "our") collects, processes, stores, and shares personal information about you ("Player", "User", "You") when you register for, access, or use the acv99 platform at acv99.org and all associated services, games, and mobile applications. This Policy forms part of our Terms and Conditions and should be read alongside them.

By registering an account or continuing to use the acv99 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the acv99 platform and may request account closure by contacting our support team.

2. Your Privacy at a Glance

These six principles summarise how acv99 approaches your personal data. They are an overview only — please read each full section below for complete details.

3. Information We Collect

acv99 collects personal information in two ways: information you provide directly when registering and using the platform, and information we collect automatically through your use of the platform. We collect only the information that is reasonably necessary to provide you with a safe, fair, and functional gaming experience.

• Registration data — your full legal name, date of birth, mobile phone number, and the password you create for your account. This information is required to create your account, verify your age (21+ requirement), and secure your login.
• Identity verification (KYC) data — government-issued identification documents (such as a National ID card or passport), proof of address documents, and in some cases a selfie or photograph for biometric matching. KYC data is collected when required to verify your identity in accordance with responsible gaming and AML obligations.
• Financial and payment data — transaction history (deposits, withdrawals, bonuses), payment method details (mobile wallet numbers for bKash, Nagad, Rocket; partial card numbers for Visa/Mastercard; bank account references for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). Full card numbers are never stored on acv99 servers.
• Gaming activity data — game history, bet amounts, win/loss records, bonus usage, session durations, and responsible gaming tool settings (deposit limits, cooling-off periods, self-exclusion status). This data is used to deliver the gaming service, calculate and credit winnings, and monitor for responsible gaming compliance.
• Technical and device data — IP address, device type, operating system, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6), and connection type. This data is collected automatically when you access acv99 and is used for fraud prevention, security monitoring, and service optimisation.
• Communication data — records of your communications with the acv99 support team via email or live chat, including the content of support requests, complaint records, and responsible gaming requests. These records are retained to ensure quality assurance and to maintain an accurate account history.

acv99 does not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data) except where identity verification documents incidentally contain such information as part of their standard format. Where this occurs, such data is used exclusively for identity verification purposes and is not processed for any other purpose.

4. How We Use Your Information

acv99 uses the personal information we collect for the following purposes. We apply a data minimisation principle — we use only the data necessary for each specific purpose and do not process your data in ways that are incompatible with the purpose for which it was originally collected.

• Account management — to create and maintain your acv99 account, verify your identity, process deposits and withdrawals, apply bonuses, and provide you with access to all games and services on the platform.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, account takeover attempts, collusion, money laundering, and other prohibited conduct. This includes automated analysis of transaction patterns and device fingerprinting.
• Responsible gaming compliance — to monitor gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion orders, and contact players who may benefit from responsible gaming support. We take our duty of care to players seriously.
• Service improvement — to analyse aggregated and anonymised usage data to improve the platform's performance, game selection, payment processing speed, and user interface. Individual players are not identified in aggregated analytics.
• Marketing communications — to send you information about acv99 promotions, bonuses, new games, and seasonal events (such as BPL, Eid, IPL, and Pohela Boishakh special offers) via email and SMS, where you have consented to receive such communications. You may opt out at any time.
• Legal and regulatory compliance — to comply with applicable laws and regulations, respond to lawful requests from competent authorities, and maintain records required by anti-money-laundering (AML) and responsible gaming regulations.

5. Legal Basis for Processing

acv99 processes your personal data on one or more of the following legal bases. Where we rely on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

• Contract performance — processing your registration data, KYC data, financial data, and gaming activity data is necessary to fulfil our contractual obligations to you as an acv99 account holder. Without this processing we cannot provide the service.
• Legal obligation — processing for KYC/AML compliance, fraud prevention reporting, and regulatory record-keeping is required by law. acv99 is not able to waive these processing activities at your request.
• Legitimate interests — processing for fraud detection, security monitoring, service improvement, and responsible gaming compliance is carried out on the basis of acv99's legitimate interests in operating a safe and fair platform, provided those interests are not overridden by your privacy rights.
• Consent — processing for marketing communications is carried out on the basis of your consent, provided at registration or subsequently updated in your account communication preferences. You may withdraw marketing consent at any time.

6. Sharing Your Information

acv99 does not sell your personal data. We share your information only in the limited circumstances described below. In all cases, data sharing is governed by appropriate data processing agreements and security obligations. Third parties who receive your data are permitted to use it only for the specific purpose for which it was shared.

• Payment service providers — bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive the minimum payment data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy frameworks and security standards.
• Identity verification providers — third-party KYC service providers who assist with verifying government-issued identification documents and conducting age verification checks. These providers process only the specific identity documents submitted for verification.
• Technology and infrastructure providers — cloud hosting providers, content delivery networks, and cybersecurity service providers who process technical data as part of delivering a secure and performant platform. These providers act as data processors under our instruction and may not use your data independently.
• Competent authorities — government agencies, law enforcement bodies, financial intelligence units, or courts where disclosure is required by applicable law, a valid court order, or a lawful regulatory request. acv99 will notify you of any such disclosure where legally permitted to do so.

7. Cookies & Tracking Technologies

acv99 uses cookies and similar tracking technologies (including local storage and session storage) to deliver and improve the platform experience. Cookies are small text files placed on your device by your browser when you visit acv99.org. They allow the platform to remember your session, maintain your login state, and personalise certain aspects of your experience.

acv99 uses the following categories of cookies. Essential cookies cannot be disabled as they are required for the platform to function. Non-essential cookies may be managed through your browser settings, though doing so may affect some platform functionality.

• Essential cookies — required for core platform functionality, including session management, login authentication, and security token validation. These cookies are set automatically and cannot be disabled without breaking the platform.
• Functional cookies — used to remember your platform preferences such as language setting, responsible gaming tool configurations, and display preferences. Disabling these cookies means your preferences will not be saved between sessions.
• Analytics cookies — used to collect anonymised and aggregated data about how players use the acv99 platform. This data helps us understand which features are most used, where players encounter difficulties, and how to improve the overall experience. No individual player is identifiable from analytics data.

8. Data Retention

acv99 retains your personal data for as long as your account remains active and for a period thereafter as required by our legal and regulatory obligations. For active accounts, all categories of personal data are retained for the duration of the account relationship. Upon account closure, acv99 applies the following retention periods: registration and KYC data is retained for a minimum of 5 years from account closure to meet AML record-keeping requirements; financial transaction records are retained for a minimum of 5 years; gaming activity logs are retained for 3 years; communication records are retained for 2 years.

Once the applicable retention period has expired, acv99 will securely delete or anonymise your personal data so that it can no longer be attributed to you. Where we have anonymised data (rather than deleted it), that anonymised data may be retained indefinitely for statistical and analytical purposes, as it is no longer personal data.

9. Your Rights

As an acv99 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond to all valid requests within 30 days. We may need to verify your identity before processing certain requests.

• Right of access — you have the right to request a copy of all personal data acv99 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of a valid request.
• Right to rectification — you have the right to request correction of any inaccurate or incomplete personal data held about you. You may also update certain account details (such as your mobile number or communication preferences) directly within your account settings.
• Right to erasure — you have the right to request deletion of your personal data, subject to our legal retention obligations. We cannot delete data that we are required by law to retain (such as AML transaction records), but we will delete all data that is not subject to a mandatory retention obligation.
• Right to object to marketing — you have the right to object to processing of your personal data for direct marketing purposes at any time. Upon receiving a valid objection, acv99 will cease processing your data for marketing within 5 business days.
• Right to data portability — you have the right to receive a copy of the personal data you provided to acv99 in a structured, machine-readable format, and to request that this data be transmitted to another service provider where technically feasible.

10. Security Measures

acv99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication options for player accounts, role-based access controls limiting internal data access to authorised personnel only, regular security audits and vulnerability assessments, and 24/7 infrastructure monitoring for anomalous activity.

Despite these measures, no online platform can guarantee absolute security. If you believe your acv99 account has been compromised, please contact our support team immediately at [email protected] so we can take prompt protective action, including suspending the account, reversing any unauthorised transactions where possible, and issuing new login credentials.

11. Children's Privacy

The acv99 platform is strictly intended for adults aged 21 years and above. acv99 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will immediately close the associated account, delete the personal data, and return any deposited funds following verification of the account holder's actual age.

12. Third-Party Links

The acv99 platform does not include links to third-party websites, social media platforms, or external applications. If you encounter a link purporting to lead to an acv99 partner, affiliate, or associated service from a third-party website, acv99 is not responsible for the privacy practices or content of that third-party site. Always verify that you are accessing the genuine acv99 platform at acv99.org before entering any login credentials or payment details.

13. Changes to This Policy

acv99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes to this Policy, we will notify registered players via the mobile number or email associated with their account and display a prominent notice on the platform for a minimum of 7 days before the updated Policy takes effect.

The date at the top of this Policy indicates when it was last updated. Your continued use of the acv99 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with an updated Policy, you may request account closure by contacting [email protected].

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way acv99 handles your personal data, please contact our support team. Our team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).